This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: SDLIq2wKDaxFE5ZwRQUPk+yo5GYQcV+9lHgp0vr0XlI= Subject key identifier: 82:7D:70:9A:B1:B5:8C:2D:E5:1D:DC:06:A2:29:EF:95:1D:CD:2B:F7 Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 279E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 279E Signing time: Tue 02 Dec 2025 15:33:09 +0000 Manifest this update: Tue 02 Dec 2025 15:33:09 +0000 Manifest next update: Tue 09 Dec 2025 15:33:09 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: Bt+NNmzUL+zZDiWFgeqfEBq1nLDr6wWzmchBgmfG98w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10142 (0x279e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: Dec 2 15:33:09 2025 GMT Not After : Dec 9 15:33:09 2025 GMT Subject: CN=692f06b5-d6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:59:1f:17:c7:19:ba:b9:a8:d2:d7:72:38: 56:9d:2d:84:41:ff:21:44:8f:70:a6:a6:7a:42:d3: 66:86:e8:81:51:ab:4e:1e:ab:3b:f5:b4:6a:df:05: 1c:1d:8e:ec:0f:80:39:5d:f9:c8:fb:68:a7:ee:2d: b4:e3:45:7e:e2:43:9f:af:57:df:ff:34:66:09:a1: e9:a9:65:de:8f:df:5f:fe:9b:d0:2d:cb:cf:08:3c: 0e:98:bc:11:dd:b5:10:13:12:a1:0a:8a:73:17:ae: 60:3c:86:ea:95:2b:f4:38:7b:d2:ca:32:5a:4a:2b: a2:0b:52:37:9b:c8:83:9b:79:8c:1e:f5:9f:14:d9: 74:52:54:c1:15:d2:3c:5c:03:90:48:36:fd:54:9b: dd:d6:a9:9b:6c:48:7d:f2:f9:77:10:e3:b2:5b:db: 62:ec:33:fc:f0:1a:18:cb:cf:65:31:e4:21:6f:02: de:05:f9:15:f1:6c:17:bb:29:c5:88:45:86:04:8a: 66:56:d9:80:1e:09:f8:a2:fb:9e:7c:7a:6c:38:5b: c7:df:e0:90:45:aa:2a:9b:7a:13:99:bd:fe:63:5c: 58:4f:58:2b:18:c4:71:1e:d3:f6:40:1e:87:9e:fb: bd:f6:6e:37:5d:e4:8b:53:8f:75:0c:d8:5a:ae:0e: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:70:9A:B1:B5:8C:2D:E5:1D:DC:06:A2:29:EF:95:1D:CD:2B:F7 X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ce:80:18:4c:01:88:ae:12:72:c4:4b:1c:e9:ae:f1:fb:d5: 5f:18:13:39:4c:0e:12:a2:a8:ad:a7:3f:05:0d:13:ca:dc:78: cc:49:80:ee:11:46:b4:79:ef:24:f6:d7:2b:f8:91:b6:c2:d4: 6b:cb:21:5e:a7:54:1b:b5:49:c5:a0:cc:da:05:ac:46:34:95: 10:02:ab:d7:fb:6e:14:8f:35:e1:3a:8c:70:50:85:db:06:8f: 51:40:a4:a5:00:90:3e:3f:9b:79:5b:5a:c3:46:61:5c:7d:29: cc:78:43:da:89:63:a0:7e:47:41:0e:b2:62:28:84:07:e4:7e: 54:0f:33:11:7d:59:d6:93:c5:98:20:c4:c3:f7:ef:0b:fc:38: f2:70:22:d0:f5:1e:8b:0e:79:21:b5:21:24:83:b3:14:cf:83: f8:f2:bc:65:c1:80:59:fd:46:11:9c:1f:68:88:24:cf:81:bd: 71:ac:f3:a0:e4:bb:f2:c8:f4:b7:75:c4:c9:4b:da:89:e8:f2: af:21:c7:9e:da:06:b2:53:01:de:b5:a2:d7:27:e5:6c:c3:35: 65:4b:ad:95:6b:06:8e:a2:d9:e2:11:a4:5b:40:f6:da:4c:ef: 3b:5a:11:79:16:e5:7c:7b:14:04:f5:30:7a:bd:fe:67:79:d5: 7c:2b:91:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjUxMjAyMTUzMzA5WhcNMjUxMjA5MTUzMzA5WjAYMRYwFAYD VQQDEw02OTJmMDZiNS1kNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/ZZHxfHGbq5qNLXcjhWnS2EQf8hRI9wpqZ6QtNmhuiBUatOHqs79bRq3wUc HY7sD4A5XfnI+2in7i2040V+4kOfr1ff/zRmCaHpqWXej99f/pvQLcvPCDwOmLwR 3bUQExKhCopzF65gPIbqlSv0OHvSyjJaSiuiC1I3m8iDm3mMHvWfFNl0UlTBFdI8 XAOQSDb9VJvd1qmbbEh98vl3EOOyW9ti7DP88BoYy89lMeQhbwLeBfkV8WwXuynF iEWGBIpmVtmAHgn4ovuefHpsOFvH3+CQRaoqm3oTmb3+Y1xYT1grGMRxHtP2QB6H nvu99m43XeSLU491DNharg616wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ9cJqx tYwt5R3cBqIp75UdzSv3MB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrzoAYTAGIrhJyxEsc6a7x+9VfGBM5TA4Soqitpz8FDRPK3HjMSYDu EUa0ee8k9tcr+JG2wtRryyFep1QbtUnFoMzaBaxGNJUQAqvX+24UjzXhOoxwUIXb Bo9RQKSlAJA+P5t5W1rDRmFcfSnMeEPaiWOgfkdBDrJiKIQH5H5UDzMRfVnWk8WY IMTD9+8L/DjycCLQ9R6LDnkhtSEkg7MUz4P48rxlwYBZ/UYRnB9oiCTPgb1xrPOg 5LvyyPS3dcTJS9qJ6PKvIcee2gayUwHetaLXJ+VswzVlS62VawaOotniEaRbQPba TO87WhF5FuV8exQE9TB6vf5nedV8K5FZ -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:45 2025 by rpki-client