This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier: mwlduaTcFOw34lqL28KiyBeUcPlIXOSFJTpIZkacfqc=
Subject key identifier: 57:3C:9E:38:C5:33:A3:56:94:0B:5D:8F:5E:D8:85:70:0F:7D:90:73
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number: AD
Signing time: Sun 21 Dec 2025 05:20:18 +0000
Manifest this update: Sun 21 Dec 2025 05:20:17 +0000
Manifest next update: Sun 28 Dec 2025 05:20:17 +0000
Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: 9ppyNuwdG6UD8jsixJyZ1adT6huyUzXCM0ZAAuN+AtQ=)
2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Um4faPIiYV0iT9wtSPwe9PJLjNj/ZKWxcpuZEn8fwZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Validity
Not Before: Dec 21 05:20:17 2025 GMT
Not After : Dec 28 05:20:17 2025 GMT
Subject: CN=69478392-b813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6f:75:cb:2a:4b:aa:df:7a:fc:98:65:5c:68:
36:c3:7b:d6:a4:b3:23:0a:54:06:e2:67:25:36:8b:
4e:3c:c8:40:c1:3d:93:85:ad:87:87:db:40:1e:1b:
13:cf:d4:04:7d:a6:1a:65:ec:53:89:14:06:11:bc:
9e:55:bb:f0:a8:3f:70:c8:d8:95:ee:b1:41:89:f3:
ae:fd:33:cb:02:bd:27:eb:62:3e:5b:d0:6c:ec:5f:
a4:08:d2:3d:58:f4:cd:c7:cb:9d:31:52:48:2d:a5:
a6:2b:ab:49:19:b7:3b:cc:68:c5:bb:be:41:c4:00:
7e:52:aa:d0:20:86:87:9a:66:cc:7e:f4:67:cc:74:
1a:12:f0:1f:66:5d:50:07:1c:4f:cb:3d:d9:ea:9c:
86:86:e8:ab:7d:fa:cc:7c:34:6f:80:a9:e7:94:cc:
51:3d:6b:a6:44:bf:b8:c4:8e:3b:7a:05:4e:07:09:
48:66:d2:32:10:4b:b7:50:0e:31:34:69:e3:49:3b:
35:32:48:73:20:83:a1:bc:39:6d:1f:9a:5f:3e:30:
c6:d1:3f:b9:b9:e9:f1:4c:fa:9a:3a:cf:a0:0a:47:
ba:da:73:b1:6c:51:b2:ac:fe:ab:7d:00:90:99:5e:
b7:c2:3e:b4:2d:7c:a1:99:77:8c:70:2e:95:09:bc:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:9E:38:C5:33:A3:56:94:0B:5D:8F:5E:D8:85:70:0F:7D:90:73
X509v3 Authority Key Identifier:
keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:ff:c5:99:73:db:60:37:4c:51:d6:7e:d6:ec:5a:5c:e5:
15:1f:53:e2:9d:69:8f:cc:4c:48:28:64:3a:a0:4c:81:e6:69:
cf:14:51:70:04:d3:05:f2:59:90:97:27:9d:08:5b:e4:31:5a:
4e:be:f0:27:bf:92:95:6a:77:ad:17:8e:a7:a8:41:8c:9f:b6:
bc:ff:1c:aa:79:d2:75:32:bb:7f:a8:e1:0f:99:54:99:0a:72:
05:72:3f:09:42:45:a8:d8:b7:d0:68:09:95:54:78:0d:69:23:
17:85:87:17:ba:5b:ab:8a:48:4b:e0:b2:f2:44:90:0f:29:d3:
38:12:48:4d:d7:61:ca:4b:bf:50:b9:99:57:70:e2:83:b8:4e:
49:2d:6d:8e:5d:0d:e0:d8:6f:c2:e4:ad:b9:1b:21:a2:5e:48:
86:4e:d4:aa:3b:7b:8d:cf:ba:e5:f3:8a:03:5b:82:91:d7:75:
1c:f9:10:fa:c0:1d:dd:7b:5e:a2:4d:28:b2:a3:6f:34:7c:5f:
e9:35:26:e1:b9:8c:f8:4d:e3:9b:74:c2:7b:1f:c3:2c:55:4f:
e4:c5:4f:87:ec:b4:da:a5:75:c2:d8:94:c1:e3:11:2a:09:8b:
7b:ae:48:9e:c6:33:bc:35:93:66:1c:3e:ce:34:c0:8a:e6:06:
a4:e8:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:10:37 2025 by rpki-client