This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: tMiDEbgUxN68gg7MAovSmv/Px8Br6ulECCVtntruOO4= Subject key identifier: 10:95:71:CD:C8:20:DA:7E:BF:43:5A:96:4E:BE:E7:77:FC:92:94:2B Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 019F Signing time: Fri 19 Dec 2025 02:58:31 +0000 Manifest this update: Fri 19 Dec 2025 02:58:30 +0000 Manifest next update: Fri 26 Dec 2025 02:58:30 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: KoECnbfkqvUHjjh3VJR85i4iWspwCFxPi0gf3N6ZyNU=) 2: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: ZO+BY1B+XgvoW0KKoO0apsMteX7veM0k8UtwvOCudts=) 3: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: KOUKQ6BoYe+OZvts9QDaZtXw/6SYWRIeerxskHjMAvw=) 4: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) 5: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 6: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 7: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 8: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 9: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: g1HOTpLTf3sk5gSzo54dPs52/QkaTA4XgGi9Wow0trs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Dec 19 02:58:30 2025 GMT Not After : Dec 26 02:58:30 2025 GMT Subject: CN=6944bf57-3330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:fc:f6:9b:21:05:f9:5b:46:88:7f:d3:2c: 62:1b:91:7c:c5:9a:8a:fa:83:64:6d:68:d2:ba:99: 87:00:24:c9:8e:fc:33:59:d1:1a:23:a2:20:46:49: 8f:c6:f8:b5:ce:f3:e4:c1:75:1c:73:a6:a0:6f:5d: 3b:c2:fb:db:40:e2:dd:bc:12:4d:2f:03:ab:49:63: 01:87:d6:20:69:81:3e:ae:fa:a8:74:cb:35:94:7b: 5a:f0:6b:ed:a5:fe:d4:43:e1:6d:3b:9b:99:d3:e4: 1e:ed:ee:7d:4e:2e:6a:d1:ca:6c:9a:14:76:93:86: 4b:02:8a:bb:8c:76:c6:3a:b4:2f:33:70:4d:5b:20: d4:24:00:05:78:72:58:f2:3f:ff:08:1a:db:46:e1: 96:18:2d:bc:6c:55:35:a7:08:88:0e:ab:56:9b:f7: b6:2a:ad:62:cc:87:80:ec:a7:be:c6:68:e8:73:34: ac:2e:9d:6b:5d:eb:bd:84:c8:5d:58:96:de:72:90: e3:4c:b1:fd:7e:7d:74:07:31:4f:10:8c:00:65:b6: ad:19:44:52:46:75:97:48:c6:a2:c3:da:dc:d7:64: 33:c2:60:81:5a:83:a0:43:c8:82:38:49:cd:4c:8f: 7e:a9:c8:77:7f:fa:86:d3:a7:f9:a0:19:60:0f:cb: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:71:CD:C8:20:DA:7E:BF:43:5A:96:4E:BE:E7:77:FC:92:94:2B X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:46:be:c4:d4:5d:d6:c4:4c:59:c0:49:a6:9b:c2:a5:2b:f1: 2f:1f:fc:e3:66:63:b3:76:d8:c5:72:d7:88:5d:1f:2d:34:e2: 48:c7:39:78:d7:c6:64:73:83:ca:58:cc:d1:97:79:06:f1:44: 02:18:ee:57:75:f5:35:7c:9e:1a:cc:0c:28:4b:72:27:0f:ff: 94:63:90:50:63:87:a4:e1:a5:55:44:18:4b:7d:b1:da:e4:7a: 80:a3:a2:76:db:31:9e:26:ad:63:1d:f3:d2:a8:c7:21:98:17: 6b:90:be:18:ea:b5:d2:66:45:ad:0a:eb:ba:b0:8a:42:66:00: 53:5d:e4:a1:e4:68:4f:5f:29:eb:ab:b8:37:ff:25:cf:c3:5b: 17:04:41:0a:23:99:b3:0b:77:b1:de:64:a8:35:a4:05:e0:fa: 5e:6d:7f:9b:33:3f:29:47:4b:d4:fe:33:d2:1d:dc:ba:1d:17: b8:ed:7d:32:5f:7e:be:d4:5d:69:92:87:8f:9f:79:cb:34:75: 6e:6e:7d:1c:b9:57:3d:4a:ab:31:5a:8a:21:f4:cd:38:99:d4: 6e:25:a2:f1:4f:68:e2:01:db:3a:32:95:66:51:b0:07:a8:88: 8b:40:03:f7:b6:55:16:38:96:d2:40:a9:5b:7d:19:59:af:76: e2:5e:d9:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUxMjE5MDI1ODMwWhcNMjUxMjI2MDI1ODMwWjAYMRYwFAYD VQQDDA02OTQ0YmY1Ny0zMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqX89pshBflbRoh/0yxiG5F8xZqK+oNkbWjSupmHACTJjvwzWdEaI6IgRkmP xvi1zvPkwXUcc6agb107wvvbQOLdvBJNLwOrSWMBh9YgaYE+rvqodMs1lHta8Gvt pf7UQ+FtO5uZ0+Qe7e59Ti5q0cpsmhR2k4ZLAoq7jHbGOrQvM3BNWyDUJAAFeHJY 8j//CBrbRuGWGC28bFU1pwiIDqtWm/e2Kq1izIeA7Ke+xmjoczSsLp1rXeu9hMhd WJbecpDjTLH9fn10BzFPEIwAZbatGURSRnWXSMaiw9rc12QzwmCBWoOgQ8iCOEnN TI9+qch3f/qG06f5oBlgD8v+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCVcc3I INp+v0Nalk6+53f8kpQrMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlRr7E1F3WxExZwEmmm8KlK/EvH/zjZmOzdtjFcteIXR8tNOJIxzl4 18Zkc4PKWMzRl3kG8UQCGO5XdfU1fJ4azAwoS3InD/+UY5BQY4ek4aVVRBhLfbHa 5HqAo6J22zGeJq1jHfPSqMchmBdrkL4Y6rXSZkWtCuu6sIpCZgBTXeSh5GhPXynr q7g3/yXPw1sXBEEKI5mzC3ex3mSoNaQF4PpebX+bMz8pR0vU/jPSHdy6HRe47X0y X36+1F1pkoePn3nLNHVubn0cuVc9SqsxWooh9M04mdRuJaLxT2jiAds6MpVmUbAH qIiLQAP3tlUWOJbSQKlbfRlZr3biXtn4 -----END CERTIFICATE-----Generated at Sat Dec 20 01:36:58 2025 by rpki-client