This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json)
Hash identifier: IEq0lVyOQZtutT+FQyLVTVkgo7+NeTt8EGiM/eID2qY=
Subject key identifier: EF:28:7C:67:9A:7F:38:A2:10:1F:56:2D:E4:E3:26:66:AC:09:6E:43
Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03
Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
Manifest number: 94
Signing time: Fri 19 Dec 2025 05:33:40 +0000
Manifest this update: Fri 19 Dec 2025 05:33:39 +0000
Manifest next update: Fri 26 Dec 2025 05:33:39 +0000
Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: jqjnZMkixQMQKVhksXGne+Cl9lT2+R6+c+sMZd58J8M=)
2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: t9LgVYyuR76/7PmfedGxaDrMAlK0pUEQonnQh6SyVwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl
rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
Validity
Not Before: Dec 19 05:33:39 2025 GMT
Not After : Dec 26 05:33:39 2025 GMT
Subject: CN=6944e3b3-2aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:a6:26:f5:9c:64:9a:e8:d8:8f:93:81:f8:
5b:88:72:02:20:63:3f:7f:b2:47:85:f6:24:77:5e:
2e:e7:0b:71:83:ce:3e:96:fd:6c:2f:91:ff:49:91:
3c:a3:e7:87:8e:3e:02:ba:fd:af:ec:69:84:8c:fd:
4a:8a:a3:d2:92:c1:05:81:96:c6:c4:60:6e:97:69:
90:27:18:58:67:8b:fd:ff:a6:3f:5a:9c:eb:fd:6f:
d2:d6:01:6c:b3:f5:92:27:b6:fd:b5:e9:32:b8:12:
99:c3:98:cc:b6:7c:ab:34:e3:62:d6:2e:0a:20:fd:
6e:49:fb:ad:9d:f9:f4:66:d8:4f:fe:a6:9b:77:87:
3f:89:fd:a2:b6:e4:9a:7d:10:49:46:6b:3e:cb:30:
86:72:56:24:ff:98:c2:20:8f:87:80:08:dc:09:fe:
6b:8b:7f:ae:3d:f9:ac:74:b2:cb:07:17:3b:e3:f3:
eb:56:db:82:30:92:5f:b1:76:b1:e4:17:9f:83:fa:
d8:c2:b4:9b:bc:8f:08:53:bc:a0:61:65:68:fa:0f:
12:35:d0:ad:e8:2a:c2:0f:8a:eb:b9:f3:5f:7d:5c:
75:57:c0:3f:43:56:fe:c0:15:4b:a2:9a:7b:d4:53:
e4:db:df:ea:09:78:37:37:d6:34:11:80:f3:5d:7c:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:7C:67:9A:7F:38:A2:10:1F:56:2D:E4:E3:26:66:AC:09:6E:43
X509v3 Authority Key Identifier:
keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ee:e9:65:d2:50:cd:df:11:03:86:b2:b4:cd:2c:a4:70:89:
dc:23:55:93:d4:72:28:a9:37:44:4a:2f:98:f2:bc:f3:95:b9:
1a:0c:e5:96:d5:9f:71:c3:c7:89:e8:d5:f9:b4:4f:67:74:8b:
bd:ca:5f:c0:de:07:c6:8e:2f:6a:14:d8:c5:dc:e7:7c:4d:c7:
4e:cf:a3:19:45:9a:90:f2:97:6b:eb:d4:ad:c2:54:ed:0d:3b:
4b:70:93:c2:6c:0e:e0:71:c3:41:10:d8:6b:af:98:a5:db:fb:
4b:b5:e7:af:d4:0d:74:50:06:f5:53:94:80:c1:8b:6e:a1:cd:
8e:e1:a7:c0:a5:52:bf:33:c6:d6:31:3d:34:85:b7:ee:1a:c7:
cd:0b:37:61:36:ef:20:c9:b9:39:4e:d0:12:83:44:58:21:58:
2d:e1:8c:84:78:c7:35:1e:e9:c1:f6:8c:14:01:d0:b9:b2:d6:
c2:da:94:cd:0a:70:71:39:0b:c6:0c:a2:4c:6c:db:60:bd:1d:
53:57:7d:e3:0f:2e:52:61:8b:5a:35:b9:1f:7b:4d:4f:ec:64:
c3:40:10:57:4c:fa:61:c3:52:bf:93:76:85:45:5e:0b:55:29:
1f:d5:bf:c4:f9:28:fa:e0:40:40:f8:64:3c:96:55:c4:61:4a:
57:19:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:10:28 2025 by rpki-client