This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: USpe3zd8PNIY3UuhnVS8B9zugvDdCHi45Ulyu2RGWH4= Subject key identifier: 57:7F:CD:20:58:97:65:15:54:99:7B:AF:91:E5:EC:A5:8C:84:A6:55 Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 05F0 Signing time: Sat 06 Dec 2025 21:51:20 +0000 Manifest this update: Sat 06 Dec 2025 21:51:20 +0000 Manifest next update: Sat 13 Dec 2025 21:51:20 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: w6UNtmFp4EfvCXhMyRFFL1RkVI8V0Nyu7hqjhLvsveg=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=) 3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: /i4Id8Q+jnrw5e+R6tIy1tKz8MPyg9GBRlUx3W4xwjI=) 4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=) 5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: 1ILmh7AVLQm5eSNZItp8QnZ0ivg8piYKVtyisI3TQ00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Dec 6 21:51:20 2025 GMT Not After : Dec 13 21:51:20 2025 GMT Subject: CN=6934a558-1947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:59:fa:60:9f:a4:97:fa:f4:7d:20:4c:52: 2d:4d:de:30:74:47:49:ba:88:52:36:9b:07:4a:06: bb:f7:54:a6:74:61:b5:c7:2c:88:f4:2e:db:c7:d5: 02:07:f0:79:10:19:6b:7d:09:4a:66:c6:d1:2a:67: 1f:8e:80:78:b4:ef:47:03:45:6e:bc:8b:7e:5f:00: b3:3a:57:fd:13:ee:e2:60:0e:42:9f:7f:27:6c:15: d7:c8:4d:ed:20:95:d1:e5:57:4d:fd:6a:32:95:e5: 3f:3a:9e:33:60:d4:62:0c:81:8c:62:d9:63:26:44: eb:dd:13:6a:9c:29:ae:fb:17:57:12:f0:4a:d3:2e: 30:0f:0c:75:a8:7f:5f:00:0e:f1:20:1a:3a:bf:38: 0f:25:27:c7:d9:6e:d6:c9:68:e7:4d:be:30:61:d1: 22:62:5a:09:33:2d:23:07:e9:bd:db:78:ae:ad:21: 8e:97:f0:94:19:8f:3c:30:a7:84:e7:1a:9c:73:51: 7e:c0:57:00:b3:f6:eb:9d:a8:60:17:7d:62:62:36: 1a:ad:f1:50:8a:c7:a5:f7:57:f9:91:cf:cc:ee:88: 40:05:6b:2d:66:b3:81:28:21:1e:dd:f8:4f:3b:69: 27:72:67:62:b6:c0:cd:dc:26:97:1b:b0:9d:ca:1a: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7F:CD:20:58:97:65:15:54:99:7B:AF:91:E5:EC:A5:8C:84:A6:55 X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5e:14:a4:13:c0:13:6f:fb:93:a9:be:b8:9a:ed:bc:55:b3: 1f:3b:a2:c5:c4:f4:4d:29:c1:ec:92:f2:91:a8:3c:85:b4:f2: 2c:42:3f:c4:48:04:87:e9:4c:c7:d4:a5:77:0b:71:ad:c6:6e: cd:bb:9f:d0:a5:08:54:c5:9b:b8:33:2b:1d:d4:7f:37:b7:46: 89:bf:57:95:be:d6:8d:60:8c:04:11:8e:4c:a3:d8:bd:17:a0: f3:e6:96:18:8f:e9:b5:55:2e:22:80:fa:b8:3c:8d:7f:6a:c2: 74:fe:db:d7:5f:5f:59:be:55:da:5f:19:1e:6a:97:8c:44:9f: 97:20:81:b4:5a:59:28:1c:e3:a8:be:aa:27:40:8e:f4:48:c2: 3e:e9:bf:d2:d1:80:da:f7:c7:f0:e3:f1:83:5c:1c:4a:e9:bd: 6f:5b:fd:3e:9c:ef:4a:3e:9e:a3:27:e8:1e:76:a7:62:69:5c: 74:cb:4f:7e:43:a0:a7:2f:f7:23:3e:87:55:07:a8:06:82:e1: d7:b3:a8:5c:49:a9:9f:94:86:7d:7f:08:b4:09:0a:f5:c2:91: ab:5c:13:79:38:de:16:c1:7a:d4:20:0b:0b:35:c9:45:bb:76: 44:31:fd:fb:f1:bf:4e:b4:73:81:15:72:b5:47:52:1b:aa:bd: 63:18:62:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUxMjA2MjE1MTIwWhcNMjUxMjEzMjE1MTIwWjAYMRYwFAYD VQQDEw02OTM0YTU1OC0xOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+dZ+mCfpJf69H0gTFItTd4wdEdJuohSNpsHSga791SmdGG1xyyI9C7bx9UC B/B5EBlrfQlKZsbRKmcfjoB4tO9HA0VuvIt+XwCzOlf9E+7iYA5Cn38nbBXXyE3t IJXR5VdN/WoyleU/Op4zYNRiDIGMYtljJkTr3RNqnCmu+xdXEvBK0y4wDwx1qH9f AA7xIBo6vzgPJSfH2W7WyWjnTb4wYdEiYloJMy0jB+m923iurSGOl/CUGY88MKeE 5xqcc1F+wFcAs/brnahgF31iYjYarfFQisel91f5kc/M7ohABWstZrOBKCEe3fhP O2kncmditsDN3CaXG7Cdyhqq7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd/zSBY l2UVVJl7r5Hl7KWMhKZVMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1XhSkE8ATb/uTqb64mu28VbMfO6LFxPRNKcHskvKRqDyFtPIsQj/E SASH6UzH1KV3C3Gtxm7Nu5/QpQhUxZu4Mysd1H83t0aJv1eVvtaNYIwEEY5Mo9i9 F6Dz5pYYj+m1VS4igPq4PI1/asJ0/tvXX19ZvlXaXxkeapeMRJ+XIIG0WlkoHOOo vqonQI70SMI+6b/S0YDa98fw4/GDXBxK6b1vW/0+nO9KPp6jJ+gedqdiaVx0y09+ Q6CnL/cjPodVB6gGguHXs6hcSamflIZ9fwi0CQr1wpGrXBN5ON4WwXrUIAsLNclF u3ZEMf378b9OtHOBFXK1R1Ibqr1jGGIP -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:41 2025 by rpki-client