This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: HrutN18N2yRk1WJCxqyoMQeld0BGnIRSfTkWZcdBZ/c= Subject key identifier: 77:DB:1D:92:4C:62:EF:89:41:2F:D1:FB:CF:A5:3E:5B:D3:B2:5A:C2 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 013E Signing time: Tue 09 Dec 2025 02:46:27 +0000 Manifest this update: Tue 09 Dec 2025 02:46:26 +0000 Manifest next update: Tue 16 Dec 2025 02:46:26 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: hHn8UZKWd7v0nZqJ9AixAMWkFPpvagyYRCub5pDtg/8=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: 0dsUVKxnnglNpZZhhpBErhWI1oXUDVFF4BUubObFWiM=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: StZAIMtKvc+DvwzgQ26IlnkW4j9VonIWzSJOuU7IXLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 02:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Dec 9 02:46:26 2025 GMT Not After : Dec 16 02:46:26 2025 GMT Subject: CN=69378d83-68a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:55:e0:fb:db:e3:f7:e4:8f:bb:08:9c:8d: ab:75:44:c8:9c:d3:33:b2:39:4e:38:de:37:fe:17: d7:45:5f:81:c3:0d:aa:d1:6b:57:14:08:10:35:f6: 3d:b3:16:e7:92:6d:1a:b0:78:89:c4:99:ba:bd:55: eb:4b:94:aa:d6:7f:1f:fb:25:5e:45:a1:be:6d:fb: 76:b5:e7:3c:4d:de:c8:85:71:25:dd:07:d8:ae:63: 6e:4d:46:0b:ab:cc:e5:70:a5:56:c6:ab:85:c7:51: 62:f2:bd:31:c4:75:2b:c2:95:13:ae:f2:2f:29:55: 98:1a:7d:3f:65:4a:4b:58:fe:a5:67:2c:93:ad:4b: 3c:e7:b7:24:ae:4a:80:15:f3:25:c3:2f:d5:05:e0: a6:f5:81:5e:65:a7:95:90:c9:8f:b6:31:31:5c:7d: 8b:a6:58:8c:73:70:ea:c9:c7:a3:85:7f:68:59:7b: d6:c4:bf:c4:be:ca:13:6b:3b:01:ba:d7:ae:e9:77: d5:e1:ae:6b:c0:5b:a0:66:60:3c:44:c3:79:a7:4d: df:7e:19:26:32:18:23:88:74:9f:ba:84:66:41:2d: 57:48:ab:c0:ef:43:c2:5b:f4:ac:88:87:40:83:04: 68:a1:c9:8d:a5:d1:dc:2f:c6:38:e8:32:fc:8b:4b: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DB:1D:92:4C:62:EF:89:41:2F:D1:FB:CF:A5:3E:5B:D3:B2:5A:C2 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:18:08:4e:ad:35:5c:3a:25:c9:59:a7:8b:cf:a3:89:35: e9:52:78:02:01:70:b5:e4:e2:00:af:15:c3:d8:27:2f:ed:d5: 18:51:94:27:1c:29:b3:39:ed:34:3b:6b:37:bb:2d:33:ad:bc: ff:ef:b5:d1:31:67:8a:b6:d6:31:4d:dc:25:c1:ec:dc:36:84: c5:19:1d:66:df:bc:83:f4:4a:5e:00:b4:ff:84:93:8c:02:7b: 18:e9:2e:a1:8f:ba:a0:2a:ff:5e:c4:61:7a:fa:3c:93:b3:7e: 4b:bb:46:e5:0e:22:99:7d:8b:d9:5d:b0:b7:48:64:6b:d8:1c: 5c:d9:f0:79:34:48:28:c3:12:5a:d6:63:99:99:5d:9a:ca:10: 31:97:53:dd:a1:b4:dc:d7:3d:fb:08:c5:12:93:1a:c9:a5:68: 42:c5:5a:57:ed:b4:df:b4:96:73:bd:3d:d7:85:6c:38:59:19: de:93:52:36:22:52:8b:6d:70:6c:90:ef:76:ff:42:71:96:7a: 30:be:3d:a0:34:95:6c:bb:38:f3:08:e4:ae:7e:c6:9f:02:ea: 07:a2:1d:ff:a4:20:8b:8b:09:d5:88:f3:59:f9:8c:90:6d:c4: 26:24:91:a8:53:7a:75:58:eb:a5:17:b4:8c:41:d5:30:95:d0: 8f:c1:cb:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjUxMjA5MDI0NjI2WhcNMjUxMjE2MDI0NjI2WjAYMRYwFAYD VQQDEw02OTM3OGQ4My02OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLlV4Pvb4/fkj7sInI2rdUTInNMzsjlOON43/hfXRV+Bww2q0WtXFAgQNfY9 sxbnkm0asHiJxJm6vVXrS5Sq1n8f+yVeRaG+bft2tec8Td7IhXEl3QfYrmNuTUYL q8zlcKVWxquFx1Fi8r0xxHUrwpUTrvIvKVWYGn0/ZUpLWP6lZyyTrUs857ckrkqA FfMlwy/VBeCm9YFeZaeVkMmPtjExXH2LpliMc3DqycejhX9oWXvWxL/EvsoTazsB uteu6XfV4a5rwFugZmA8RMN5p03ffhkmMhgjiHSfuoRmQS1XSKvA70PCW/SsiIdA gwRoocmNpdHcL8Y46DL8i0v65wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfbHZJM Yu+JQS/R+8+lPlvTslrCMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAelxgITq01XDolyVmni8+jiTXpUngCAXC15OIArxXD2Ccv7dUYUZQn HCmzOe00O2s3uy0zrbz/77XRMWeKttYxTdwlwezcNoTFGR1m37yD9EpeALT/hJOM AnsY6S6hj7qgKv9exGF6+jyTs35Lu0blDiKZfYvZXbC3SGRr2Bxc2fB5NEgowxJa 1mOZmV2ayhAxl1PdobTc1z37CMUSkxrJpWhCxVpX7bTftJZzvT3XhWw4WRnek1I2 IlKLbXBskO92/0Jxlnowvj2gNJVsuzjzCOSufsafAuoHoh3/pCCLiwnViPNZ+YyQ bcQmJJGoU3p1WOulF7SMQdUwldCPwcvo -----END CERTIFICATE-----Generated at Wed Dec 10 18:26:58 2025 by rpki-client