This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: /XlWRqcV97KW/ipCFcrpyx47Rwutug3mWTzkvbaEimQ= Subject key identifier: C3:DC:C7:E4:50:C6:3D:2B:37:BA:41:4B:D2:C8:0E:73:5A:16:41:D8 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0186 Signing time: Fri 19 Dec 2025 02:46:33 +0000 Manifest this update: Fri 19 Dec 2025 02:46:33 +0000 Manifest next update: Fri 26 Dec 2025 02:46:33 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: SDSQIMrWs009gBvgkVK9pwdNUyda79ub6YCXgh3LLgs=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Dec 19 02:46:33 2025 GMT Not After : Dec 26 02:46:33 2025 GMT Subject: CN=6944bc89-7143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:a1:a7:6e:bb:b6:68:a7:e0:e6:70:45:59: 58:49:87:1e:3b:a1:b5:ce:a4:26:f4:25:85:68:96: 1e:ea:fa:c0:ac:f4:c6:e8:27:93:47:98:e5:76:0e: df:ab:1c:11:8c:c4:0d:08:39:39:8a:fd:16:e5:21: de:49:51:f9:99:c6:ef:55:09:44:cf:a0:44:a7:6a: 88:3b:05:10:98:78:c0:d3:f9:45:2d:da:0d:f0:e6: 41:4d:bb:ec:df:16:5b:25:bd:89:be:92:c8:f6:9b: 01:8b:1e:d2:6f:99:0e:51:d9:b7:0c:61:8b:63:4b: 90:86:58:40:79:90:20:7b:18:a7:72:79:84:43:9e: e9:1d:77:af:5b:ad:6f:87:2f:4a:6d:f5:92:1d:e9: 7b:d3:13:e0:ff:29:7b:09:3f:8b:66:b0:28:f3:00: 12:56:53:f5:0e:94:54:6a:8f:d4:3e:ac:f8:0a:b9: ab:ca:ff:f1:bf:9c:8f:34:fa:6c:8e:eb:1e:b1:a5: 68:aa:bc:38:80:80:4f:a1:05:d4:3b:29:51:b0:77: 4c:96:e9:0a:26:1b:04:1e:44:1a:3c:1b:a9:d4:54: 8d:25:d0:e5:d9:35:51:4f:ea:35:1a:03:f1:95:7c: a5:d6:f9:07:96:1b:82:38:91:69:f1:63:df:2e:49: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:C7:E4:50:C6:3D:2B:37:BA:41:4B:D2:C8:0E:73:5A:16:41:D8 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bc:cb:40:a1:44:92:0d:82:d0:a7:77:10:97:b1:78:ce:8b: a8:1b:18:b5:dc:6b:76:46:b5:e0:ad:6c:6c:f1:af:9b:e0:93: ca:a1:35:4a:ea:af:98:22:9a:08:7e:44:9d:90:f1:55:90:f8: 56:82:ba:bb:48:2e:4a:6d:76:0a:88:f7:a1:4d:34:66:c4:ac: 44:eb:ed:aa:af:ca:60:80:69:d1:20:2b:fc:83:55:4b:42:26: 29:03:16:a1:01:31:7d:ca:52:7f:ef:be:d7:29:c9:7d:69:2e: 2d:20:da:37:69:95:94:8d:da:22:e0:4a:3f:ba:27:5d:81:4c: d3:4c:af:a0:39:45:b7:97:5e:45:b1:a7:c0:c5:ee:14:c4:38: 39:25:05:43:85:ad:8b:0b:68:ad:d4:b0:73:0e:7b:eb:f2:5f: 9a:82:e2:46:46:a7:c6:fe:66:db:e3:51:f6:37:ea:24:c1:6c: 8b:7e:30:dd:40:b2:b0:79:45:82:4a:71:3d:e2:0b:c9:d7:cf: ae:cb:5f:75:a5:e2:56:10:0e:d6:2f:8b:7b:06:6d:32:62:4e: 47:5e:fb:90:c4:6d:d8:fe:17:ef:58:c2:b9:02:eb:41:7b:fa: 75:3b:1e:8e:39:8d:75:ab:b9:f0:c8:2f:d1:de:32:d1:11:1b: 8a:90:8b:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUxMjE5MDI0NjMzWhcNMjUxMjI2MDI0NjMzWjAYMRYwFAYD VQQDDA02OTQ0YmM4OS03MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGShp267tmin4OZwRVlYSYceO6G1zqQm9CWFaJYe6vrArPTG6CeTR5jldg7f qxwRjMQNCDk5iv0W5SHeSVH5mcbvVQlEz6BEp2qIOwUQmHjA0/lFLdoN8OZBTbvs 3xZbJb2JvpLI9psBix7Sb5kOUdm3DGGLY0uQhlhAeZAgexincnmEQ57pHXevW61v hy9KbfWSHel70xPg/yl7CT+LZrAo8wASVlP1DpRUao/UPqz4Crmryv/xv5yPNPps jusesaVoqrw4gIBPoQXUOylRsHdMlukKJhsEHkQaPBup1FSNJdDl2TVRT+o1GgPx lXyl1vkHlhuCOJFp8WPfLklaJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPcx+RQ xj0rN7pBS9LIDnNaFkHYMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANvMtAoUSSDYLQp3cQl7F4zouoGxi13Gt2RrXgrWxs8a+b4JPKoTVK 6q+YIpoIfkSdkPFVkPhWgrq7SC5KbXYKiPehTTRmxKxE6+2qr8pggGnRICv8g1VL QiYpAxahATF9ylJ/777XKcl9aS4tINo3aZWUjdoi4Eo/uiddgUzTTK+gOUW3l15F safAxe4UxDg5JQVDha2LC2it1LBzDnvr8l+aguJGRqfG/mbb41H2N+okwWyLfjDd QLKweUWCSnE94gvJ18+uy191peJWEA7WL4t7Bm0yYk5HXvuQxG3Y/hfvWMK5AutB e/p1Ox6OOY11q7nwyC/R3jLRERuKkIsK -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:40 2025 by rpki-client