This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier: GR1OAX+/S8LtauRY5x5NphYo6ckuuDvFyAH9VnITwoM=
Subject key identifier: 74:C2:0B:EB:62:1F:A4:C9:8D:2C:98:28:B5:F8:6B:22:E1:8E:F8:E6
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number: FA
Signing time: Sun 21 Dec 2025 04:32:36 +0000
Manifest this update: Sun 21 Dec 2025 04:32:35 +0000
Manifest next update: Sun 28 Dec 2025 04:32:35 +0000
Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: SXAIAuODybtnhA+BoFkruU17bSYo+oZrWXeC6pfEVYI=)
2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=)
3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Dec 21 04:32:35 2025 GMT
Not After : Dec 28 04:32:35 2025 GMT
Subject: CN=69477864-a8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:fe:a0:a5:11:ec:4f:3c:4e:5b:61:7a:71:
65:ee:f3:3e:df:c6:eb:bd:2e:53:bd:95:57:82:f0:
2a:5e:f8:64:0d:20:da:19:bb:fc:5d:44:17:04:62:
08:3d:89:7b:36:dc:5b:20:7f:1a:70:d3:85:9f:3b:
b6:03:c5:96:d5:25:5d:0e:aa:df:b5:ff:71:5a:83:
51:e4:3b:8d:be:c2:e6:f5:2b:b6:6c:f9:7a:49:28:
57:66:d8:72:41:03:a5:a9:ea:12:70:ba:c3:84:ea:
12:c7:a6:a3:4b:61:9c:12:fe:20:0b:7a:73:8c:f8:
06:2c:88:d2:6a:91:5e:dc:83:e2:9a:d3:2e:0b:cc:
41:09:a3:37:04:82:05:c3:9f:b7:9f:9e:52:97:56:
f0:2c:81:ae:8e:d7:3d:a8:bb:1b:26:2a:78:9f:68:
56:83:25:7f:23:d8:c2:23:97:25:d3:0a:ca:48:bc:
57:1b:00:84:f5:80:ef:49:36:85:93:75:d4:a7:88:
16:eb:9d:8b:82:d5:7a:2a:03:b9:4c:a3:f7:ed:ba:
09:98:cb:7d:15:64:0c:98:9e:ac:74:66:cb:cd:da:
14:38:a2:57:7e:9b:ac:6e:3a:19:f7:6e:c9:94:78:
06:16:27:74:81:04:6b:e7:1b:9d:fb:be:0c:40:84:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:0B:EB:62:1F:A4:C9:8D:2C:98:28:B5:F8:6B:22:E1:8E:F8:E6
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dd:af:39:f2:26:43:2b:10:a1:64:77:fe:8c:ae:59:7c:6c:
6e:ce:f8:b6:ad:a4:7b:ed:c3:f3:82:61:26:e6:b8:a8:b4:41:
d7:97:bd:a9:41:9d:9c:cd:c4:bb:fe:3b:76:17:1f:15:52:3f:
00:6a:c3:d8:b7:cc:13:19:ff:74:33:31:bd:4b:46:d7:e5:b2:
7b:fb:c6:44:aa:f8:72:a0:84:41:b3:12:78:88:d2:69:0b:f0:
1e:28:44:b5:bd:d3:2d:4a:2f:ec:fd:77:8b:8d:ed:e5:8e:93:
5a:30:85:e8:a6:97:67:58:e1:42:53:ac:1b:79:0c:27:d9:b2:
d1:76:60:4a:e3:b4:d8:18:a3:33:06:e9:a0:05:46:ab:4e:61:
38:5e:f6:f1:25:94:b9:9d:f5:63:2a:7a:ee:bf:49:5f:a2:d1:
6d:df:75:f4:a5:6f:c7:3e:08:0d:3c:30:08:6e:d2:3f:52:96:
6a:1a:e2:c5:f7:7b:21:7b:76:0b:a7:3c:4b:a6:80:c6:29:09:
34:b7:47:2f:e7:72:e5:72:32:16:7c:73:ab:a5:9c:f7:fd:11:
f3:59:b3:00:24:00:3e:17:d3:2a:a7:09:9e:6f:1c:49:3b:47:
f4:0b:e2:d9:09:dc:29:03:cd:85:c5:f2:9b:0b:fa:ca:3f:0c:
b6:fc:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:57:49 2025 by rpki-client