This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: aqCouzoh+AVF3OaH+UZJmZvgkWcPyZ+1nD3kxvFn4Rk= Subject key identifier: DB:EF:14:D9:40:15:E8:5A:83:FF:04:63:94:28:8F:65:39:16:E5:D3 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2AFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2ABA Signing time: Mon 22 Dec 2025 15:25:13 +0000 Manifest this update: Mon 22 Dec 2025 15:25:12 +0000 Manifest next update: Mon 29 Dec 2025 15:25:12 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: cNaHBjJ5x9f2AJvIzxZL0R/AjmuTlG4qH889WV+xPwo=) 2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: foVnGp/jqxcrwmjuMi9JIuJxuKPFhTJXYXUK/5x/qrY=) 3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Ey/Kmg1iRRIttYY5811s3SHGsRnkg9ROhR5r3BngPPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11002 (0x2afa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Dec 22 15:25:12 2025 GMT Not After : Dec 29 15:25:12 2025 GMT Subject: CN=694962d8-229d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:69:34:f7:1a:57:19:1c:3b:ea:e7:61:cb: 9a:b5:e7:0d:e2:cc:2b:3f:42:5f:04:6f:22:56:7d: a5:9c:ff:f4:fe:96:ec:5c:61:83:2e:4e:96:2f:bf: 86:32:b2:7d:91:e2:c4:f0:61:31:3b:6e:0a:84:e4: 37:73:18:04:fd:d6:3d:a0:dd:a7:65:88:3d:e4:b4: 2b:ed:24:b3:91:01:e7:97:b4:0d:ff:ac:1a:85:e9: ea:93:ee:42:a4:ea:3e:7b:63:9d:94:c2:9d:4b:30: 85:05:93:4e:ab:25:f2:08:ed:16:93:2e:e2:97:40: 87:4e:5d:5f:ed:fe:6e:5d:55:87:c7:83:53:e6:be: 23:3d:af:87:38:22:88:5e:3c:a7:f5:35:07:0b:79: c9:df:fc:bd:99:0c:de:2b:4f:6a:22:46:46:45:9b: 0d:a8:6c:6d:b6:f7:77:10:bb:8a:5a:63:20:12:79: 59:1f:04:9a:b1:fb:0b:f3:55:ec:40:14:7c:ad:78: 2a:20:34:b2:78:80:9d:fd:c6:5e:a8:49:b7:8c:f0: 74:58:9d:a0:41:d2:65:7c:c3:cb:bb:a8:55:e7:57: e2:ba:a5:bc:c6:e8:46:9a:8a:a7:9e:1c:27:ad:08: 4b:d0:b9:70:ae:a4:79:72:e2:27:b0:b7:5f:7e:07: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EF:14:D9:40:15:E8:5A:83:FF:04:63:94:28:8F:65:39:16:E5:D3 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:cd:7b:59:ed:cc:80:a2:6e:4d:0c:44:c8:44:e3:3a:e6:aa: 65:07:0b:4f:e9:1c:ad:1b:1e:de:32:d2:19:5d:38:79:79:41: 92:47:ad:0c:1e:dc:48:82:72:25:6c:25:ae:0a:36:85:7e:07: b1:9b:b9:43:77:d7:8d:e5:22:b5:ef:59:d8:a5:08:63:69:18: e0:e2:11:4b:9f:5a:c4:2b:75:4b:a8:6c:d2:44:13:27:ae:50: c0:d3:eb:98:1a:b7:11:97:cb:cc:86:6e:70:2e:60:d3:fe:47: 38:bc:b8:4d:33:22:4e:86:df:d5:37:e6:8e:d2:96:f1:42:a2: 49:5c:a1:6c:6a:b9:94:b4:60:f8:6a:d5:1f:0a:e5:48:a7:91: 63:8f:a2:3b:52:cf:54:26:15:f3:eb:d7:a1:2c:04:63:bb:0a: c0:2e:b4:4e:b8:ed:c9:5e:36:f5:eb:98:af:8b:ab:34:83:90: bc:eb:18:0e:5f:98:f8:f9:59:f4:d4:57:98:72:1c:8f:54:c9: 93:ef:ad:ef:8e:14:fc:0d:fd:35:d7:23:91:97:d1:87:aa:d0: e3:c8:ec:fe:28:26:46:d2:a5:e2:76:5d:71:8c:1f:d7:74:04: 1c:17:1c:10:aa:d7:57:22:d4:e8:0f:2b:be:6a:1a:0d:bd:23: 3e:cb:5f:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUxMjIyMTUyNTEyWhcNMjUxMjI5MTUyNTEyWjAYMRYwFAYD VQQDDA02OTQ5NjJkOC0yMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSZpNPcaVxkcO+rnYcuatecN4swrP0JfBG8iVn2lnP/0/pbsXGGDLk6WL7+G MrJ9keLE8GExO24KhOQ3cxgE/dY9oN2nZYg95LQr7SSzkQHnl7QN/6wahenqk+5C pOo+e2OdlMKdSzCFBZNOqyXyCO0Wky7il0CHTl1f7f5uXVWHx4NT5r4jPa+HOCKI Xjyn9TUHC3nJ3/y9mQzeK09qIkZGRZsNqGxttvd3ELuKWmMgEnlZHwSasfsL81Xs QBR8rXgqIDSyeICd/cZeqEm3jPB0WJ2gQdJlfMPLu6hV51fiuqW8xuhGmoqnnhwn rQhL0LlwrqR5cuInsLdffgeYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvvFNlA Fehag/8EY5Qoj2U5FuXTMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDzXtZ7cyAom5NDETIROM65qplBwtP6RytGx7eMtIZXTh5eUGSR60M HtxIgnIlbCWuCjaFfgexm7lDd9eN5SK171nYpQhjaRjg4hFLn1rEK3VLqGzSRBMn rlDA0+uYGrcRl8vMhm5wLmDT/kc4vLhNMyJOht/VN+aO0pbxQqJJXKFsarmUtGD4 atUfCuVIp5Fjj6I7Us9UJhXz69ehLARjuwrALrROuO3JXjb165ivi6s0g5C86xgO X5j4+Vn01FeYchyPVMmT763vjhT8Df011yORl9GHqtDjyOz+KCZG0qXidl1xjB/X dAQcFxwQqtdXItToDyu+ahoNvSM+y19E -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:56 2025 by rpki-client