This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier: OQkbOt2zGJSVEoDv3NUt9fyBBT1sLssfyglHss42+8U=
Subject key identifier: 6E:40:A6:3F:02:5E:4F:29:86:DF:60:78:CD:F7:D4:DC:D4:6A:51:39
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number: 0157
Signing time: Mon 29 Dec 2025 03:33:38 +0000
Manifest this update: Mon 29 Dec 2025 03:33:38 +0000
Manifest next update: Mon 05 Jan 2026 03:33:38 +0000
Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: 1oOOGMCykPpk3+GBDfgevWZaB8luWOMIHm6JvpjXGP8=)
2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: CmgxaioZaqBmTAKdrvrQvMBUPzNHQbmNsCbdVyQjo74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 03:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Dec 29 03:33:38 2025 GMT
Not After : Jan 5 03:33:38 2026 GMT
Subject: CN=6951f692-4f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:06:ab:67:86:04:69:25:57:5f:60:f7:9a:
7b:0e:39:4b:50:aa:27:08:9c:75:12:42:2c:c2:1b:
fa:c0:81:cf:07:1e:df:3c:3e:41:f9:9e:3e:42:c2:
fc:87:45:c7:69:a8:07:9a:84:3c:e7:e7:70:f6:35:
7f:94:3c:0f:69:13:93:25:e8:05:80:98:d3:43:51:
50:26:18:9b:ad:90:23:71:16:f8:c6:2b:f2:00:c2:
83:46:f2:3d:61:0c:8c:f5:46:82:b4:92:8f:c9:b8:
54:a4:50:8b:6a:1e:a2:01:ef:3b:f3:4b:4f:a4:3c:
73:e4:3e:58:42:37:20:9e:31:e1:6d:85:29:93:93:
9f:17:b2:b7:fd:96:53:13:d0:c6:dc:b9:58:b1:5b:
44:f6:f2:43:5f:b1:95:b2:76:c4:67:fd:6d:93:07:
07:1c:72:42:1c:4a:cc:0a:dc:e9:4f:a8:9a:73:04:
b3:a9:66:1b:25:1f:94:36:41:65:00:c0:45:14:67:
57:9d:77:05:60:c4:b9:e4:a8:91:e3:42:67:43:70:
aa:bd:cb:bd:03:2d:88:9d:9b:97:07:fd:24:ce:50:
d5:60:fe:4d:84:e0:1a:50:fb:51:37:72:fe:3c:90:
28:9d:05:74:d2:87:15:71:2a:d5:df:87:61:77:1a:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:A6:3F:02:5E:4F:29:86:DF:60:78:CD:F7:D4:DC:D4:6A:51:39
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:39:93:88:5c:de:ec:18:83:fe:04:3d:89:23:b0:32:0f:4d:
6a:25:ba:7c:21:45:9c:ea:02:30:d4:7f:88:d5:42:f0:70:5e:
92:51:a2:cb:e4:18:34:93:1d:4d:d7:fb:d7:29:11:29:bc:2c:
f2:fa:4b:0d:f9:d4:0c:35:21:af:52:6f:e7:ee:99:a0:9a:79:
88:21:8b:27:88:10:6a:a4:2e:1f:f0:30:92:96:dd:23:b3:3d:
4d:f3:45:36:a6:d2:ff:f0:41:5a:b7:5c:74:11:15:be:35:f7:
de:f4:aa:70:10:9e:0c:aa:68:d0:26:fd:6d:c5:91:71:0b:e2:
88:02:a7:c3:d2:5e:cb:6b:d4:cd:6c:72:ad:b1:95:c4:95:f5:
bb:c4:c7:72:84:a5:cb:27:4d:18:8d:49:8b:c6:30:49:68:7b:
1c:a2:9b:0a:de:25:aa:d9:ad:7f:6a:dd:18:27:4f:b0:92:55:
e2:69:64:a4:97:10:e5:1f:b2:a8:f4:e8:1f:a7:5b:ac:79:0f:
e1:d9:1c:ef:56:0d:4d:44:eb:4c:8f:d0:82:c9:e4:e7:ec:10:
8f:06:90:95:10:79:d8:da:50:f3:9c:f9:29:63:0f:56:f2:70:
e7:73:92:d8:68:29:4a:65:10:97:54:51:54:c1:c6:7e:80:df:
c2:20:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 17:49:12 2025 by rpki-client