This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: 2AttAFvukOyjvAzpsvB0EJuvdc6kIMGrjsr3WQkDTMo= Subject key identifier: 36:C0:3F:DB:2A:5A:01:09:AC:AB:CF:9D:0C:D0:24:30:AB:F4:A0:50 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0188 Signing time: Tue 23 Dec 2025 02:35:32 +0000 Manifest this update: Tue 23 Dec 2025 02:35:32 +0000 Manifest next update: Tue 30 Dec 2025 02:35:32 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: eAEPfblHb22BHxJD7FgmbknFThg6iLC1j41Hn1JFtYo=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Dec 23 02:35:32 2025 GMT Not After : Dec 30 02:35:32 2025 GMT Subject: CN=6949fff4-cc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:64:78:9a:08:8f:ac:9c:0c:88:b5:14:9c: 32:7b:e1:32:06:8a:30:e7:27:f1:cf:cf:ab:2f:39: e6:58:08:84:09:4e:ea:6b:58:13:04:e5:5e:3a:98: a7:21:39:90:7c:19:fa:f2:78:ba:11:c2:51:c3:b0: 49:11:a1:48:eb:84:00:6b:38:86:9e:a4:c6:21:93: 32:af:01:4e:5f:ec:73:75:cf:10:d2:e4:bf:d3:35: ff:4c:ab:fc:19:ed:e9:f1:71:f8:91:64:33:8f:1e: bb:26:fa:ed:72:37:a7:8c:9b:5f:ad:fe:c0:72:d6: e9:ec:2a:99:44:fe:90:de:18:81:f1:ae:ed:d2:da: e1:15:67:52:e3:e8:be:7c:b4:9b:c3:b7:d5:30:07: 46:b8:e4:52:6c:44:29:ff:77:21:4d:49:1a:58:46: 26:ea:92:3a:be:81:68:ad:a1:87:0b:34:2c:3e:00: 18:23:fa:8c:f0:ff:81:8e:f5:66:db:b1:5b:b1:6e: 3f:05:76:42:fe:83:e0:0c:3f:2a:4e:43:a1:e0:b3: df:23:62:0d:97:c3:c7:0a:fe:f5:56:3e:be:10:ef: 28:14:cc:50:37:e2:fc:5a:ba:da:97:78:db:5a:fd: 83:40:73:5f:60:d6:0d:8c:b8:6c:c1:0b:13:21:a8: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C0:3F:DB:2A:5A:01:09:AC:AB:CF:9D:0C:D0:24:30:AB:F4:A0:50 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:59:d9:b7:ff:4f:e0:ce:d6:7c:73:c5:f2:79:83:98:5c:c7: 58:10:67:b9:60:ff:53:ab:0b:41:dc:3a:2f:31:ad:e8:87:6d: a0:17:df:b1:52:63:75:f3:ba:e5:c1:43:e6:3e:74:9e:12:66: c2:36:b7:49:cf:f0:cf:a5:49:4a:e8:23:fe:8f:68:49:f5:cf: e9:1a:bd:a7:02:46:ac:a2:29:3f:46:e8:2b:63:5e:1a:ef:be: 1d:26:7d:3c:9f:30:4e:3e:31:ec:28:83:cc:33:ae:0b:41:35: 61:d0:dc:54:2f:06:05:5f:2f:48:90:fb:2b:25:9a:4f:c7:64: 86:50:66:d9:8e:54:7e:f6:13:ce:e7:17:da:eb:bf:29:5e:4d: 86:10:a3:03:d0:3f:d4:36:4f:12:75:6c:7d:b1:01:38:9a:29: 23:93:64:3e:32:79:34:38:0f:b6:9b:12:e7:da:cb:e2:2b:5a: 06:5f:b3:e8:08:ed:75:e5:db:61:af:3e:d6:67:fd:fd:47:6b: ba:3f:92:08:4c:74:8d:29:21:15:fc:85:c0:36:b4:78:b3:53: d5:ed:d8:ca:c3:c4:9e:a5:e1:b6:64:ef:03:6f:ad:61:01:37: cc:9d:db:5a:e3:03:fd:89:ba:30:8a:a1:bd:b4:74:0b:b7:53: d9:a5:7f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUxMjIzMDIzNTMyWhcNMjUxMjMwMDIzNTMyWjAYMRYwFAYD VQQDDA02OTQ5ZmZmNC1jYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi9tkeJoIj6ycDIi1FJwye+EyBoow5yfxz8+rLznmWAiECU7qa1gTBOVeOpin ITmQfBn68ni6EcJRw7BJEaFI64QAaziGnqTGIZMyrwFOX+xzdc8Q0uS/0zX/TKv8 Ge3p8XH4kWQzjx67JvrtcjenjJtfrf7Actbp7CqZRP6Q3hiB8a7t0trhFWdS4+i+ fLSbw7fVMAdGuORSbEQp/3chTUkaWEYm6pI6voForaGHCzQsPgAYI/qM8P+BjvVm 27FbsW4/BXZC/oPgDD8qTkOh4LPfI2INl8PHCv71Vj6+EO8oFMxQN+L8Wrral3jb Wv2DQHNfYNYNjLhswQsTIajFvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbAP9sq WgEJrKvPnQzQJDCr9KBQMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQWdm3/0/gztZ8c8XyeYOYXMdYEGe5YP9TqwtB3DovMa3oh22gF9+x UmN187rlwUPmPnSeEmbCNrdJz/DPpUlK6CP+j2hJ9c/pGr2nAkasoik/RugrY14a 774dJn08nzBOPjHsKIPMM64LQTVh0NxULwYFXy9IkPsrJZpPx2SGUGbZjlR+9hPO 5xfa678pXk2GEKMD0D/UNk8SdWx9sQE4mikjk2Q+Mnk0OA+2mxLn2sviK1oGX7Po CO115dthrz7WZ/39R2u6P5IITHSNKSEV/IXANrR4s1PV7djKw8SepeG2ZO8Db61h ATfMndta4wP9ibowiqG9tHQLt1PZpX9T -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:34 2025 by rpki-client