This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File: ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier: 7kb4Aa+E8Req3FAYTfOEHpIF+HqyNoKUXhX1PMQZVOE=
Subject key identifier: BB:98:C9:6C:4F:B2:64:F4:EE:9B:83:A9:D1:E8:4E:7D:D3:D6:A1:71
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 3761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number: 35E6
Signing time: Sat 20 Dec 2025 14:44:49 +0000
Manifest this update: Sat 20 Dec 2025 14:44:48 +0000
Manifest next update: Sat 27 Dec 2025 14:44:48 +0000
Files and hashes: 1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: RQ7/S8mo6uJpDRA1azHYki6tHhQi7QUFdxEXwRAzf1k=)
2: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: YIkgFm4YlQ3B4lEIbOf0SksB4/x97E+3vlPXwWTeW9Y=)
3: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I=)
4: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: RZHpITklMqhnuO90bEeP3i7RWRtO5TJRoQwAU5BGgUs=)
5: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=)
6: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: C9sOI6EfTgRnMQGNjlrtl3KFe7JPwkVRiva430VVNhg=)
7: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: Pysow4ghhE6bNtWAkyi1inOqPNBVAlZxtG0k9FkRDpM=)
8: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: /p/aYFDXmU+p5r2x/x59lnZ8e1gVGwdb3q9zI0rbkwk=)
9: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: idSl8lJvkqdSo60nq2wum68o9p4rKFmDbGlEVDUP4DE=)
10: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: va72E7xgUhipybtVeUXFFu66WOtMudWBDnK3BZLcOzk=)
11: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=)
12: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: ukv1HUDNVDJbCJlkSDyGbdgGzyB74+5Ji2qFWgrv0gw=)
13: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=)
14: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: twGH4Ti0Hxo3XFvPXLG4LeJ5bIvmDJLFNJkw3EGUZio=)
15: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: JRI97yoxRtupHfmn7kbQDCY5sz6BBIJOh/q9HLp8tPI=)
16: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: EUm4AnmfuJxU75sTZEUXibkajEE5FVqoIFPKGh69ArU=)
17: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=)
18: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo=)
19: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hk6nfRNdxkr1KrGE/tfXLkIoFCaShIIlre48Dkw+60k=)
20: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: 74RIIXCsVyk2LOqxXGG8myKMnT9xwaL2IEwmBulTtc4=)
21: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: GJ+Ts94sVlUdI4E9xrQTvfVMrj+KCnN2xtF35+3yCvE=)
22: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: Qoz5g9368HMZWctAVVNXY9CZ9LyOlyI2/eGHTTT7kQw=)
23: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: jlbUlIXnT9veJGusBLS+x09R8IWreW5sDY2cRLkBosA=)
24: 35575C68844811EAB301615FC4F9AE02.roa (hash: IpJzY/E3RfTD/Jty42OF5cBR7XD15VMXMCEpMRRL3LU=)
25: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: VYBHve/PNmOFeIWgiVN/Red7+4ngw1/OUZ+8fRDI5rI=)
26: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: JqpaA6uavzScEzQE05g7FN0bGDgZqNMIyby4mXtlKkU=)
27: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: VrbZ7ZecbNcImk9iVkkzXLKwbDb+F2iSfzr14g+V7aQ=)
28: 35E95924844811EAB301615FC4F9AE02.roa (hash: LgoFbTvnCYGxtb9l3zKpoNxXJ+KSjB/JRV9oy3sEYvk=)
29: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: jV1pO0tJQkm8tDF//+xAb/Vr8QQlVyReb+p4WbFsB4g=)
30: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: hFXanv2FdjB0oerr/Ni9RmWLKXd7bj75bYHKTp5JZ4U=)
31: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: irNVJAgK3pBegIwIYQHvfU2ICa37uezrCrR7Sshxk/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14177 (0x3761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Dec 20 14:44:48 2025 GMT
Not After : Dec 27 14:44:48 2025 GMT
Subject: CN=6946b660-44ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:66:92:16:88:8c:41:85:4a:fd:c5:64:7c:
ed:28:95:29:c7:e0:93:3e:f4:5d:07:20:68:47:c3:
ab:e0:c2:bf:8a:d3:88:01:72:61:4f:61:35:70:bd:
fe:0a:c5:78:f5:57:73:14:2c:b6:3e:48:1e:4d:35:
08:a8:c1:af:99:98:2a:2d:d5:d9:d1:4b:0f:08:ce:
61:6d:17:13:86:f9:b9:4c:ad:c3:7d:66:1d:c0:e9:
53:f8:df:60:8b:d2:21:93:b0:8c:8a:5a:6d:65:9c:
50:54:13:63:35:63:3c:05:8c:ed:fe:1b:e3:42:74:
5b:e8:a6:61:bf:90:62:71:b9:32:3b:83:c6:38:96:
ad:d4:8b:f8:d1:b9:0a:e5:71:b9:ba:cf:fc:74:25:
92:43:5c:4c:00:57:1f:08:ca:7c:a1:9c:44:65:75:
e9:2c:bc:87:60:b4:bc:fe:a8:b9:be:6a:eb:61:42:
b4:91:e2:33:8e:4a:77:53:1e:01:9a:8d:5b:f3:22:
88:82:9a:ae:70:ee:f9:7c:ad:c7:83:45:a4:3f:02:
8c:7b:f6:b3:c8:c4:d2:a0:dd:f4:fa:9f:f8:a0:7a:
ed:48:18:93:cb:c0:ef:05:54:d8:fa:cc:c1:bc:15:
57:cf:8e:cc:c4:b6:5f:3f:71:21:48:99:51:92:28:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:C9:6C:4F:B2:64:F4:EE:9B:83:A9:D1:E8:4E:7D:D3:D6:A1:71
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0a:49:77:f2:d0:e5:8c:c9:e2:71:ec:e6:d9:fd:cb:27:e7:
c6:d9:75:b5:c6:6b:fc:da:99:78:45:c2:f6:95:e3:cb:cb:9c:
cc:1d:2b:5e:ab:d2:8e:eb:a1:3e:53:16:2b:6a:b5:66:49:8a:
55:3e:43:77:ac:ba:43:1b:d7:2a:7d:6a:09:99:9c:99:ca:1b:
de:a7:90:84:a7:01:c3:1c:5b:fc:74:58:a6:ca:33:69:30:1b:
1f:54:12:fd:d8:5b:d8:12:9c:1e:f0:6a:8b:89:87:b0:69:3b:
31:ef:31:d9:34:d0:20:a1:d2:ff:f4:65:d4:66:bb:51:63:0b:
97:c3:43:8b:28:3a:71:9c:a8:47:d6:b8:8a:a1:5c:9f:cf:07:
c8:2e:c7:30:4a:0a:20:54:4d:46:09:b7:45:e7:cb:07:2a:76:
c3:9c:9f:30:74:6e:df:5e:7e:82:19:88:c9:d8:20:e7:07:ba:
9b:92:22:8d:8d:23:95:3a:b2:72:ff:29:07:74:68:33:cc:4c:
22:32:6e:f3:98:c6:90:9d:86:d0:70:6c:e0:78:c5:f9:b6:29:
b6:91:e6:de:68:95:f9:54:ff:11:a0:4b:fd:a3:4e:40:5d:bf:
6c:6d:91:be:db:65:00:fb:8a:92:e6:ad:81:a2:78:ee:c7:de:
e2:dd:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:15:02 2025 by rpki-client