This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: yQZo0cbHmSePKOch9aJ2/Lkpg0mzc1Qqe1Ti4zTUmKg= Subject key identifier: B4:09:48:D1:E1:E6:B6:83:21:4C:FB:2D:FC:CE:C9:74:8F:A7:CE:8B Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E39 Signing time: Thu 18 Dec 2025 17:36:37 +0000 Manifest this update: Thu 18 Dec 2025 17:36:36 +0000 Manifest next update: Thu 25 Dec 2025 17:36:36 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: ZrKT0ag1ucyDLV3EJBLOZIv7R6eX3GFQwQPT1fI578Y=) 2: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 3DrTSsxaKfHNG5QI6Tt7BoAnrvxk6SFVvs/husXrnBI=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: xh37AiJohCRfHSRUDjcvxE7B1+32xaC/K8WdUvsEnhs=) 5: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: wn9BYbDEeMgzZ+nvIIVHE03FH3j72pfXBWyBUiQ/bUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Dec 18 17:36:36 2025 GMT Not After : Dec 25 17:36:36 2025 GMT Subject: CN=69443ba5-ae06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a7:80:7c:a1:db:3b:fd:95:cc:51:78:ca:48: 48:67:96:00:d6:2d:55:ce:50:fe:93:9d:1c:11:50: 2c:9f:72:6f:07:7e:b2:7d:ae:6f:6a:37:19:f0:f5: 0b:6f:7e:a9:00:74:85:77:86:cd:14:5b:5b:0a:31: a3:62:6e:9b:40:7e:f8:ed:fa:e9:2f:79:03:c6:ff: c1:63:25:b5:5d:dd:be:ca:49:ab:0d:d5:dd:9a:88: c6:19:3d:9b:9c:24:8a:e5:95:c3:46:aa:90:51:4b: 92:fb:ea:5d:e0:eb:5a:bb:73:b0:5b:aa:50:68:09: f9:32:83:f0:80:8d:e1:ce:6a:22:da:b6:c4:c4:f6: c6:38:aa:9b:00:01:04:68:33:80:c1:0f:1f:40:ff: a7:f9:43:b9:c2:8e:b4:4c:fb:4d:dd:0d:fa:29:b4: 96:ff:d1:66:49:9e:24:90:74:82:5c:b6:38:b3:58: ed:cc:c1:57:15:00:02:ca:04:3d:57:28:dc:34:10: 38:1e:86:6e:20:a0:3b:b0:52:d3:b4:21:a8:d6:e1: bb:f0:a1:2b:f1:e5:a9:87:21:af:b7:dc:13:15:1c: 88:ed:d8:e6:9e:12:fb:fa:22:f7:8b:df:48:42:6d: c5:a7:2b:9d:5f:58:08:ec:59:04:71:ee:32:b3:25: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:09:48:D1:E1:E6:B6:83:21:4C:FB:2D:FC:CE:C9:74:8F:A7:CE:8B X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:28:85:99:67:29:51:52:42:17:29:a6:98:7b:4c:3d:8f:b6: 22:f3:c0:e9:40:2c:2b:11:6b:84:63:61:bc:96:92:34:18:df: 68:1b:11:fa:78:87:2c:2c:87:57:19:5d:e8:c1:01:31:b3:2e: 84:93:66:81:ad:e7:23:5e:3d:32:23:26:58:47:6c:89:79:b5: 8c:fa:ed:4f:ef:0a:58:7e:06:fc:6f:74:f2:a9:4f:f8:c7:90: c4:48:3a:3f:1c:46:a7:be:9c:ff:fb:bc:fd:c7:bf:db:f1:76: 0e:c5:24:b2:ab:7c:e9:d2:a0:c9:9c:d7:99:d0:81:39:6c:8a: 37:37:20:11:f8:e0:ec:d6:98:cf:b6:3b:22:08:12:42:9e:4e: 9d:c8:e8:ff:72:bb:1a:97:4a:0c:da:5b:fc:c6:59:2e:ff:19: ce:f5:db:42:4c:d7:f4:32:91:c9:c5:3f:79:2e:47:ef:bf:33: 78:81:a2:f8:a5:ef:6e:7a:5f:22:d4:52:e9:34:0c:95:93:da: 37:0c:bc:06:59:99:21:18:cd:d1:03:a9:a0:d0:1e:c9:f7:bd: 7a:9e:b7:18:ab:5b:0c:a8:b1:3e:45:b2:6e:cf:18:ac:ea:99: 21:be:cb:c0:bb:d6:90:ca:a3:d3:19:d5:da:a5:36:bb:36:1d: e0:27:39:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUxMjE4MTczNjM2WhcNMjUxMjI1MTczNjM2WjAYMRYwFAYD VQQDDA02OTQ0M2JhNS1hZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KeAfKHbO/2VzFF4ykhIZ5YA1i1VzlD+k50cEVAsn3JvB36yfa5vajcZ8PUL b36pAHSFd4bNFFtbCjGjYm6bQH747frpL3kDxv/BYyW1Xd2+ykmrDdXdmojGGT2b nCSK5ZXDRqqQUUuS++pd4Otau3OwW6pQaAn5MoPwgI3hzmoi2rbExPbGOKqbAAEE aDOAwQ8fQP+n+UO5wo60TPtN3Q36KbSW/9FmSZ4kkHSCXLY4s1jtzMFXFQACygQ9 VyjcNBA4HoZuIKA7sFLTtCGo1uG78KEr8eWphyGvt9wTFRyI7djmnhL7+iL3i99I Qm3FpyudX1gI7FkEce4ysyXqUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQJSNHh 5raDIUz7LfzOyXSPp86LMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtKIWZZylRUkIXKaaYe0w9j7Yi88DpQCwrEWuEY2G8lpI0GN9oGxH6 eIcsLIdXGV3owQExsy6Ek2aBrecjXj0yIyZYR2yJebWM+u1P7wpYfgb8b3TyqU/4 x5DESDo/HEanvpz/+7z9x7/b8XYOxSSyq3zp0qDJnNeZ0IE5bIo3NyAR+ODs1pjP tjsiCBJCnk6dyOj/crsal0oM2lv8xlku/xnO9dtCTNf0MpHJxT95LkfvvzN4gaL4 pe9uel8i1FLpNAyVk9o3DLwGWZkhGM3RA6mg0B7J9716nrcYq1sMqLE+RbJuzxis 6pkhvsvAu9aQyqPTGdXapTa7Nh3gJznd -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:20 2025 by rpki-client