This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: YkFtnPKzUviOT0W1+ikbQiXCqTLMeFBg1ohEEodn/3M= Subject key identifier: E5:90:1D:FA:04:2C:0D:E1:1B:99:83:E4:54:50:93:68:19:49:F2:69 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 0967 Signing time: Mon 22 Dec 2025 19:29:23 +0000 Manifest this update: Mon 22 Dec 2025 19:29:22 +0000 Manifest next update: Mon 29 Dec 2025 19:29:22 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: kEvWbW9S/vAsFteN9oXJm0kSKC0cPRta/bLU5+HtbMM=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: pMMXr/lqWr+5GcVstLkkyd8gkDTgGy1DHQolAjMLixQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Dec 22 19:29:22 2025 GMT Not After : Dec 29 19:29:22 2025 GMT Subject: CN=69499c13-84b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:e5:be:5b:54:2f:cf:d7:54:95:21:f2:30: 57:f4:b0:30:ee:32:2c:e1:6a:27:f3:4a:0d:d6:63: 46:4f:bb:d1:cc:96:a5:7f:37:a6:51:22:79:83:1b: 86:5c:a6:7f:33:98:d3:ee:a0:c9:f8:69:cc:13:06: 02:ee:bb:0b:4e:7b:a5:5a:b1:17:ab:70:29:4c:33: c7:6c:8c:64:0c:1c:ce:e3:2d:17:28:c3:d5:be:64: fa:b9:65:50:c1:37:f2:dd:25:32:5f:f0:32:54:75: 1d:68:d0:ed:b9:50:12:59:db:5c:15:af:18:f5:4f: 9e:c6:43:8b:49:2b:f5:c4:ae:d0:5a:9a:0a:a4:74: 21:25:8f:2e:2c:8f:8f:ac:5f:a7:f4:c0:77:4a:d2: d2:59:2e:03:b7:0c:17:f0:02:35:4d:0d:38:5c:3a: a6:ae:15:9e:8f:9c:6d:6e:49:e5:01:94:ee:ae:1e: 14:41:b2:96:c3:32:a2:d4:bd:8a:2a:d0:81:a3:1b: ee:2f:77:93:42:db:2f:9b:ed:7b:2d:03:8c:7d:a6: 36:96:2d:d2:fb:57:0a:50:48:9b:3b:07:69:91:54: b6:da:0d:1e:07:6f:d4:aa:a9:ff:c8:e2:10:e4:47: a7:45:27:66:7c:dd:81:6b:6f:73:c1:b8:09:8a:6d: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:1D:FA:04:2C:0D:E1:1B:99:83:E4:54:50:93:68:19:49:F2:69 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d4:5c:bf:a5:80:15:e1:bb:ff:50:74:18:9c:3a:76:83:bf: 67:70:29:75:81:64:03:c7:cb:2b:b2:2d:bb:8f:a3:49:40:23: 59:0e:ea:0b:9f:6f:9e:1c:b4:81:20:34:22:e9:60:72:06:d4: ef:27:22:e7:92:50:4d:da:79:dc:5c:77:2b:e0:68:22:f9:f6: cf:10:d9:0f:62:8f:b1:f4:49:79:eb:fb:d1:0c:56:1c:80:9a: 43:bb:ae:14:32:d6:06:46:79:ac:83:5e:ca:ac:f7:e2:a3:e8: 28:93:63:24:46:ab:87:ee:bd:db:41:ca:79:b5:56:35:61:3f: 88:ce:78:e6:6f:6e:6c:79:ac:a7:d3:63:82:73:6f:38:bd:be: 63:62:f9:10:7a:d6:21:1c:89:20:60:8c:e8:2a:0b:b5:d9:25: 23:be:48:4b:a5:9b:18:ea:48:da:ac:b2:c7:69:52:4f:ed:d3: a4:0b:4b:1c:00:2d:ad:7e:2a:5e:ea:be:06:ec:12:ee:1a:a8: be:c6:d7:34:ab:98:64:0a:bc:de:12:39:a6:90:12:c8:bf:1a: 5b:4f:9e:16:f7:b6:f2:0c:a3:16:6d:fd:4f:f1:91:f5:03:68: 1d:4f:3c:a1:1c:86:3d:e3:ee:3b:e8:bf:f5:52:2a:a3:02:b5: 58:c4:65:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjUxMjIyMTkyOTIyWhcNMjUxMjI5MTkyOTIyWjAYMRYwFAYD VQQDDA02OTQ5OWMxMy04NGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYHlvltUL8/XVJUh8jBX9LAw7jIs4Won80oN1mNGT7vRzJalfzemUSJ5gxuG XKZ/M5jT7qDJ+GnMEwYC7rsLTnulWrEXq3ApTDPHbIxkDBzO4y0XKMPVvmT6uWVQ wTfy3SUyX/AyVHUdaNDtuVASWdtcFa8Y9U+exkOLSSv1xK7QWpoKpHQhJY8uLI+P rF+n9MB3StLSWS4DtwwX8AI1TQ04XDqmrhWej5xtbknlAZTurh4UQbKWwzKi1L2K KtCBoxvuL3eTQtsvm+17LQOMfaY2li3S+1cKUEibOwdpkVS22g0eB2/Uqqn/yOIQ 5EenRSdmfN2Ba29zwbgJim2FRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWQHfoE LA3hG5mD5FRQk2gZSfJpMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg1Fy/pYAV4bv/UHQYnDp2g79ncCl1gWQDx8srsi27j6NJQCNZDuoL n2+eHLSBIDQi6WByBtTvJyLnklBN2nncXHcr4Ggi+fbPENkPYo+x9El56/vRDFYc gJpDu64UMtYGRnmsg17KrPfio+gok2MkRquH7r3bQcp5tVY1YT+Iznjmb25seayn 02OCc284vb5jYvkQetYhHIkgYIzoKgu12SUjvkhLpZsY6kjarLLHaVJP7dOkC0sc AC2tfipe6r4G7BLuGqi+xtc0q5hkCrzeEjmmkBLIvxpbT54W97byDKMWbf1P8ZH1 A2gdTzyhHIY94+476L/1UiqjArVYxGWs -----END CERTIFICATE-----Generated at Tue Dec 23 18:52:56 2025 by rpki-client