This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: Vj6fVTAFYdUl3RKAhnIMVa6R8s2SmA8/7rfagRHcbXc= Subject key identifier: 1B:EF:3B:87:91:C9:8B:B1:53:11:BB:67:7B:85:00:B7:E9:8C:64:16 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 0182 Signing time: Sun 21 Dec 2025 02:53:59 +0000 Manifest this update: Sun 21 Dec 2025 02:53:58 +0000 Manifest next update: Sun 28 Dec 2025 02:53:58 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: 8nySwmUkLuRBBD9YHwqLnUsq5oIiuwSH7Y+NyE5GbIY=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: Dec 21 02:53:58 2025 GMT Not After : Dec 28 02:53:58 2025 GMT Subject: CN=69476147-02e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:f1:3f:dc:29:82:d7:66:90:a0:ae:e3:7d: cd:86:2d:79:98:e0:21:6f:88:3a:91:48:ed:d3:92: 3a:cb:23:0a:9a:c0:9a:bf:28:98:90:95:45:1d:6e: e9:a5:3b:e9:50:cc:c9:15:6b:6c:17:cd:fb:9d:ee: 68:9e:e8:13:9b:e6:b6:45:3e:ac:69:f1:45:c6:3d: ac:d7:2a:b9:fb:10:bf:e9:e0:4e:a8:a0:28:d5:f8: d0:97:6b:45:0e:e0:7d:46:df:4a:52:02:9f:aa:85: a4:c2:f9:11:bd:c5:11:fd:fd:52:51:97:6c:50:05: a4:d8:e4:41:4c:20:fe:1b:0a:6a:3c:b4:10:e4:3a: e1:6c:3c:21:68:8d:2e:10:59:c9:53:ec:91:3e:f1: 64:a4:da:22:7d:35:b5:7a:c2:c3:45:ea:83:4c:45: cd:6b:74:ec:4f:33:48:25:55:c0:6a:32:77:03:73: f2:81:87:90:af:ce:46:ce:92:fe:a9:bb:6a:2c:d7: 70:4c:03:5e:67:a5:04:8d:eb:55:42:42:1c:79:b3: 5e:6a:c6:9e:84:44:02:fe:45:a4:ab:cd:2e:10:f9: b9:e4:79:b8:45:9b:7a:b4:ce:61:4a:42:5f:6b:56: eb:8b:f4:80:25:9a:b5:2c:ec:c7:e9:4d:00:13:23: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EF:3B:87:91:C9:8B:B1:53:11:BB:67:7B:85:00:B7:E9:8C:64:16 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7e:3c:c4:5e:c6:ec:f8:fe:a7:f7:31:9e:0f:d6:5b:b7:4a: 0d:65:6f:d4:80:85:76:6e:35:2a:6e:13:7b:d8:a6:69:84:52: dc:da:8c:b5:20:d0:a7:bd:1e:9b:08:ef:04:26:a5:47:e2:86: 50:fd:32:de:ca:80:e9:e1:52:c4:d8:fd:2c:70:19:8b:a9:a6: e1:3d:aa:2c:a8:f8:99:7c:12:4b:02:57:bb:9e:9b:4e:45:81: b4:40:90:b5:d9:84:e4:3d:eb:ca:1b:73:1c:e9:5f:37:92:2e: 03:7a:4b:70:5b:ad:fc:8c:cc:d1:72:b3:da:75:e0:cf:a0:45: bf:44:cd:87:38:5c:fb:27:c5:e6:ac:0f:a2:2a:1c:3c:aa:b0: 17:d2:cf:90:70:ad:61:22:be:b1:63:02:ab:ff:7d:cf:21:38: 16:8c:73:3b:59:8f:75:2c:ec:81:48:99:49:d3:2a:db:d4:d8: 1e:48:04:b9:02:9c:71:6e:3e:f3:5d:23:11:9a:de:41:64:18: c5:b8:3b:81:17:2d:66:a8:68:d3:80:32:54:96:d6:c2:b8:0a: 8a:20:20:2d:5f:81:93:f3:37:d3:66:2e:25:eb:dd:00:cb:a1: e4:67:0f:ea:04:95:f6:67:e3:97:d7:04:a1:50:94:6b:ac:a2: 2f:91:d4:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjUxMjIxMDI1MzU4WhcNMjUxMjI4MDI1MzU4WjAYMRYwFAYD VQQDDA02OTQ3NjE0Ny0wMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS7xP9wpgtdmkKCu433Nhi15mOAhb4g6kUjt05I6yyMKmsCavyiYkJVFHW7p pTvpUMzJFWtsF837ne5onugTm+a2RT6safFFxj2s1yq5+xC/6eBOqKAo1fjQl2tF DuB9Rt9KUgKfqoWkwvkRvcUR/f1SUZdsUAWk2ORBTCD+GwpqPLQQ5DrhbDwhaI0u EFnJU+yRPvFkpNoifTW1esLDReqDTEXNa3TsTzNIJVXAajJ3A3PygYeQr85GzpL+ qbtqLNdwTANeZ6UEjetVQkIcebNeasaehEQC/kWkq80uEPm55Hm4RZt6tM5hSkJf a1bri/SAJZq1LOzH6U0AEyMzKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvvO4eR yYuxUxG7Z3uFALfpjGQWMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACfjzEXsbs+P6n9zGeD9Zbt0oNZW/UgIV2bjUqbhN72KZphFLc2oy1 INCnvR6bCO8EJqVH4oZQ/TLeyoDp4VLE2P0scBmLqabhPaosqPiZfBJLAle7nptO RYG0QJC12YTkPevKG3Mc6V83ki4DektwW638jMzRcrPadeDPoEW/RM2HOFz7J8Xm rA+iKhw8qrAX0s+QcK1hIr6xYwKr/33PITgWjHM7WY91LOyBSJlJ0yrb1NgeSAS5 Apxxbj7zXSMRmt5BZBjFuDuBFy1mqGjTgDJUltbCuAqKICAtX4GT8zfTZi4l690A y6HkZw/qBJX2Z+OX1wShUJRrrKIvkdTB -----END CERTIFICATE-----Generated at Mon Dec 22 02:08:12 2025 by rpki-client