This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json) Hash identifier: aIS4vTfjFs0y821zjjkbGcF6FrW18qIOqCUXCCVNHqU= Subject key identifier: 54:17:6F:5E:3B:FD:D7:52:E2:E1:01:FD:0D:B2:8C:A7:BC:15:9F:8D Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft Manifest number: 13E9 Signing time: Mon 22 Dec 2025 18:46:25 +0000 Manifest this update: Mon 22 Dec 2025 18:46:24 +0000 Manifest next update: Mon 29 Dec 2025 18:46:24 +0000 Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: Uu5EYnEVD6mOq+KaZ8oXzbc/ltLrI5nQ6C1tYi85Qeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Validity Not Before: Dec 22 18:46:24 2025 GMT Not After : Dec 29 18:46:24 2025 GMT Subject: CN=69499201-43c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:b7:0b:7f:c0:dd:72:5d:8d:31:03:a2:13: 17:6e:be:06:9a:75:fc:2d:02:91:6e:47:80:5a:68: ea:46:38:a2:e5:7c:a9:57:d4:b4:63:ac:a0:c0:60: bb:1a:29:00:c7:2c:b6:0f:51:8a:c5:45:d1:51:34: 7a:6e:21:da:98:48:da:03:d1:09:86:50:e2:35:29: 7b:3f:9a:77:0f:a6:db:de:1f:cb:f9:8e:09:ce:1e: 5f:12:7a:be:46:16:81:2e:8c:08:26:a2:d1:11:01: a3:7b:df:65:f5:ba:da:da:07:7d:db:84:de:63:ee: ce:78:5a:46:d5:ab:e3:3c:b8:63:e3:8b:39:87:eb: b7:15:06:be:e5:2c:15:da:ed:0b:5a:10:f1:a8:cd: 0e:ea:12:87:9b:ae:37:33:e9:e3:6b:e7:e0:13:1c: 0c:d4:e4:cf:c3:86:ad:ec:cb:3c:22:63:0b:94:a0: b6:1d:44:25:9d:8c:4d:2d:02:af:f9:dc:43:bf:23: 6d:c5:61:59:4b:e4:84:0e:a6:90:2a:d9:aa:1c:99: 74:f2:5f:21:95:3d:9a:30:a1:30:63:4f:e0:27:44: a6:b0:69:13:77:1a:e5:c7:89:59:95:c6:ea:89:15: 3b:e0:9b:24:7c:19:aa:28:6a:a9:95:a0:33:bf:b2: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:6F:5E:3B:FD:D7:52:E2:E1:01:FD:0D:B2:8C:A7:BC:15:9F:8D X509v3 Authority Key Identifier: keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:60:0e:56:f2:3b:2e:84:2b:08:1c:cd:e4:ff:a0:24:e1:b4: 4a:15:b8:49:12:e3:99:1e:ba:05:08:df:2b:7f:26:34:ef:56: 11:e5:17:5c:5c:59:d0:72:26:0d:bf:fa:19:ab:d2:e4:db:58: 55:30:70:72:bb:35:d5:58:71:e3:6c:30:db:34:f5:e0:0a:b0: a4:de:86:1b:54:fe:12:17:0a:55:39:54:f0:aa:06:96:c9:e6: 8f:41:4e:ee:8d:91:c1:37:3e:1b:3c:aa:55:10:7b:35:f7:30: e4:13:a3:90:8a:6e:da:a2:61:5d:cb:d5:7b:30:17:9f:98:bb: e1:c7:2e:ca:3a:9e:59:c9:cc:c0:20:75:40:3a:08:21:e7:df: 7c:0d:6b:e9:26:0c:2d:87:ac:59:76:16:59:4d:76:72:8b:39: d3:6c:0d:09:4e:a0:34:ca:92:f9:50:7d:ca:7d:20:44:c8:5c: 9a:8c:15:e6:6f:06:08:92:2c:4a:2e:8c:6a:c5:77:50:eb:4d: ef:e0:fd:c0:f1:6d:f0:39:e2:ad:b1:83:51:37:61:73:89:56: 30:5b:eb:17:96:31:50:0e:9b:c2:15:a8:d8:1c:9a:ca:04:84: d9:be:ca:ec:08:23:9d:42:d7:63:e5:d5:0c:ff:5d:58:c9:e2: 3c:e2:8e:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDlEM0UwMjA4Qjg1REYwNDlFMDIzQjM0N0RBOUIxODNG QzU2QkFCMUUwHhcNMjUxMjIyMTg0NjI0WhcNMjUxMjI5MTg0NjI0WjAYMRYwFAYD VQQDDA02OTQ5OTIwMS00M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kW3C3/A3XJdjTEDohMXbr4GmnX8LQKRbkeAWmjqRjii5XypV9S0Y6ygwGC7 GikAxyy2D1GKxUXRUTR6biHamEjaA9EJhlDiNSl7P5p3D6bb3h/L+Y4Jzh5fEnq+ RhaBLowIJqLREQGje99l9bra2gd924TeY+7OeFpG1avjPLhj44s5h+u3FQa+5SwV 2u0LWhDxqM0O6hKHm643M+nja+fgExwM1OTPw4at7Ms8ImMLlKC2HUQlnYxNLQKv +dxDvyNtxWFZS+SEDqaQKtmqHJl08l8hlT2aMKEwY0/gJ0SmsGkTdxrlx4lZlcbq iRU74JskfBmqKGqplaAzv7KkawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQXb147 /ddS4uEB/Q2yjKe8FZ+NMB8GA1UdIwQYMBaAFJ0+Agi4XfBJ4COzR9qbGD/Fa6se MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhFbmdJN05IMnBzWVA4VnJx eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UNENDTGhkOEVuZ0k3TkgycHNZUDhWcnF4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhF bmdJN05IMnBzWVA4VnJxeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpYA5W8jsuhCsIHM3k/6Ak4bRKFbhJEuOZHroFCN8rfyY071YR5Rdc XFnQciYNv/oZq9Lk21hVMHByuzXVWHHjbDDbNPXgCrCk3oYbVP4SFwpVOVTwqgaW yeaPQU7ujZHBNz4bPKpVEHs19zDkE6OQim7aomFdy9V7MBefmLvhxy7KOp5ZyczA IHVAOggh5998DWvpJgwth6xZdhZZTXZyiznTbA0JTqA0ypL5UH3KfSBEyFyajBXm bwYIkixKLoxqxXdQ603v4P3A8W3wOeKtsYNRN2FziVYwW+sXljFQDpvCFajYHJrK BITZvsrsCCOdQtdj5dUM/11YyeI84o4i -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:05 2025 by rpki-client