This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json) Hash identifier: +qh9yrWSpbmMY+ojQvFd3IjRNCs4CSVjo3dh2kBWJ7g= Subject key identifier: BC:A2:CC:15:85:E4:75:62:DF:5F:4E:E7:DB:1C:1D:FD:AB:1A:99:BC Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Certificate serial: 1879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft Manifest number: 186F Signing time: Mon 22 Dec 2025 16:15:34 +0000 Manifest this update: Mon 22 Dec 2025 16:15:33 +0000 Manifest next update: Mon 29 Dec 2025 16:15:33 +0000 Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: aTSvusJgOgGm3nUTLMhySC6rHzwsgjIe/Ob4TASaP20=) 2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: 0Z6kDXRBMxwvIo1Q10HNFq5Rb/AOMQ+sUO12LNkbJR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6265 (0x1879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Validity Not Before: Dec 22 16:15:33 2025 GMT Not After : Dec 29 16:15:33 2025 GMT Subject: CN=69496ea6-487c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:d2:9b:bd:5f:d2:c7:40:2c:a7:39:9c:86: f3:8b:4d:fc:ff:47:68:a3:be:73:37:78:33:5a:c1: d7:2c:4a:ed:fd:21:7c:92:42:ee:f0:69:00:95:e9: 2d:3e:fd:d9:3c:ca:b5:c8:7a:d8:32:5e:6a:36:de: 19:62:5d:05:27:52:f8:f5:38:23:3d:6d:19:fb:df: a5:56:bb:d9:a1:ae:e0:90:8d:98:e2:2b:fe:eb:1d: ad:ea:b4:ab:18:c4:7a:4f:cd:08:94:24:94:a2:f0: 60:4d:ad:44:7b:82:76:4c:85:57:e3:0b:0e:40:ff: 9f:be:d2:c2:ad:00:c5:e7:90:7c:00:ca:fd:d8:0f: 75:51:45:c3:14:cf:93:42:21:a8:c1:5d:8a:2c:bc: 32:62:1b:bd:0d:61:cf:6a:c3:0c:76:b3:18:14:7b: 0b:be:dd:67:3d:48:4c:4c:73:b6:c9:91:47:7a:34: 8a:b3:b6:03:57:4b:c7:80:4a:5c:6b:2b:ff:ae:db: aa:c8:d1:a3:7d:53:85:9a:b7:06:72:a6:96:1a:e2: 17:b4:1f:f0:18:b8:c3:7e:3d:07:bf:5d:2d:67:4c: 7e:12:8f:9d:34:71:94:78:4b:f0:eb:8c:09:a6:3f: 9d:4d:90:ec:79:8c:c2:8e:39:f3:2a:e0:8f:4a:73: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A2:CC:15:85:E4:75:62:DF:5F:4E:E7:DB:1C:1D:FD:AB:1A:99:BC X509v3 Authority Key Identifier: keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a8:37:7d:c5:fc:42:0d:4c:fe:d5:e7:77:f6:34:c9:13:ae: cf:09:b7:66:e5:da:c2:92:c4:18:e2:b4:d5:a5:d1:32:43:d0: 9f:ee:9a:1d:70:19:ff:9f:a8:ba:02:22:a0:4a:cd:5f:df:ba: c8:de:23:bf:0e:54:02:13:d1:9f:9b:f5:01:d1:03:19:3d:0a: 29:12:1e:e2:c6:e7:d1:8b:6f:7a:c1:8b:13:24:2e:2c:6f:21: 98:94:00:fc:be:8b:ae:e4:30:2a:b1:18:6f:f0:3b:b0:46:5b: 79:dc:13:4c:70:02:c7:d9:41:29:79:b3:ca:74:41:7f:53:b9: 7e:be:0f:41:a9:df:6d:a9:33:f5:2a:d9:4d:f8:6c:02:f5:c1: 5e:26:0d:a0:a3:78:3c:4b:b9:b6:96:19:2f:f8:f9:a3:e1:96: dc:ea:12:bb:e9:2d:34:ab:03:e8:ac:6b:7c:9f:6f:7c:10:99: 02:9c:5e:03:7a:48:49:55:1c:b1:f2:ad:6d:cf:68:89:13:97: 69:ce:32:9c:75:de:48:c0:fc:7e:cb:c9:5b:b9:ed:06:9f:7e: d2:c4:e5:33:bc:66:cf:8c:05:19:a3:ba:06:a4:e9:05:fb:64: 03:55:8f:a9:16:f3:d0:da:76:db:04:4d:44:3d:36:d9:20:9b: bf:2c:2d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE RjlCNDZGMTUwHhcNMjUxMjIyMTYxNTMzWhcNMjUxMjI5MTYxNTMzWjAYMRYwFAYD VQQDDA02OTQ5NmVhNi00ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q/Sm71f0sdALKc5nIbzi038/0doo75zN3gzWsHXLErt/SF8kkLu8GkAlekt Pv3ZPMq1yHrYMl5qNt4ZYl0FJ1L49TgjPW0Z+9+lVrvZoa7gkI2Y4iv+6x2t6rSr GMR6T80IlCSUovBgTa1Ee4J2TIVX4wsOQP+fvtLCrQDF55B8AMr92A91UUXDFM+T QiGowV2KLLwyYhu9DWHPasMMdrMYFHsLvt1nPUhMTHO2yZFHejSKs7YDV0vHgEpc ayv/rtuqyNGjfVOFmrcGcqaWGuIXtB/wGLjDfj0Hv10tZ0x+Eo+dNHGUeEvw64wJ pj+dTZDseYzCjjnzKuCPSnO5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyizBWF 5HVi319O59scHf2rGpm8MB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1 RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ NkNSUTJVcWxlV2ZmbTBieFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDqDd9xfxCDUz+1ed39jTJE67PCbdm5drCksQY4rTVpdEyQ9Cf7pod cBn/n6i6AiKgSs1f37rI3iO/DlQCE9Gfm/UB0QMZPQopEh7ixufRi296wYsTJC4s byGYlAD8vouu5DAqsRhv8DuwRlt53BNMcALH2UEpebPKdEF/U7l+vg9Bqd9tqTP1 KtlN+GwC9cFeJg2go3g8S7m2lhkv+Pmj4Zbc6hK76S00qwPorGt8n298EJkCnF4D ekhJVRyx8q1tz2iJE5dpzjKcdd5IwPx+y8lbue0Gn37SxOUzvGbPjAUZo7oGpOkF +2QDVY+pFvPQ2nbbBE1EPTbZIJu/LC3l -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:48 2025 by rpki-client