This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: erlKvG83jAxG+ehabvEQFOnH/qT15uG7TwiqiBNAY+c= Subject key identifier: 26:65:AC:92:D1:CB:8C:F0:81:73:79:D9:FF:D3:36:45:A8:AC:21:C0 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 0333 Signing time: Mon 29 Dec 2025 00:07:48 +0000 Manifest this update: Mon 29 Dec 2025 00:07:47 +0000 Manifest next update: Mon 05 Jan 2026 00:07:47 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: 5Hn2bJVBgMvH0qnxfb8xP8XHa5bMpR3Y5T3GzaTfLZg=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: q/TcJaaAitP3rzneDoOcxqjjnobWifgs1ChVJEG3jdI=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 00:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Dec 29 00:07:47 2025 GMT Not After : Jan 5 00:07:47 2026 GMT Subject: CN=6951c653-eacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:df:5f:14:c9:99:4b:4b:70:18:a7:d0:c9: cd:0d:50:0a:ad:68:14:59:47:ce:39:6f:d0:b3:91: 55:c0:d0:37:87:e2:42:85:90:51:cc:7f:7d:3d:9e: 71:1c:8c:da:84:ea:5c:da:33:89:19:63:4e:b4:46: c8:00:5e:0f:5b:90:d8:e1:c5:26:47:ce:43:66:4a: da:47:ab:37:21:8c:22:50:07:3e:96:f1:be:10:3b: 73:70:33:77:a7:d4:fe:75:dc:6c:9e:08:29:ea:56: 3e:05:b2:a4:69:b9:59:df:a0:52:02:af:65:7a:9d: 72:e0:0d:0f:b8:95:38:02:4e:ed:dd:eb:2c:f5:bd: 68:42:7a:53:4e:7d:50:6e:f8:cc:2e:aa:88:e1:17: d4:e9:da:e3:cd:d0:17:39:3c:d6:19:23:a7:de:c8: 7e:6e:1e:8a:6e:8c:29:35:19:f2:26:95:00:4b:a9: ea:04:ec:d8:03:16:fa:df:af:64:f0:3a:98:99:90: d7:0f:8a:d3:14:81:3a:40:3d:39:00:a1:42:4e:18: 87:8f:76:fc:17:25:65:76:f1:ed:80:55:7d:cd:ea: e1:c6:6b:8b:64:b5:dd:9c:dc:96:34:f8:7b:46:69: fa:36:20:58:6f:12:25:3b:68:40:2e:a1:f2:1b:08: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:65:AC:92:D1:CB:8C:F0:81:73:79:D9:FF:D3:36:45:A8:AC:21:C0 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f5:55:1a:e3:38:96:c5:67:6b:44:94:ba:38:67:49:82:41: 66:15:17:21:e9:d1:d5:e2:99:f2:eb:47:ff:a9:9f:e8:ed:7f: 89:04:91:4a:b1:30:fb:f6:91:1d:5f:b8:62:00:3a:70:60:c6: 21:d1:8a:88:e2:38:dc:0d:30:f7:8c:9b:bd:6a:51:10:40:fc: 7c:01:c7:65:fc:3f:93:8b:d5:e5:a9:03:70:a2:16:24:f5:81: 4e:d6:eb:2e:cf:00:2f:ea:4d:e5:fd:d1:76:22:d6:dc:90:07: f9:b4:65:8a:a7:c1:fa:60:48:06:6f:1f:bf:f3:64:b1:45:41: 1b:96:7d:61:ab:b7:9f:dd:6f:39:00:37:be:b4:56:52:92:bf: 52:5b:8f:89:3a:67:18:b4:44:13:9d:03:0d:f3:b1:28:62:3d: 10:45:4e:c4:a3:ae:31:29:83:48:89:41:d7:c9:5d:63:8f:5b: d0:37:20:b8:33:b6:56:b9:f1:42:dc:31:26:ce:64:be:1f:de: c2:32:b0:6f:22:a1:a3:c4:16:bb:8d:3e:68:1e:10:33:a8:e4: de:94:6c:dc:3e:85:5f:d8:17:51:3c:ef:33:df:83:6b:b7:01: c5:d7:ca:a9:96:50:5c:20:6c:30:06:15:eb:5f:fc:6a:72:bb: 6b:04:92:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjUxMjI5MDAwNzQ3WhcNMjYwMTA1MDAwNzQ3WjAYMRYwFAYD VQQDDA02OTUxYzY1My1lYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMbfXxTJmUtLcBin0MnNDVAKrWgUWUfOOW/Qs5FVwNA3h+JChZBRzH99PZ5x HIzahOpc2jOJGWNOtEbIAF4PW5DY4cUmR85DZkraR6s3IYwiUAc+lvG+EDtzcDN3 p9T+ddxsnggp6lY+BbKkablZ36BSAq9lep1y4A0PuJU4Ak7t3ess9b1oQnpTTn1Q bvjMLqqI4RfU6drjzdAXOTzWGSOn3sh+bh6KbowpNRnyJpUAS6nqBOzYAxb6369k 8DqYmZDXD4rTFIE6QD05AKFCThiHj3b8FyVldvHtgFV9zerhxmuLZLXdnNyWNPh7 Rmn6NiBYbxIlO2hALqHyGwgYjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZlrJLR y4zwgXN52f/TNkWorCHAMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT9VUa4ziWxWdrRJS6OGdJgkFmFRch6dHV4pny60f/qZ/o7X+JBJFK sTD79pEdX7hiADpwYMYh0YqI4jjcDTD3jJu9alEQQPx8Acdl/D+Ti9XlqQNwohYk 9YFO1usuzwAv6k3l/dF2ItbckAf5tGWKp8H6YEgGbx+/82SxRUEbln1hq7ef3W85 ADe+tFZSkr9SW4+JOmcYtEQTnQMN87EoYj0QRU7Eo64xKYNIiUHXyV1jj1vQNyC4 M7ZWufFC3DEmzmS+H97CMrBvIqGjxBa7jT5oHhAzqOTelGzcPoVf2BdRPO8z34Nr twHF18qpllBcIGwwBhXrX/xqcrtrBJIT -----END CERTIFICATE-----Generated at Tue Dec 30 14:56:20 2025 by rpki-client