This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: ooMsBanSkOVFbwz22UiPiEEkEMS7WWVn3mostx3QvqQ= Subject key identifier: B5:95:45:25:00:3A:0A:8E:EF:F6:85:59:8E:16:F9:39:D1:8D:62:38 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 017C Signing time: Tue 23 Dec 2025 02:47:10 +0000 Manifest this update: Tue 23 Dec 2025 02:47:09 +0000 Manifest next update: Tue 30 Dec 2025 02:47:09 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: cgP5tpybfNVTJ6TFbNOASsjJStAWServ11znrClyqT8=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Dec 23 02:47:09 2025 GMT Not After : Dec 30 02:47:09 2025 GMT Subject: CN=694a02ae-2b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:aa:9e:10:e5:ec:9a:8c:5a:6d:14:9c:6a: 59:4c:cf:3d:c8:94:9f:32:2e:43:95:b3:2b:c6:92: bd:eb:88:b1:92:47:c8:34:14:50:c2:39:37:64:45: 9d:af:7c:69:bd:1d:68:59:5b:e2:90:0f:ea:e5:2a: d4:23:d1:4c:99:80:21:59:97:21:5f:09:bf:03:f5: e0:c5:b0:dc:a5:79:e0:e7:db:11:d7:fa:f2:03:bb: 83:a0:f3:74:f1:3c:14:c6:60:15:1b:e0:b6:6a:46: c4:5c:06:56:ef:0c:25:f2:d8:b8:9d:07:83:d1:d0: 1c:f3:60:98:a2:7f:9c:ff:b7:73:37:45:5f:d6:5d: b8:09:0f:9b:a5:5a:8d:4a:1b:f6:4e:8c:06:dd:d9: f7:54:39:9e:0d:ca:3b:8c:5e:ce:2f:39:a1:70:87: 42:9d:16:20:b0:9c:8d:6c:66:7f:2d:80:d3:eb:08: 73:a9:f1:d5:90:0e:a3:5b:29:6c:85:51:b8:f4:8d: ca:35:8e:93:04:ea:39:47:93:69:94:70:2c:3d:31: 1c:64:3b:47:17:00:86:ac:a7:0e:02:4e:f1:06:e7: 31:a9:7e:c0:25:6f:95:24:a1:19:cd:09:93:9a:4c: 04:17:57:72:6c:9c:1e:3d:72:be:66:ae:73:71:64: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:95:45:25:00:3A:0A:8E:EF:F6:85:59:8E:16:F9:39:D1:8D:62:38 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:32:04:f7:43:8b:2c:11:dd:53:91:0f:33:ec:86:38:0f: 30:88:c1:30:e3:97:ff:17:06:b6:3d:9a:16:50:b5:f6:66:a1: 2e:6b:f6:c5:dc:3e:8e:12:49:0b:a5:53:62:7c:2c:34:8a:2d: 67:2b:ea:f7:9f:d4:45:1e:0a:fa:fe:7d:00:3c:02:e0:3b:82: 1d:6b:ab:95:11:58:e1:ed:09:1c:6a:87:51:1c:9f:ee:91:ef: 5c:09:fa:da:0a:0f:fa:4f:66:74:0d:84:5a:a2:0a:d7:b1:97: 07:58:69:f9:0e:7c:80:39:0d:c6:a6:fd:1d:90:9a:f8:5a:b3: 49:cc:e3:68:de:bd:4c:39:f3:cc:16:f6:9c:69:f6:86:65:b4: 32:e2:35:bb:5e:3a:c5:27:43:88:f4:c1:c5:e7:67:2a:27:b2: 6d:48:fe:da:24:e6:88:99:32:73:b8:48:20:82:0e:da:cd:08: ab:ae:e1:96:32:9b:fe:4b:d3:15:3b:30:d2:b9:81:b6:fd:31: 2c:a0:cc:78:05:04:43:6e:85:6e:9e:47:d9:88:d9:73:29:13: f9:dd:f7:87:7c:9f:ff:16:ac:fc:c8:57:5d:9d:36:5e:06:7a: a1:39:3e:c9:07:77:2b:dc:c0:2b:7a:75:d2:e0:21:9f:fb:18: 6d:50:9b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjUxMjIzMDI0NzA5WhcNMjUxMjMwMDI0NzA5WjAYMRYwFAYD VQQDDA02OTRhMDJhZS0yYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7eqnhDl7JqMWm0UnGpZTM89yJSfMi5DlbMrxpK964ixkkfINBRQwjk3ZEWd r3xpvR1oWVvikA/q5SrUI9FMmYAhWZchXwm/A/XgxbDcpXng59sR1/ryA7uDoPN0 8TwUxmAVG+C2akbEXAZW7wwl8ti4nQeD0dAc82CYon+c/7dzN0Vf1l24CQ+bpVqN Shv2TowG3dn3VDmeDco7jF7OLzmhcIdCnRYgsJyNbGZ/LYDT6whzqfHVkA6jWyls hVG49I3KNY6TBOo5R5NplHAsPTEcZDtHFwCGrKcOAk7xBucxqX7AJW+VJKEZzQmT mkwEF1dybJwePXK+Zq5zcWQtOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWVRSUA OgqO7/aFWY4W+TnRjWI4MB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC8zIE90OLLBHdU5EPM+yGOA8wiMEw45f/Fwa2PZoWULX2ZqEua/bF 3D6OEkkLpVNifCw0ii1nK+r3n9RFHgr6/n0APALgO4Ida6uVEVjh7QkcaodRHJ/u ke9cCfraCg/6T2Z0DYRaogrXsZcHWGn5DnyAOQ3Gpv0dkJr4WrNJzONo3r1MOfPM FvacafaGZbQy4jW7XjrFJ0OI9MHF52cqJ7JtSP7aJOaImTJzuEgggg7azQirruGW Mpv+S9MVOzDSuYG2/TEsoMx4BQRDboVunkfZiNlzKRP53feHfJ//Fqz8yFddnTZe BnqhOT7JB3cr3MArenXS4CGf+xhtUJuQ -----END CERTIFICATE-----Generated at Wed Dec 24 15:50:54 2025 by rpki-client