This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier: XFTrBUtIIQ4TFG42zjGwZvymVbI48OKW5ySOBIF2hTE=
Subject key identifier: A1:E6:5D:B7:A7:21:BD:B4:4B:D3:F4:75:B2:35:3D:81:FF:4F:28:8C
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number: 01C6
Signing time: Fri 19 Dec 2025 02:10:20 +0000
Manifest this update: Fri 19 Dec 2025 02:10:20 +0000
Manifest next update: Fri 26 Dec 2025 02:10:20 +0000
Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: YHUOQ99qHrXKxqaOexHoiZGy9pH7sJlNTKk8QvLa+R8=)
2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 8GoJZpCZ9P4ckdBt/ZtHhmXHWFZw1X3kEDMJv2TH3VQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Validity
Not Before: Dec 19 02:10:20 2025 GMT
Not After : Dec 26 02:10:20 2025 GMT
Subject: CN=6944b40c-e4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:1e:84:e5:f1:e0:f8:14:ae:34:b0:31:c9:
9f:0f:4f:30:ca:a3:20:f1:11:ed:81:ac:af:ed:c8:
22:1e:e3:ba:9f:bc:ad:21:e2:a5:91:35:af:45:38:
65:86:6b:17:de:47:24:c6:75:ce:e9:25:2a:b1:50:
40:00:bf:b6:fd:d3:e6:d5:3e:da:23:b0:42:6c:70:
8f:9c:4e:2b:d0:f7:2b:38:98:66:de:79:44:bc:06:
a6:9d:f5:52:15:e1:20:25:a0:8f:09:2a:eb:39:92:
d1:f8:12:56:19:ce:b6:59:a7:b2:f7:8f:90:9d:19:
79:1d:fe:a3:47:7d:cc:87:47:b9:99:29:9c:12:fd:
79:16:69:ef:bc:28:e2:3f:29:03:34:d1:d2:80:1e:
1d:e4:b9:3c:c7:76:b5:ec:51:69:af:69:7e:c2:60:
31:c0:fd:ca:58:dd:d6:a9:0c:7c:6a:34:60:4c:06:
30:f0:1e:53:79:a7:48:a3:7d:c6:61:77:7f:8b:a7:
a1:29:32:fa:00:02:42:a7:80:35:8a:ff:77:79:6a:
f3:f4:b7:a3:02:d2:c7:fe:a2:f4:b1:82:2c:30:0d:
82:9a:d5:f4:86:0f:07:da:22:bb:0b:00:1c:6a:dd:
95:a7:d5:e6:4b:13:ea:16:80:fa:bd:d8:dc:54:1b:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:5D:B7:A7:21:BD:B4:4B:D3:F4:75:B2:35:3D:81:FF:4F:28:8C
X509v3 Authority Key Identifier:
keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:59:c8:43:61:d9:2d:bb:4b:4c:71:00:94:e4:6c:fc:03:c2:
c6:0e:9e:c2:3a:c0:e3:9d:10:b8:ae:90:f3:c4:af:a6:cb:ad:
bd:61:09:c1:6c:c9:eb:83:9e:77:e3:b6:5f:52:af:5f:66:4f:
10:2b:80:86:cc:6d:4f:a5:e9:6f:3c:fe:97:01:a4:cd:47:07:
3b:d1:2e:27:50:2e:a5:ac:48:66:ce:17:31:eb:b8:a3:b2:81:
f1:59:f3:50:12:a7:d0:0f:f0:b8:e4:01:4d:d0:18:27:95:24:
48:17:9e:17:75:41:c1:53:2b:f9:6c:cc:b9:2a:21:3b:6f:09:
48:8b:4d:64:e3:a4:a7:3e:5c:09:b1:a5:90:2e:a9:eb:58:fc:
72:78:ad:d2:63:ed:97:3b:bf:b9:97:dc:1f:d4:b4:df:ff:9e:
9f:48:23:fe:a5:7e:b2:16:52:eb:e3:60:d3:b5:ad:96:9b:ac:
5e:65:bd:96:c4:84:e0:a9:89:84:27:09:ef:09:d3:dd:6d:fc:
63:87:17:a0:12:ac:98:0c:f9:7d:58:f2:09:51:af:6b:c8:d3:
2c:96:b6:19:35:7d:da:22:9e:66:e5:7f:d9:46:ff:39:44:ae:
80:74:74:39:c0:14:db:34:3b:ce:d3:f5:90:eb:8b:ec:ee:cb:
68:c2:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:25 2025 by rpki-client