This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: H0pcDhvuedd3AscISl9E2UjNeTgArOIE9Z4i3/tPReM= Subject key identifier: AF:BC:4B:A5:FC:27:34:BB:FF:C9:93:AC:E9:AD:7D:40:4A:DF:52:15 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 0A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 0A07 Signing time: Mon 22 Dec 2025 19:16:31 +0000 Manifest this update: Mon 22 Dec 2025 19:16:30 +0000 Manifest next update: Mon 29 Dec 2025 19:16:30 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: Wt76aeqV64ZdyhGCU/uzcWQcAfqN7Akakkob1fccA2w=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: MZTRHkBugOG0/w9DN1EvKjeTW8go+K0xNXADKQ+F2nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Dec 22 19:16:30 2025 GMT Not After : Dec 29 19:16:30 2025 GMT Subject: CN=6949990f-40e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:81:f1:b7:e4:2a:6b:54:ab:f8:17:47:e4: 65:08:d5:3d:72:f5:06:a5:e9:ba:40:d9:19:5f:c3: 28:97:39:0c:e0:05:3f:81:42:e8:ce:ed:a7:81:6b: b0:0a:df:d2:4f:9c:b9:79:60:7d:36:c8:59:f4:64: 1b:f8:d0:cb:48:61:e1:d3:6d:6d:31:4f:bc:6f:99: a6:57:dc:ce:52:ab:42:ee:50:e9:45:31:cb:06:bd: 7d:99:dd:de:a6:12:cc:48:33:73:da:1b:56:d4:99: 37:2d:a4:fb:ce:94:a9:15:d9:d2:7a:48:fe:06:6a: ec:6a:38:3e:1a:ce:07:ce:5e:46:17:ec:65:96:93: c8:74:fb:98:75:fc:78:9c:da:b6:b5:ad:7a:89:f7: 8a:11:68:c0:ad:61:01:ae:dd:41:16:6e:8a:1f:96: f6:ff:1f:22:6e:f7:4b:0f:e1:06:8a:bc:4d:03:a6: 82:66:93:b1:ef:78:15:d0:7c:35:ab:f7:8f:bb:31: 36:a5:30:1e:64:f3:0e:00:0f:2f:c4:88:42:94:f8: e7:1f:57:55:a3:c6:64:d7:9a:b2:ec:57:a9:82:48: e1:3f:4b:03:b3:01:99:a7:a1:b4:d3:7d:d9:9f:5f: ba:c1:5e:66:ca:be:2a:1f:97:9c:e5:23:e3:f9:60: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BC:4B:A5:FC:27:34:BB:FF:C9:93:AC:E9:AD:7D:40:4A:DF:52:15 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:92:ca:a8:c1:85:d1:4e:8c:da:40:89:67:dc:57:7b:c1:ac: 0e:bb:87:73:0a:37:3a:85:cc:9f:cd:61:b2:40:72:1d:57:2d: 68:c1:cd:b6:b2:e4:88:92:40:4d:31:f5:fd:b6:8e:6c:49:96: 0b:9a:bd:e2:8d:ba:0f:c3:44:33:98:85:4f:65:36:96:dc:bd: 4c:07:85:16:00:18:6e:65:6d:c2:40:c1:9f:3c:0f:7c:56:19: 2f:9d:cd:f9:91:37:fc:80:23:32:c6:73:e7:51:70:39:00:bd: e4:55:55:52:79:02:b2:cd:71:02:b7:11:c3:d4:e5:0d:dd:c1: fe:e7:f0:0b:d5:c1:97:1f:36:f8:c1:ff:6a:f3:fc:e8:fc:61: b7:a5:81:1a:ed:1f:77:22:e2:ca:9c:f0:1a:b4:ce:b8:dd:3d: f6:cf:32:86:2c:04:13:09:6a:37:29:f6:b2:9a:20:e9:fe:1e: 6b:29:48:81:4c:48:e6:51:31:93:17:90:5d:15:94:65:5d:62: 3f:b0:15:a4:46:aa:74:26:45:82:6c:9e:92:e0:b4:6f:fc:a0: 1a:93:53:83:1f:f2:eb:39:cd:0d:a2:a6:7d:43:4d:23:28:7e: d7:77:a3:38:23:fd:a4:76:aa:20:79:06:9c:94:9c:b2:e2:29: 9e:f6:0b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUxMjIyMTkxNjMwWhcNMjUxMjI5MTkxNjMwWjAYMRYwFAYD VQQDDA02OTQ5OTkwZi00MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JCB8bfkKmtUq/gXR+RlCNU9cvUGpem6QNkZX8MolzkM4AU/gULozu2ngWuw Ct/ST5y5eWB9NshZ9GQb+NDLSGHh021tMU+8b5mmV9zOUqtC7lDpRTHLBr19md3e phLMSDNz2htW1Jk3LaT7zpSpFdnSekj+Bmrsajg+Gs4Hzl5GF+xllpPIdPuYdfx4 nNq2ta16ifeKEWjArWEBrt1BFm6KH5b2/x8ibvdLD+EGirxNA6aCZpOx73gV0Hw1 q/ePuzE2pTAeZPMOAA8vxIhClPjnH1dVo8Zk15qy7FepgkjhP0sDswGZp6G0033Z n1+6wV5myr4qH5ec5SPj+WBHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+8S6X8 JzS7/8mTrOmtfUBK31IVMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUksqowYXRTozaQIln3Fd7wawOu4dzCjc6hcyfzWGyQHIdVy1owc22 suSIkkBNMfX9to5sSZYLmr3ijboPw0QzmIVPZTaW3L1MB4UWABhuZW3CQMGfPA98 Vhkvnc35kTf8gCMyxnPnUXA5AL3kVVVSeQKyzXECtxHD1OUN3cH+5/AL1cGXHzb4 wf9q8/zo/GG3pYEa7R93IuLKnPAatM643T32zzKGLAQTCWo3KfaymiDp/h5rKUiB TEjmUTGTF5BdFZRlXWI/sBWkRqp0JkWCbJ6S4LRv/KAak1ODH/LrOc0NoqZ9Q00j KH7Xd6M4I/2kdqogeQaclJyy4ime9gu4 -----END CERTIFICATE-----Generated at Tue Dec 23 07:45:21 2025 by rpki-client