This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier: vUGdt0z8VOqRKOpdoYr4aIG44HMPKLk1495F2elvXmQ=
Subject key identifier: 59:3A:EA:EE:47:FF:2A:BD:6B:84:49:15:BA:B4:DE:80:EF:E1:B1:78
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial: 13E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number: 13E0
Signing time: Wed 31 Dec 2025 16:43:00 +0000
Manifest this update: Wed 31 Dec 2025 16:43:00 +0000
Manifest next update: Wed 07 Jan 2026 16:43:00 +0000
Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: ioYo81Zn8jhCIbYjqY8wz6uucunO8/P2HvPtySzW700=)
2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: WNdbUIrq72HztcMiWEgIIxA2+CqivH5XP6V6egY23qM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 16:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5096 (0x13e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Validity
Not Before: Dec 31 16:43:00 2025 GMT
Not After : Jan 7 16:43:00 2026 GMT
Subject: CN=69555294-df09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:4e:cd:b9:02:2a:12:57:6c:99:42:54:7f:
ae:3d:c4:bc:3f:9f:6b:d7:5a:09:ba:43:f0:76:04:
a1:28:67:76:0b:e2:1d:b5:fc:15:89:43:8e:46:9c:
ec:ff:93:a2:07:b4:ec:81:00:6f:6c:55:f7:dd:d6:
11:1c:15:27:13:ca:6a:90:d2:87:92:48:70:9f:88:
4e:b3:e8:57:e2:3d:05:11:e9:a8:2f:90:03:f8:a4:
a3:03:1e:26:22:11:ef:a0:82:80:21:fa:af:10:10:
b1:de:45:06:17:c2:3d:5b:8c:66:8f:c1:b6:d6:9b:
14:65:1a:25:81:6b:bb:5d:c9:94:ef:b9:09:58:e2:
67:8d:cf:80:1f:84:9f:08:64:95:ba:21:89:d6:6f:
08:10:6e:30:74:47:9f:90:48:2d:26:af:eb:86:0e:
db:aa:6a:ed:5e:42:5d:0c:8a:28:d4:b8:db:46:42:
48:aa:ce:bf:21:5e:b0:b2:de:a5:f6:88:64:d1:23:
d8:4e:bd:6d:e6:27:e5:b6:bb:e2:24:e8:c4:51:c2:
ef:32:43:b4:f7:dc:5a:56:77:8f:f1:87:98:da:c0:
1b:56:0a:4e:3f:d0:ab:d9:d5:fb:e3:85:8b:d4:19:
50:28:8d:14:64:b9:0b:a5:b7:2e:38:cf:40:f5:24:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:EA:EE:47:FF:2A:BD:6B:84:49:15:BA:B4:DE:80:EF:E1:B1:78
X509v3 Authority Key Identifier:
keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:24:1e:61:ba:a4:1e:e6:fb:28:9d:a9:a6:2f:7e:7c:84:
32:13:de:3c:85:57:c5:4f:ce:7b:a2:37:2b:af:64:ff:9d:84:
a8:b9:69:76:57:2f:76:b7:92:2d:9b:25:11:12:54:a7:07:38:
61:69:54:73:12:b6:2d:02:73:8c:90:4f:b9:f0:ce:05:a0:7f:
0f:25:18:27:c8:8f:07:aa:ee:bb:53:d9:b4:08:eb:fe:33:90:
b5:a8:04:79:6a:79:96:ec:e7:86:6e:84:a1:65:ab:42:06:98:
50:2c:b5:d1:0f:5c:1c:31:cb:60:93:e5:68:3c:b8:ee:f0:bb:
ad:24:9d:f2:55:f2:c9:8b:c2:b7:eb:5d:16:55:91:66:45:7d:
5e:34:bc:00:c8:78:f8:eb:de:1f:6f:3e:d1:cc:eb:c2:ee:db:
18:7a:2f:31:1d:ed:ef:9a:f9:e4:eb:02:13:1d:e9:25:28:7e:
dc:86:01:77:39:3b:98:91:c6:fc:eb:29:a9:e5:f3:2d:af:9a:
06:44:89:f9:ee:5f:2f:07:60:1f:4c:6c:ad:16:3b:2b:ad:99:
55:b4:d3:59:b0:96:47:39:2d:ab:dc:65:31:d5:b6:9b:b2:18:
6b:81:59:fe:97:95:cc:c9:00:b7:a6:f6:d3:7a:be:0d:f7:a6:
fd:1e:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:01:57 2026 by rpki-client