This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier: mcW0+65olxx7JkOkpi+awDT3avvGq7olnHR8u5OBYDQ=
Subject key identifier: C3:2B:D2:86:F4:08:47:46:59:45:D7:42:B3:5A:93:EC:33:E5:18:96
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number: 51
Signing time: Fri 19 Dec 2025 06:13:15 +0000
Manifest this update: Fri 19 Dec 2025 06:13:15 +0000
Manifest next update: Fri 26 Dec 2025 06:13:15 +0000
Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: 3OfcP6JISeXgUS9w023uRVcynC+9mSVXNtoLNBRyWZA=)
2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Validity
Not Before: Dec 19 06:13:15 2025 GMT
Not After : Dec 26 06:13:15 2025 GMT
Subject: CN=6944ecfb-cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:ef:96:2f:c8:02:47:ba:2f:ba:f3:c5:2b:
c3:82:c5:f1:67:7b:8f:e9:c4:b4:92:40:6d:44:7a:
5b:d0:7b:ba:e8:51:64:5a:e4:0b:e6:59:6d:76:c7:
e6:94:6b:1c:50:44:70:14:64:a9:d4:09:9d:12:ca:
5e:1e:a5:95:42:b9:e3:ce:de:b5:19:46:f3:9c:be:
88:01:bc:4e:ec:c9:c4:50:eb:2d:df:36:e1:b4:42:
2b:39:a1:2c:a5:b6:44:f3:06:81:fd:22:23:5c:3c:
e5:8e:76:d9:75:dd:63:64:7f:77:5d:ab:4e:21:21:
e7:e4:d3:4d:48:e6:e4:0a:20:01:1d:b6:95:2f:d9:
9f:77:69:ea:11:2c:5b:f9:ea:7d:cf:8f:52:53:1d:
82:ef:82:c9:29:37:01:c9:84:09:c9:cc:08:ff:a3:
28:7b:5d:cf:1a:3a:8f:27:bb:13:47:3d:53:88:5c:
83:d0:8d:3f:a9:4d:17:78:30:98:a0:ce:d4:76:1e:
3d:bc:27:26:38:16:7a:75:95:cd:73:37:1f:cb:18:
f7:8e:34:80:29:cc:e6:8b:db:29:0d:a4:85:98:bf:
8c:69:d9:4a:06:1d:63:eb:1c:64:5e:f9:6b:bf:ac:
2d:87:a6:95:9e:74:33:3c:dc:5e:20:58:dc:32:e9:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:D2:86:F4:08:47:46:59:45:D7:42:B3:5A:93:EC:33:E5:18:96
X509v3 Authority Key Identifier:
keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9d:5a:3c:bc:4f:f5:b4:ae:60:0f:a6:4e:cb:13:ec:d1:55:
7a:09:68:fd:83:fb:39:96:0c:ba:c6:5b:6a:39:3d:4e:73:47:
25:01:88:56:e6:ea:8f:52:7e:65:ea:5b:36:0b:36:e2:f3:6e:
1c:f7:13:14:1f:14:a4:f4:20:07:66:c2:95:9d:95:20:5b:40:
f8:ce:b7:e1:bc:68:f8:c3:89:15:63:7e:57:28:c0:f7:50:68:
76:6e:70:1a:b5:e1:7e:23:10:f5:ef:b2:14:a5:7e:06:32:4a:
ef:ad:fe:a7:f5:74:19:b3:0a:b6:f8:e6:8e:92:97:ff:7f:05:
d7:c7:6f:7c:35:a0:22:1f:3b:16:e4:18:a6:31:af:03:95:bb:
93:f0:04:ce:d1:7c:60:02:97:db:4b:1e:24:93:e5:04:89:0a:
1c:fc:f7:3f:0c:a8:3e:a7:d1:f9:87:66:90:9e:ff:8a:65:ac:
0b:84:50:c1:c4:fc:b5:58:a1:66:cb:37:4e:5a:11:64:c9:af:
65:e9:45:a9:23:85:8f:74:32:6f:f6:92:d3:c4:40:52:dd:ef:
7a:e0:11:43:7a:9c:40:b8:72:a3:35:5a:78:90:5d:cc:3a:49:
25:3c:0b:ca:45:07:86:f0:f4:4e:f2:f4:64:91:13:56:55:6a:
fb:3c:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:12 2025 by rpki-client