This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft File: nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json) Hash identifier: Oz6tTajL1EM+cLd6T2jkNh+JGJWX4epqCvOmjFtOQd8= Subject key identifier: 99:BF:1C:2D:78:48:52:7E:C5:C2:48:63:24:76:6F:92:EE:53:87:27 Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF Certificate issuer: /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft Manifest number: 07AD Signing time: Thu 18 Dec 2025 20:53:15 +0000 Manifest this update: Thu 18 Dec 2025 20:53:14 +0000 Manifest next update: Thu 25 Dec 2025 20:53:14 +0000 Files and hashes: 1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: SYtAz/7VGvIOG1hGKDUhEgLszsXAXpvaFtAXsyUeHok=) 2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: b75OO6moLJ/LsRE3ZkAYlUImD8cqw/G/vg1FI9kPZGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Validity Not Before: Dec 18 20:53:14 2025 GMT Not After : Dec 25 20:53:14 2025 GMT Subject: CN=694469bb-5ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:4c:2e:b2:8d:a4:2f:db:9a:22:64:ea:f2: 1a:75:f0:aa:2a:20:be:11:8f:23:a9:8e:72:7d:d5: 36:b7:44:8c:95:cd:4f:09:65:c1:e9:25:65:03:90: 3a:75:2b:54:6a:a2:3c:76:b3:46:dd:92:c2:e9:09: 42:43:03:ec:45:fb:58:02:1f:e7:ff:4f:20:3e:c1: 4c:50:d8:a4:bf:8c:de:06:ba:db:43:e1:66:42:0a: b7:46:3c:7a:36:72:28:31:7f:59:b6:9c:6f:48:f2: 73:9a:03:24:2c:84:fc:32:4b:cc:53:19:cb:35:5e: b2:7c:39:99:69:09:a4:d0:b9:9b:16:24:46:b9:7f: 2a:ff:6b:09:31:03:81:8d:90:0c:43:1d:53:47:3b: 03:6d:6f:6b:30:77:74:9e:a7:a4:f3:8a:cf:1f:56: e2:a6:e1:bd:13:a7:38:cd:2d:d4:c7:42:27:e0:1d: aa:4b:39:11:52:aa:81:6a:d9:f9:d0:08:60:ef:f0: ae:ae:fb:ff:44:3c:07:e4:9e:08:38:5a:03:56:d8: 98:6e:08:91:3f:41:b7:f6:d1:c3:3d:31:be:8c:b3: 8a:25:67:ca:11:dc:a8:c6:a9:a0:4b:73:33:9a:6d: 4f:95:df:f0:ee:1c:bd:89:01:87:b2:13:d9:9c:12: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BF:1C:2D:78:48:52:7E:C5:C2:48:63:24:76:6F:92:EE:53:87:27 X509v3 Authority Key Identifier: keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:3b:76:be:5b:65:44:63:8f:6b:5f:66:a9:09:7d:61:68:8a: 44:ab:c6:b4:d1:80:2b:d0:90:48:b4:0c:9d:c8:f3:66:6c:c0: 35:b7:01:30:00:c0:06:50:63:95:35:8b:1b:63:ac:74:87:07: ed:86:5e:df:44:01:58:64:5d:64:25:4b:75:f5:68:15:6c:52: e6:5f:0a:5d:c5:0c:e2:cd:83:ee:7a:c5:57:7f:a8:61:94:7b: c1:9b:44:34:62:cf:ab:2c:23:be:1e:95:59:88:9d:32:ba:00: 9c:b5:35:5a:15:ef:45:ac:0a:89:f1:ea:41:d3:ce:43:2f:b0: 57:8e:bf:63:63:a6:93:92:e5:63:87:79:0d:35:d6:e7:87:2a: 84:78:48:8e:fd:d6:fb:53:63:2e:24:62:69:9f:cd:cc:a1:bd: 69:91:39:c2:42:ba:aa:c5:59:9e:52:d6:55:2e:40:ad:a0:ae: 87:11:8c:da:03:78:b2:b5:a8:1b:db:15:d5:99:47:39:cd:0b: 06:ca:37:44:21:42:17:27:f0:ef:df:8e:be:5e:91:cb:9b:1a: 66:cc:e3:e1:cf:23:88:d9:a2:37:20:04:fe:24:89:1f:18:fd: 4f:57:7f:b8:af:36:6a:63:c7:91:74:ef:3a:97:46:5d:ad:9c: 38:d2:25:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQxN0I4RDQ4RURG NkI1NzAxQ0YwHhcNMjUxMjE4MjA1MzE0WhcNMjUxMjI1MjA1MzE0WjAYMRYwFAYD VQQDDA02OTQ0NjliYi01ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A1MLrKNpC/bmiJk6vIadfCqKiC+EY8jqY5yfdU2t0SMlc1PCWXB6SVlA5A6 dStUaqI8drNG3ZLC6QlCQwPsRftYAh/n/08gPsFMUNikv4zeBrrbQ+FmQgq3Rjx6 NnIoMX9ZtpxvSPJzmgMkLIT8MkvMUxnLNV6yfDmZaQmk0LmbFiRGuX8q/2sJMQOB jZAMQx1TRzsDbW9rMHd0nqek84rPH1bipuG9E6c4zS3Ux0In4B2qSzkRUqqBatn5 0Ahg7/Curvv/RDwH5J4IOFoDVtiYbgiRP0G39tHDPTG+jLOKJWfKEdyoxqmgS3Mz mm1Pld/w7hy9iQGHshPZnBKsTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJm/HC14 SFJ+xcJIYyR2b5LuU4cnMB8GA1UdIwQYMBaAFJxYdjorQ3yyksRkF7jUjt9rVwHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDY4My81M0Q3NTRGRTJB NDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZMS1N4R1FYdU5TTzMydFhB YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25GaDJPaXREZkxLU3hHUVh1TlNPMzJ0WEFjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDY4My81M0Q3NTRGRTJBNDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZM S1N4R1FYdU5TTzMydFhBYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIO3a+W2VEY49rX2apCX1haIpEq8a00YAr0JBItAydyPNmbMA1twEw AMAGUGOVNYsbY6x0hwfthl7fRAFYZF1kJUt19WgVbFLmXwpdxQzizYPuesVXf6hh lHvBm0Q0Ys+rLCO+HpVZiJ0yugCctTVaFe9FrAqJ8epB085DL7BXjr9jY6aTkuVj h3kNNdbnhyqEeEiO/db7U2MuJGJpn83Mob1pkTnCQrqqxVmeUtZVLkCtoK6HEYza A3iytagb2xXVmUc5zQsGyjdEIUIXJ/Dv346+XpHLmxpmzOPhzyOI2aI3IAT+JIkf GP1PV3+4rzZqY8eRdO86l0ZdrZw40iXi -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:43 2025 by rpki-client