This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: q+k0DnyeDY3ZF3OnjT0xnVfVwsw7UTx/8B7iOMnWK2I= Subject key identifier: B6:AD:57:D8:56:1D:DE:B2:15:CA:14:C2:45:69:3D:34:CB:93:F9:79 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 038E Signing time: Sat 06 Dec 2025 23:23:19 +0000 Manifest this update: Sat 06 Dec 2025 23:23:19 +0000 Manifest next update: Sat 13 Dec 2025 23:23:19 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: 10yi1xzcIw+D0c+bwd2tUe3zsop6pbmsZKypn3vxmcY=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Dec 6 23:23:19 2025 GMT Not After : Dec 13 23:23:19 2025 GMT Subject: CN=6934bae7-9722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:82:fd:c5:35:d0:82:e5:f6:df:93:0a:79:fc: 4d:ee:9f:29:f2:f9:d9:e5:92:96:45:e6:27:63:fd: 3f:e0:aa:3f:95:85:28:d4:6d:84:c3:38:0e:5e:1a: 4f:09:c1:47:ad:6e:34:46:e8:cf:fd:ff:16:e4:e5: b2:41:74:76:fa:ea:8f:c2:31:af:82:a0:f5:0a:d5: c6:a9:94:fa:3e:8f:26:53:0e:22:b6:bf:71:dd:ad: a7:86:b1:ff:a9:f5:71:37:e7:e7:f4:07:8e:2a:58: 7b:1c:6c:b2:ee:94:ab:27:04:e0:4a:da:80:a9:b0: 2d:96:b2:85:2b:87:63:b5:6a:b7:48:78:3e:c1:11: ba:e5:d5:4a:f6:34:73:47:d2:9f:11:34:39:7f:5b: 7c:f3:38:db:b6:23:51:08:bb:09:f6:ba:e4:d7:21: 37:09:5f:ec:78:af:d7:89:ec:89:de:c1:71:b3:cb: 75:8c:32:20:0e:57:65:f7:85:04:a0:c8:15:16:78: 11:ab:64:af:f3:a7:97:ca:35:ac:1f:4e:9c:79:dd: 44:ee:75:8d:58:26:aa:8e:2b:d5:ff:11:a0:62:92: ed:a9:49:98:e2:95:69:8f:f0:78:9e:57:aa:d1:53: 4e:f0:55:ad:d5:cf:75:85:a8:f5:ed:bc:5e:de:6a: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AD:57:D8:56:1D:DE:B2:15:CA:14:C2:45:69:3D:34:CB:93:F9:79 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:c1:4a:63:49:e5:84:6d:fe:c1:26:b4:34:49:67:32:69: 19:ec:ac:43:40:bd:20:56:7d:0d:1c:16:f6:07:73:fb:5f:e3: 13:5d:dd:df:36:65:d0:4b:93:c0:8a:6e:2b:c6:51:09:c6:79: 20:fc:53:3e:ce:20:da:38:05:80:c8:b1:0c:59:16:4a:03:a0: e4:03:b1:5f:c3:77:f3:40:51:1e:82:24:e1:54:a7:a8:0e:5b: 57:7b:7d:f4:9a:7b:a3:8c:ba:d5:b8:11:8a:6d:05:8d:3f:a8: e9:bd:88:5d:0a:f4:c7:8f:be:da:12:73:b1:9b:e5:e1:4a:2c: d7:a3:d1:9a:87:0b:47:7b:52:cf:b9:eb:35:ef:3f:62:bd:db: cf:64:ec:ae:f1:48:d4:a3:9a:88:96:98:be:94:02:92:a0:13: 1c:70:2a:27:c8:dc:92:45:ee:6c:0f:71:44:a1:dc:3a:f5:5c: ee:d8:a5:b1:77:47:36:17:a0:1b:73:85:b6:59:ec:01:83:12: 1c:48:d7:04:79:f8:a4:63:e3:97:33:50:e5:4b:4f:c1:ea:9a: 6a:15:cf:9c:be:3d:43:40:5f:e3:1f:34:10:8a:7d:7c:0f:a2: 80:40:2b:6a:3f:3f:03:b7:c5:a6:a7:a9:4a:6b:ba:84:7c:9d: ff:bb:ca:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUxMjA2MjMyMzE5WhcNMjUxMjEzMjMyMzE5WjAYMRYwFAYD VQQDEw02OTM0YmFlNy05NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8oL9xTXQguX235MKefxN7p8p8vnZ5ZKWReYnY/0/4Ko/lYUo1G2EwzgOXhpP CcFHrW40RujP/f8W5OWyQXR2+uqPwjGvgqD1CtXGqZT6Po8mUw4itr9x3a2nhrH/ qfVxN+fn9AeOKlh7HGyy7pSrJwTgStqAqbAtlrKFK4djtWq3SHg+wRG65dVK9jRz R9KfETQ5f1t88zjbtiNRCLsJ9rrk1yE3CV/seK/XieyJ3sFxs8t1jDIgDldl94UE oMgVFngRq2Sv86eXyjWsH06ced1E7nWNWCaqjivV/xGgYpLtqUmY4pVpj/B4nleq 0VNO8FWt1c91haj17bxe3moMdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLatV9hW Hd6yFcoUwkVpPTTLk/l5MB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmpMFKY0nlhG3+wSa0NElnMmkZ7KxDQL0gVn0NHBb2B3P7X+MTXd3f NmXQS5PAim4rxlEJxnkg/FM+ziDaOAWAyLEMWRZKA6DkA7Ffw3fzQFEegiThVKeo DltXe330mnujjLrVuBGKbQWNP6jpvYhdCvTHj77aEnOxm+XhSizXo9GahwtHe1LP ues17z9ivdvPZOyu8UjUo5qIlpi+lAKSoBMccConyNySRe5sD3FEodw69Vzu2KWx d0c2F6Abc4W2WewBgxIcSNcEefikY+OXM1DlS0/B6ppqFc+cvj1DQF/jHzQQin18 D6KAQCtqPz8Dt8Wmp6lKa7qEfJ3/u8rI -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:38 2025 by rpki-client