This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: Uy8jh/pVhE8cTlV/tDDmI8K2rzCaGfVGL6pnx9D38kM= Subject key identifier: D9:54:F5:66:39:A2:6E:55:45:93:54:62:6D:17:16:20:EA:D9:14:FC Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 01DD Signing time: Tue 23 Dec 2025 01:44:47 +0000 Manifest this update: Tue 23 Dec 2025 01:44:47 +0000 Manifest next update: Tue 30 Dec 2025 01:44:47 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: guiTYHTqkDZK+fADJSQS1aoMM//nlmkpNwfMHrqiqsU=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Dec 23 01:44:47 2025 GMT Not After : Dec 30 01:44:47 2025 GMT Subject: CN=6949f40f-d7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:56:8e:e2:f1:c3:23:2f:66:ed:ad:fe:7d: 52:d5:76:84:42:a9:59:f4:2f:99:44:dd:9b:82:4e: 80:fe:66:31:6b:ca:ca:25:11:4a:c9:74:1c:d0:41: 1d:da:35:ee:98:9c:6a:b4:9b:34:44:87:95:58:8d: 4f:ae:fd:ec:66:f8:c3:a4:db:9b:cb:78:0d:38:3f: ff:ee:e6:1d:ff:ae:24:1d:67:d1:b2:21:bc:80:89: 35:81:e3:d9:af:0e:b8:e3:3b:e8:54:23:1c:63:fc: 5d:05:c7:a9:20:b6:c1:1c:a8:36:7a:70:1c:87:e4: 77:81:d5:37:11:c0:01:85:4a:3e:1f:7d:17:bd:cf: 05:aa:9e:5b:5d:44:a6:4d:88:4d:e2:f5:e9:99:25: d6:1d:95:15:58:33:cd:64:bb:c8:ed:c1:54:d6:85: bd:b3:86:73:84:ee:00:99:c8:b7:64:90:97:1a:a8: ac:8d:9d:0d:40:2e:42:54:2c:42:a2:3d:91:2a:ac: 69:65:d8:e3:6e:27:34:ba:49:d7:aa:4b:74:9d:fc: 23:e7:b0:b7:95:24:17:bf:1e:51:2a:ca:4a:ad:c7: 00:b5:3b:80:4b:a2:79:64:de:27:62:25:fd:a5:54: 77:b4:1e:c0:70:04:32:82:6f:5a:8e:54:e3:f3:3c: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:54:F5:66:39:A2:6E:55:45:93:54:62:6D:17:16:20:EA:D9:14:FC X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d3:26:bd:26:7e:59:ec:12:56:f4:2d:97:95:d0:3a:0a:e0: 5f:ed:d9:c0:06:c0:b4:24:9f:fb:7b:66:60:75:53:ab:4b:2d: 50:b5:fc:3a:17:70:c1:3a:16:d8:78:07:26:63:6c:08:47:79: f3:46:e1:1c:9d:67:d3:1d:ba:61:30:bc:5a:25:15:db:31:db: 07:41:5d:19:fb:9d:08:70:69:47:b3:99:21:9a:11:39:73:b2: 3b:be:3e:df:db:5d:02:cc:ad:24:83:c6:7d:26:22:1e:d3:65: 43:e5:94:02:e7:e9:ce:d8:e8:06:86:22:ea:52:f3:f1:7f:a0: cb:af:76:15:85:a8:b3:f8:23:5d:f0:9e:8a:79:e1:ff:f1:e0: 79:b1:a1:ce:6c:b8:e8:a1:60:90:72:e6:2f:77:9a:3c:65:33: c3:3a:de:70:79:3e:11:00:0f:f9:cf:10:62:47:a5:a2:f3:60: 04:62:d2:b6:b8:92:11:89:60:0f:07:34:5f:77:6c:27:b6:cd: 99:b4:47:03:a6:5f:fd:31:3f:44:39:31:78:4c:62:a2:94:80: 48:ff:c6:b2:14:cc:3e:7e:71:f0:cd:ca:43:12:1e:64:eb:c6: 18:2f:c8:74:02:46:bb:d9:bb:4f:da:66:23:d2:08:8a:59:bf: c0:16:1c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUxMjIzMDE0NDQ3WhcNMjUxMjMwMDE0NDQ3WjAYMRYwFAYD VQQDDA02OTQ5ZjQwZi1kN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4JWjuLxwyMvZu2t/n1S1XaEQqlZ9C+ZRN2bgk6A/mYxa8rKJRFKyXQc0EEd 2jXumJxqtJs0RIeVWI1Prv3sZvjDpNuby3gNOD//7uYd/64kHWfRsiG8gIk1gePZ rw644zvoVCMcY/xdBcepILbBHKg2enAch+R3gdU3EcABhUo+H30Xvc8Fqp5bXUSm TYhN4vXpmSXWHZUVWDPNZLvI7cFU1oW9s4ZzhO4Amci3ZJCXGqisjZ0NQC5CVCxC oj2RKqxpZdjjbic0uknXqkt0nfwj57C3lSQXvx5RKspKrccAtTuAS6J5ZN4nYiX9 pVR3tB7AcAQygm9ajlTj8zyCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlU9WY5 om5VRZNUYm0XFiDq2RT8MB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0ya9Jn5Z7BJW9C2XldA6CuBf7dnABsC0JJ/7e2ZgdVOrSy1Qtfw6 F3DBOhbYeAcmY2wIR3nzRuEcnWfTHbphMLxaJRXbMdsHQV0Z+50IcGlHs5khmhE5 c7I7vj7f210CzK0kg8Z9JiIe02VD5ZQC5+nO2OgGhiLqUvPxf6DLr3YVhaiz+CNd 8J6KeeH/8eB5saHObLjooWCQcuYvd5o8ZTPDOt5weT4RAA/5zxBiR6Wi82AEYtK2 uJIRiWAPBzRfd2wnts2ZtEcDpl/9MT9EOTF4TGKilIBI/8ayFMw+fnHwzcpDEh5k 68YYL8h0Aka72btP2mYj0giKWb/AFhwY -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:55 2025 by rpki-client