This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: qA3n+RVyEFa8pVWXzxtj1T6ofcJgmhzw2ad490w8mOY= Subject key identifier: 07:80:D4:18:6A:54:BF:E8:9F:D5:3C:07:24:53:56:E1:81:E5:5F:7F Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0192 Signing time: Fri 19 Dec 2025 02:40:33 +0000 Manifest this update: Fri 19 Dec 2025 02:40:33 +0000 Manifest next update: Fri 26 Dec 2025 02:40:33 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: fZXL3D9q+skE2iczo66PmFRRRnVcSbBgO4puVg4f/dw=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Dec 19 02:40:33 2025 GMT Not After : Dec 26 02:40:33 2025 GMT Subject: CN=6944bb21-61b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:69:2d:85:cb:9c:f6:5b:be:45:a8:cd:ac: 26:ab:36:33:fd:9d:9a:04:79:30:ca:56:95:a8:70: ec:62:83:3a:b6:24:82:ba:4c:b8:97:6e:dc:d8:5a: 1c:36:94:f6:8c:8c:48:2f:65:f0:c7:b4:ff:65:5c: f3:70:c6:eb:d0:fb:bf:aa:49:2f:8d:28:b7:f6:8c: 3c:bc:af:c7:cb:99:87:d4:8b:26:b1:0f:8c:6e:a8: 9d:cb:a6:8e:0f:29:8b:f6:07:f2:db:03:f8:a7:03: bd:10:e3:d7:83:c5:60:5f:1e:98:2f:5c:6b:e3:8b: 44:46:fe:ef:8f:e7:ff:a5:f3:42:ae:08:5d:70:d1: a7:bf:14:e9:30:69:ab:e4:04:3e:6c:98:50:a0:88: b2:dc:9f:27:9f:2f:43:92:ed:c3:e3:c4:96:8f:bd: c5:f7:e4:71:15:d7:a9:40:24:c2:9c:24:22:71:7b: 49:44:59:f2:6c:7b:22:05:62:73:ca:97:d7:3f:39: cf:5c:58:27:f8:00:5c:bb:c3:c8:a4:c7:a0:0c:16: 16:6d:61:3e:42:8e:39:23:bb:a4:e4:20:ac:c9:c3: b6:62:2c:0d:a8:d3:ac:00:f4:9a:b2:9c:d2:6e:4d: d4:13:05:b5:29:1e:27:51:dc:b1:23:76:fe:92:b7: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:80:D4:18:6A:54:BF:E8:9F:D5:3C:07:24:53:56:E1:81:E5:5F:7F X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:89:52:1b:bf:24:75:fe:0a:c7:00:db:ea:46:99:07:13:67: 51:83:50:f1:50:10:45:b8:7b:ef:b4:c4:9e:f3:c9:e9:7e:e0: 29:06:f3:d6:28:0f:2a:9e:23:7c:58:49:4e:15:b1:07:94:1d: 0a:6a:e6:08:33:1e:43:1c:d0:39:d8:51:2b:b0:cf:fb:89:95: 1d:ba:3f:7c:62:e1:28:54:9b:d1:32:d2:3d:52:a9:34:41:87: ca:72:6a:ef:2d:70:9b:ea:73:11:74:6c:64:f2:50:a8:83:e1: 41:e8:2c:90:68:08:b1:e1:38:61:6b:9a:ea:32:09:47:ef:8e: 56:f1:1c:27:ec:7d:18:8b:61:91:59:83:6d:a8:1d:c0:c1:90: 1b:a7:92:4d:f2:45:c5:a1:1a:59:da:f5:2f:3a:f5:aa:90:bb: 94:97:ab:9e:86:ad:76:0f:3d:f0:41:bd:e3:c0:fb:16:2d:67: 78:25:9c:06:32:10:1c:ab:76:29:05:f7:c4:05:15:84:75:a8: 7e:18:2e:af:3a:88:fd:83:c2:69:18:dd:c4:64:b0:8e:66:fc: 08:c1:8f:90:8e:89:ad:bc:be:6a:eb:34:81:ca:6a:98:7d:79: 1b:46:3e:d7:a1:b1:f7:1f:6d:c4:e5:c3:c8:56:f5:0e:18:61: f1:3d:82:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUxMjE5MDI0MDMzWhcNMjUxMjI2MDI0MDMzWjAYMRYwFAYD VQQDDA02OTQ0YmIyMS02MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEFpLYXLnPZbvkWozawmqzYz/Z2aBHkwylaVqHDsYoM6tiSCuky4l27c2Foc NpT2jIxIL2Xwx7T/ZVzzcMbr0Pu/qkkvjSi39ow8vK/Hy5mH1IsmsQ+Mbqidy6aO DymL9gfy2wP4pwO9EOPXg8VgXx6YL1xr44tERv7vj+f/pfNCrghdcNGnvxTpMGmr 5AQ+bJhQoIiy3J8nny9Dku3D48SWj73F9+RxFdepQCTCnCQicXtJRFnybHsiBWJz ypfXPznPXFgn+ABcu8PIpMegDBYWbWE+Qo45I7uk5CCsycO2YiwNqNOsAPSaspzS bk3UEwW1KR4nUdyxI3b+krfk4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeA1Bhq VL/on9U8ByRTVuGB5V9/MB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTiVIbvyR1/grHANvqRpkHE2dRg1DxUBBFuHvvtMSe88npfuApBvPW KA8qniN8WElOFbEHlB0KauYIMx5DHNA52FErsM/7iZUduj98YuEoVJvRMtI9Uqk0 QYfKcmrvLXCb6nMRdGxk8lCog+FB6CyQaAix4Thha5rqMglH745W8Rwn7H0Yi2GR WYNtqB3AwZAbp5JN8kXFoRpZ2vUvOvWqkLuUl6uehq12Dz3wQb3jwPsWLWd4JZwG MhAcq3YpBffEBRWEdah+GC6vOoj9g8JpGN3EZLCOZvwIwY+QjomtvL5q6zSBymqY fXkbRj7XobH3H23E5cPIVvUOGGHxPYJr -----END CERTIFICATE-----Generated at Sat Dec 20 14:15:34 2025 by rpki-client