This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: vHQ9ZP5j5V0qPIkOFEawA0gQ0Z+VoGVgKfpBbRmP9Ck= Subject key identifier: 4F:1F:AF:89:9C:6E:C0:35:03:F7:56:B4:19:29:0C:74:D3:44:7C:DD Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 08FC Signing time: Mon 22 Dec 2025 20:07:55 +0000 Manifest this update: Mon 22 Dec 2025 20:07:54 +0000 Manifest next update: Mon 29 Dec 2025 20:07:54 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: dLAU9chZeaTQyq1gtNEXjTkIeTRnVmMgBnuBHxJRKb4=) 2: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: wVCG2VGDbiE9LIJ+RohCK2UlytoDpY6tMaj0r14LtRs=) 3: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: I3D7DEeHdvNv2myIShwVUEjU7kH8j/IxEsxXCcOojFU=) 4: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: BDzw5D5CcIPm56khil5lg8M53qDwHx2+4ZYsOb/1Mtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Dec 22 20:07:54 2025 GMT Not After : Dec 29 20:07:54 2025 GMT Subject: CN=6949a51a-d7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:23:92:29:fa:ad:61:37:09:8c:25:9d:72: 49:3a:9e:ee:7d:9b:33:82:22:6f:29:e8:e7:0a:55: ea:a6:4a:71:e9:a3:65:25:bd:9a:a2:90:a9:bc:3c: 2c:b2:c9:bc:6c:98:25:fc:4c:ed:fa:44:b3:75:5d: 29:3f:0f:f2:60:ec:f7:e7:ae:e6:d3:f4:9d:d1:09: c3:a7:2a:dc:a3:ea:b7:0a:3e:5f:53:5f:a1:18:db: be:44:41:35:66:75:89:5e:5a:ff:9c:d3:3a:85:3d: c3:1f:86:eb:c4:74:f2:df:b1:ef:9e:6f:41:8e:a9: 93:6a:54:ea:4d:87:01:71:07:36:78:37:40:63:02: 38:fe:b3:11:3c:2b:49:be:dc:6d:94:af:2a:1f:24: 0f:43:87:ed:32:0a:54:b2:d2:3a:6e:a6:58:cf:23: 3b:a4:99:ee:72:46:72:17:80:e2:72:02:ec:29:46: 86:fe:0e:0b:b2:2c:2a:90:1b:ff:91:09:8f:65:4d: 8e:61:a5:d6:99:d4:9f:13:e3:ff:f9:43:72:26:0e: df:3b:31:8a:cc:5e:42:41:f3:04:80:8b:67:56:0d: 9b:64:ee:b3:83:88:4c:ee:04:d2:07:6a:b6:c7:1d: e1:b6:67:e3:df:f8:d9:22:db:2d:42:21:ff:62:05: 9b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1F:AF:89:9C:6E:C0:35:03:F7:56:B4:19:29:0C:74:D3:44:7C:DD X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:46:37:a9:d4:1b:67:7a:e0:dd:47:80:1c:f7:1d:36:3b:e4: 49:d6:ac:b7:8d:21:3b:df:89:b3:ef:47:f6:a5:b8:c2:f0:8f: 2b:66:22:38:12:3c:46:eb:e9:e8:3d:3c:1a:43:ea:3c:fc:99: 76:e1:89:26:5c:d0:79:2e:64:d0:85:e9:17:82:92:db:df:0f: b3:88:32:54:1b:15:38:4d:4f:eb:96:bb:61:14:61:8d:16:1a: f9:78:ec:81:21:69:fa:b3:e3:3a:8a:ae:a2:7c:39:d5:16:29: 22:21:4a:7c:d1:e0:3f:ca:54:c5:77:f7:80:0a:cc:a4:73:6a: 87:b1:c1:3c:97:68:eb:d5:56:3c:29:96:b5:77:12:21:66:23: 56:57:cd:63:04:69:ee:05:6f:a3:08:55:32:c6:16:ef:f4:99: 1b:6d:d0:40:d4:14:18:95:ee:2d:cd:73:b4:ea:46:9f:68:82: 09:77:46:f9:5e:3b:b2:c7:78:3a:90:71:37:f6:09:82:65:c2: 03:4b:d5:b9:1d:d4:c6:27:3f:f4:27:ea:19:f2:34:4b:47:5e: 78:4f:84:2b:25:33:d5:8e:e9:81:34:5f:b2:0d:f6:8c:02:58: d1:d1:3b:77:78:b9:19:45:b4:9d:ef:82:b0:53:a2:41:c3:38: e2:1f:ea:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUxMjIyMjAwNzU0WhcNMjUxMjI5MjAwNzU0WjAYMRYwFAYD VQQDDA02OTQ5YTUxYS1kN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZUjkin6rWE3CYwlnXJJOp7ufZszgiJvKejnClXqpkpx6aNlJb2aopCpvDws ssm8bJgl/Ezt+kSzdV0pPw/yYOz3567m0/Sd0QnDpyrco+q3Cj5fU1+hGNu+REE1 ZnWJXlr/nNM6hT3DH4brxHTy37Hvnm9BjqmTalTqTYcBcQc2eDdAYwI4/rMRPCtJ vtxtlK8qHyQPQ4ftMgpUstI6bqZYzyM7pJnuckZyF4DicgLsKUaG/g4LsiwqkBv/ kQmPZU2OYaXWmdSfE+P/+UNyJg7fOzGKzF5CQfMEgItnVg2bZO6zg4hM7gTSB2q2 xx3htmfj3/jZItstQiH/YgWb0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8fr4mc bsA1A/dWtBkpDHTTRHzdMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcRjep1BtneuDdR4Ac9x02O+RJ1qy3jSE734mz70f2pbjC8I8rZiI4 EjxG6+noPTwaQ+o8/Jl24YkmXNB5LmTQhekXgpLb3w+ziDJUGxU4TU/rlrthFGGN Fhr5eOyBIWn6s+M6iq6ifDnVFikiIUp80eA/ylTFd/eACsykc2qHscE8l2jr1VY8 KZa1dxIhZiNWV81jBGnuBW+jCFUyxhbv9JkbbdBA1BQYle4tzXO06kafaIIJd0b5 Xjuyx3g6kHE39gmCZcIDS9W5HdTGJz/0J+oZ8jRLR154T4QrJTPVjumBNF+yDfaM AljR0Tt3eLkZRbSd74KwU6JBwzjiH+rm -----END CERTIFICATE-----Generated at Tue Dec 23 04:07:48 2025 by rpki-client