This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: NYTiVHcJwKSShjR17bCxp1Ib88ylsz5ukZBnqf4UZ+4= Subject key identifier: F0:D9:2F:B8:FA:D7:BF:F4:CA:DD:96:AC:EE:F6:EC:45:86:3E:21:FA Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0AC6 Signing time: Mon 22 Dec 2025 18:54:40 +0000 Manifest this update: Mon 22 Dec 2025 18:54:40 +0000 Manifest next update: Mon 29 Dec 2025 18:54:40 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: KHO5d4SJ9upaGXeBp2pAUmhSMdSN0hczyvU1DQVYvek=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Dec 22 18:54:40 2025 GMT Not After : Dec 29 18:54:40 2025 GMT Subject: CN=694993f0-27cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:25:b3:c0:8b:59:3f:33:70:b9:b6:db:7a: 99:02:21:0a:c3:10:37:5b:e8:5d:0d:9a:95:db:f0: 4c:6b:fd:81:9c:01:a9:5a:be:f3:b5:ba:99:40:9e: 73:8c:bb:f6:00:ce:ad:ba:ee:3b:57:77:2f:9a:8c: 8f:c3:61:4f:bc:7e:19:af:0b:19:cf:aa:35:e8:78: c0:de:7c:dc:42:51:da:7e:97:ec:94:33:81:78:ac: 4b:52:9b:db:b3:b2:23:04:e6:5f:b2:7b:43:15:d0: f7:f2:f7:e6:ae:93:1c:62:5c:28:16:7d:28:c5:76: a9:1f:7f:fb:7d:f2:64:82:7c:2b:d5:9d:17:a9:8d: 51:3c:b3:ba:9f:ae:3c:f9:a9:51:6e:32:c0:e4:83: 0e:17:58:58:da:07:17:96:29:4e:66:8c:2f:e9:8b: 19:91:30:e2:6f:38:e6:30:04:ea:f7:40:48:06:48: 47:10:26:e3:22:a1:fd:08:e2:be:e5:3e:68:ee:28: 11:28:d8:80:af:d0:41:c2:f5:11:ea:7c:31:b7:fc: e0:5f:15:39:a7:28:26:76:d7:cc:28:3c:02:f7:16: 12:d4:d5:cb:31:c6:db:53:b5:31:19:a6:1d:e0:29: 3b:7f:02:01:6b:b0:c1:78:3b:ed:f6:6f:a3:de:e0: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:2F:B8:FA:D7:BF:F4:CA:DD:96:AC:EE:F6:EC:45:86:3E:21:FA X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:82:d8:3f:be:be:14:dd:5a:29:4a:21:da:a9:9b:95:01:38: 98:ac:92:7b:5d:5e:1a:5c:1f:02:1f:96:23:44:e3:34:37:09: 02:7b:ac:13:c8:20:b3:5a:b1:ea:3e:74:ed:2d:25:71:95:46: 66:c5:03:c8:5d:a6:47:ed:17:e8:3a:dd:27:fb:a9:39:72:99: dc:d7:3f:a8:ea:e3:2d:38:3a:60:99:33:e4:f8:05:63:d4:e1: b6:d2:c8:04:2b:28:c5:7e:85:b4:7e:15:e3:e5:b6:ac:35:37: 69:93:55:af:fb:ef:12:68:22:50:02:f1:ed:9f:73:8d:06:7d: d1:49:84:ff:65:ec:59:35:07:b4:00:a1:6a:3e:cf:52:fc:bf: de:39:91:c9:7d:f6:24:4b:f8:fc:eb:23:85:d9:c1:4a:44:8a: eb:57:18:55:92:58:51:27:f9:e8:cc:90:8a:65:2a:6e:a7:69: b0:4d:f3:cb:2f:94:83:ef:ff:ca:4b:e8:1c:d1:0b:90:9e:f2: b8:8a:73:30:ff:57:85:6e:63:08:b1:12:d9:44:c5:c3:60:47: bf:4a:ec:9c:11:e3:0f:2f:3d:1f:f0:b9:79:98:da:84:38:bf: 99:37:25:86:98:b5:22:f7:35:24:58:82:07:b1:81:91:e7:03: 42:89:22:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUxMjIyMTg1NDQwWhcNMjUxMjI5MTg1NDQwWjAYMRYwFAYD VQQDDA02OTQ5OTNmMC0yN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq78ls8CLWT8zcLm223qZAiEKwxA3W+hdDZqV2/BMa/2BnAGpWr7ztbqZQJ5z jLv2AM6tuu47V3cvmoyPw2FPvH4ZrwsZz6o16HjA3nzcQlHafpfslDOBeKxLUpvb s7IjBOZfsntDFdD38vfmrpMcYlwoFn0oxXapH3/7ffJkgnwr1Z0XqY1RPLO6n648 +alRbjLA5IMOF1hY2gcXlilOZowv6YsZkTDibzjmMATq90BIBkhHECbjIqH9COK+ 5T5o7igRKNiAr9BBwvUR6nwxt/zgXxU5pygmdtfMKDwC9xYS1NXLMcbbU7UxGaYd 4Ck7fwIBa7DBeDvt9m+j3uBMcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDZL7j6 17/0yt2WrO727EWGPiH6MB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSgtg/vr4U3VopSiHaqZuVATiYrJJ7XV4aXB8CH5YjROM0NwkCe6wT yCCzWrHqPnTtLSVxlUZmxQPIXaZH7RfoOt0n+6k5cpnc1z+o6uMtODpgmTPk+AVj 1OG20sgEKyjFfoW0fhXj5basNTdpk1Wv++8SaCJQAvHtn3ONBn3RSYT/ZexZNQe0 AKFqPs9S/L/eOZHJffYkS/j86yOF2cFKRIrrVxhVklhRJ/nozJCKZSpup2mwTfPL L5SD7//KS+gc0QuQnvK4inMw/1eFbmMIsRLZRMXDYEe/SuycEeMPLz0f8Ll5mNqE OL+ZNyWGmLUi9zUkWIIHsYGR5wNCiSL4 -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:55 2025 by rpki-client