This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: fr+EfBFE+HsANSE0cfYH0lM76S01dr2TcNio5aMUBQs= Subject key identifier: C0:25:A7:8A:4D:B6:77:A4:28:7F:4C:48:CF:BE:57:3B:67:47:96:B3 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 032F Signing time: Sun 21 Dec 2025 00:17:41 +0000 Manifest this update: Sun 21 Dec 2025 00:17:40 +0000 Manifest next update: Sun 28 Dec 2025 00:17:40 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: l7onsrfFsOrG6l23A/hSdaKzdrcjDkHIYH/FcZYX63Y=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: q/TcJaaAitP3rzneDoOcxqjjnobWifgs1ChVJEG3jdI=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Dec 21 00:17:40 2025 GMT Not After : Dec 28 00:17:40 2025 GMT Subject: CN=69473ca4-553f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:4e:41:ca:f3:07:3f:80:f8:82:76:13:7c: 3a:7a:10:9d:31:55:9b:75:74:6a:91:5f:8b:ba:cd: d8:5b:1d:6e:e7:9e:42:23:bc:d7:31:1a:39:9a:73: ff:c5:29:b1:fb:84:70:7b:3e:2a:3f:6c:fd:4c:e5: 1d:fb:1f:24:fc:87:fd:1a:d2:eb:75:75:a0:61:aa: 53:bd:6d:fd:6a:fd:56:93:49:01:72:4e:f2:d3:80: 77:71:4d:af:a5:4e:66:f9:af:10:28:d3:d8:7c:ff: 06:a8:7e:aa:2a:03:b4:15:53:80:45:c5:7c:79:69: d6:35:2a:94:bf:c1:60:b7:89:b8:e8:41:9a:cc:14: 7f:df:81:0e:b8:f2:a0:71:70:3d:b4:b0:04:b6:9a: 5f:93:f6:03:35:71:c4:c3:96:69:e3:19:24:d8:51: e0:28:df:6f:56:27:f4:45:4f:cb:38:e6:b2:46:09: 72:20:5a:64:be:fd:c1:e3:65:0b:07:bc:cc:6f:e1: 9a:1a:38:00:17:cb:6b:8e:38:02:4f:ff:e2:30:5b: 4b:14:e6:7f:fc:b3:82:d4:75:12:fc:f6:e5:d8:ec: 8d:ff:00:e9:03:f6:a5:64:ab:ab:16:d3:00:08:ba: b4:8c:52:3c:26:3c:f8:da:96:77:52:54:df:30:b1: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:A7:8A:4D:B6:77:A4:28:7F:4C:48:CF:BE:57:3B:67:47:96:B3 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7c:16:72:57:a3:52:9d:e7:0b:47:37:cc:12:55:8a:38:3e: 5c:51:24:b2:91:ea:15:03:ef:a3:fe:ed:5f:ec:23:af:f4:6a: 25:af:d2:3f:08:c9:7a:2d:71:17:86:f7:f6:f5:32:d6:ae:6e: b5:1b:ed:47:fe:b9:28:0c:7d:b4:3b:0f:3a:2e:3a:1f:13:6e: c3:d5:fe:38:b8:84:ff:85:bf:dc:af:37:56:f3:e7:3b:49:02: 60:bf:d6:b3:03:21:d9:ab:b2:f3:d7:36:f2:de:7f:80:d5:04: 23:91:4c:98:fd:be:9d:65:73:9b:01:9d:1f:6c:84:c0:3e:06: e7:d8:22:2b:ce:d3:29:76:f0:eb:52:2e:72:85:83:03:c7:16: 29:ca:20:dc:07:9d:9a:4b:1d:71:48:fa:4e:e6:8a:ed:ed:10: 73:50:fe:ff:ab:ff:d3:0f:bb:82:90:7e:c4:b8:e9:42:d4:11: 30:8e:a4:59:f4:7e:cc:07:f0:69:44:fa:03:5b:c7:ec:df:e4: 6a:01:f8:23:a3:18:51:1c:33:17:b7:5c:f4:19:f4:a2:90:c7: 1e:f5:26:ad:e3:65:d4:1c:c5:9a:73:1d:4c:b7:8b:cb:03:a7: 38:ff:bd:72:d0:7b:73:10:87:24:81:90:c3:1a:63:8d:6c:36: 22:22:71:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjUxMjIxMDAxNzQwWhcNMjUxMjI4MDAxNzQwWjAYMRYwFAYD VQQDDA02OTQ3M2NhNC01NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq51OQcrzBz+A+IJ2E3w6ehCdMVWbdXRqkV+Lus3YWx1u555CI7zXMRo5mnP/ xSmx+4Rwez4qP2z9TOUd+x8k/If9GtLrdXWgYapTvW39av1Wk0kBck7y04B3cU2v pU5m+a8QKNPYfP8GqH6qKgO0FVOARcV8eWnWNSqUv8Fgt4m46EGazBR/34EOuPKg cXA9tLAEtppfk/YDNXHEw5Zp4xkk2FHgKN9vVif0RU/LOOayRglyIFpkvv3B42UL B7zMb+GaGjgAF8trjjgCT//iMFtLFOZ//LOC1HUS/Pbl2OyN/wDpA/alZKurFtMA CLq0jFI8Jjz42pZ3UlTfMLFSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAlp4pN tnekKH9MSM++VztnR5azMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASfBZyV6NSnecLRzfMElWKOD5cUSSykeoVA++j/u1f7COv9Golr9I/ CMl6LXEXhvf29TLWrm61G+1H/rkoDH20Ow86LjofE27D1f44uIT/hb/crzdW8+c7 SQJgv9azAyHZq7Lz1zby3n+A1QQjkUyY/b6dZXObAZ0fbITAPgbn2CIrztMpdvDr Ui5yhYMDxxYpyiDcB52aSx1xSPpO5ort7RBzUP7/q//TD7uCkH7EuOlC1BEwjqRZ 9H7MB/BpRPoDW8fs3+RqAfgjoxhRHDMXt1z0GfSikMce9Sat42XUHMWacx1Mt4vL A6c4/71y0HtzEIckgZDDGmONbDYiInGp -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:32 2025 by rpki-client