This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: xHvY9a1ysPTtqF1lar5UfLEh7AUxOQ7awU4mx+q9Eds= Subject key identifier: 7B:98:1A:88:8C:4D:3A:15:E2:60:F8:B4:08:F8:63:99:0C:9D:1A:D2 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: C6 Signing time: Tue 23 Dec 2025 04:49:49 +0000 Manifest this update: Tue 23 Dec 2025 04:49:49 +0000 Manifest next update: Tue 30 Dec 2025 04:49:49 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: J8cjRqsEF9z80OkelGevHQcsq3Ww5FSftSM7GfepGPY=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: C9wlOti9Kn8ir5LbjrcvSenT+h+KC9pTHhvfxL8aZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: Dec 23 04:49:49 2025 GMT Not After : Dec 30 04:49:49 2025 GMT Subject: CN=694a1f6d-a17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:44:c2:1b:02:cf:35:9c:bf:a9:ec:5d:38: 75:b1:dd:03:00:51:c2:fd:98:76:da:22:57:ee:72: 0e:25:fb:25:7e:a0:0e:fc:2b:2e:2b:0b:2b:15:24: 0e:31:13:ae:fc:3f:50:31:68:c8:b0:37:56:40:42: cc:cc:86:47:a9:1d:4d:ae:0a:8e:85:99:eb:d2:23: f9:06:d1:83:a8:77:4f:66:c0:94:b2:eb:6e:29:d5: a6:99:01:db:e5:e0:bd:ad:69:74:df:c1:a5:09:e6: d3:44:d7:50:0a:2e:84:92:a4:11:ee:f7:43:78:7f: 62:5b:f0:d7:53:b4:74:c4:2d:8d:0d:9c:cb:c6:65: b1:28:53:30:4e:25:1e:a0:4f:91:e0:8a:00:74:85: d2:02:90:07:d9:3e:27:6c:61:76:2b:d3:a2:39:9b: 2e:00:d3:b5:6c:51:e7:67:68:a7:c6:86:33:29:d1: 28:b0:76:9c:d0:da:9c:61:96:33:7a:53:95:7c:3e: 54:d6:1d:f8:96:d3:73:62:a9:28:68:e8:1a:89:8a: 47:74:3c:9d:b4:14:bc:cb:ce:f5:11:38:44:83:71: 19:23:25:7b:98:a5:60:fd:84:31:1f:00:47:9b:e9: 1a:f9:0e:51:03:05:73:98:2a:0c:6a:44:16:bc:a3: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:98:1A:88:8C:4D:3A:15:E2:60:F8:B4:08:F8:63:99:0C:9D:1A:D2 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:14:68:d7:5d:c3:e0:92:66:e3:8f:af:fc:36:c0:b8:a0:f7: d5:d1:9c:f1:f1:aa:e3:cd:30:a4:b4:96:b6:07:1c:b2:04:46: 62:a1:03:12:25:b9:65:c4:69:67:f4:d1:0c:62:05:79:a1:ce: 86:69:ba:36:5d:0c:dd:36:7d:95:bc:ca:88:3d:ba:22:87:69: b7:48:4e:d0:3d:4d:a5:f7:a4:7a:97:ff:ba:1d:74:14:09:14: 48:56:f8:97:34:c5:e0:71:b8:f9:6d:4a:5f:4e:3b:d6:b5:05: 32:f8:f4:fc:d5:eb:32:76:1a:13:81:2c:25:b8:7c:50:c6:3f: d9:f4:46:dd:c2:e4:e0:d6:f5:5e:8c:ec:2f:9b:cb:7b:ce:6d: e0:27:2d:a5:89:19:b9:79:96:e7:b4:08:3b:d9:f6:ba:f4:c9: b1:f0:63:40:6f:4f:0a:98:ab:14:65:10:c3:57:e4:12:f8:23: ce:3a:1e:37:b9:1b:0a:8c:93:08:ee:5e:0d:bb:6d:56:3c:ed: 3d:6a:36:8e:b6:ae:69:8d:92:fd:f6:8b:cd:75:8d:ba:55:06: f3:7f:bb:39:94:cf:2c:01:bc:19:8c:86:49:a9:58:c2:e2:9b: 02:1d:3a:cc:75:06:6e:4b:39:b5:d9:d0:68:a5:82:ec:cc:f5: 6e:7c:60:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyOUQxMTAvBgNVBAUTKDM1ODQxQUUzM0RGNjkzMTIwMTQwNjc5OEFFNjRGQ0Mw ODdGNUExRTUwHhcNMjUxMjIzMDQ0OTQ5WhcNMjUxMjMwMDQ0OTQ5WjAYMRYwFAYD VQQDDA02OTRhMWY2ZC1hMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUREwhsCzzWcv6nsXTh1sd0DAFHC/Zh22iJX7nIOJfslfqAO/CsuKwsrFSQO MROu/D9QMWjIsDdWQELMzIZHqR1NrgqOhZnr0iP5BtGDqHdPZsCUsutuKdWmmQHb 5eC9rWl038GlCebTRNdQCi6EkqQR7vdDeH9iW/DXU7R0xC2NDZzLxmWxKFMwTiUe oE+R4IoAdIXSApAH2T4nbGF2K9OiOZsuANO1bFHnZ2inxoYzKdEosHac0NqcYZYz elOVfD5U1h34ltNzYqkoaOgaiYpHdDydtBS8y871EThEg3EZIyV7mKVg/YQxHwBH m+ka+Q5RAwVzmCoMakQWvKPCDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuYGoiM TToV4mD4tAj4Y5kMnRrSMB8GA1UdIwQYMBaAFDWEGuM99pMSAUBnmK5k/MCH9aHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTI5RC82RTA1MEVGNkIx MzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4SUJRR2VZcm1UOHdJZjFv ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTI5RC82RTA1MEVGNkIxMzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9OWVFhNHozMmt4 SUJRR2VZcm1UOHdJZjFvZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeFGjXXcPgkmbjj6/8NsC4oPfV0Zzx8arjzTCktJa2BxyyBEZioQMS JbllxGln9NEMYgV5oc6Gabo2XQzdNn2VvMqIPboih2m3SE7QPU2l96R6l/+6HXQU CRRIVviXNMXgcbj5bUpfTjvWtQUy+PT81esydhoTgSwluHxQxj/Z9EbdwuTg1vVe jOwvm8t7zm3gJy2liRm5eZbntAg72fa69Mmx8GNAb08KmKsUZRDDV+QS+CPOOh43 uRsKjJMI7l4Nu21WPO09ajaOtq5pjZL99ovNdY26VQbzf7s5lM8sAbwZjIZJqVjC 4psCHTrMdQZuSzm12dBopYLszPVufGAf -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:39 2025 by rpki-client