This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: UyNIOkqdjy05hwG0OZdWIe2yZO1FjMF4gaS+LtDfNfY= Subject key identifier: 0F:25:A8:EC:6D:55:A0:6E:48:8E:33:17:30:6E:20:27:CE:DC:63:A1 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 1010 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0FE7 Signing time: Wed 31 Dec 2025 17:13:42 +0000 Manifest this update: Wed 31 Dec 2025 17:13:42 +0000 Manifest next update: Wed 07 Jan 2026 17:13:42 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: J064BkgNCetKR08oJ5tRji3P2luZstn5bPG/wq/U5Fc=) 2: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 5: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 6: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 17:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4112 (0x1010) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Dec 31 17:13:42 2025 GMT Not After : Jan 7 17:13:42 2026 GMT Subject: CN=695559c6-d481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:3c:e8:e2:4a:d7:ef:2b:4a:19:e8:62:8c: 0d:a8:b0:10:2c:5c:2f:8c:4e:1e:3b:06:ee:6b:f1: 91:e2:90:2f:62:a3:b7:ff:ef:3d:f8:dc:e4:36:23: 30:44:aa:75:c5:d7:60:25:c5:07:29:69:2c:d4:a8: ca:1d:e0:77:ef:61:0a:cf:e2:65:af:51:b0:73:67: 38:72:31:29:8d:fb:d6:95:be:ad:4d:66:be:3d:e5: dc:61:5f:e1:e4:fc:36:12:05:8b:ba:cf:c5:86:1d: 88:ca:0b:cc:c2:3a:01:1c:66:62:a0:43:ac:ca:39: 38:91:4a:3b:06:2a:37:8f:19:63:37:b6:55:b5:4c: f7:1a:d6:ad:db:bb:c6:97:38:2f:52:34:1e:a5:43: bd:b0:60:a9:13:69:83:5f:bc:8b:13:1c:1f:51:87: e5:ef:c3:65:da:03:2d:c4:f0:df:34:53:a0:12:d8: 89:7a:13:58:7c:80:59:88:c7:24:de:7b:37:b5:06: 3d:f3:43:f4:21:04:8d:26:85:0a:a8:48:c0:da:6d: 35:d7:0d:34:f3:df:3d:98:ae:ed:a7:33:97:b9:50: bd:46:17:16:4d:a4:d3:5f:0f:98:58:60:fe:88:f7: 64:0a:0a:5f:93:0e:1c:a4:dc:4b:99:94:d5:8f:2e: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:25:A8:EC:6D:55:A0:6E:48:8E:33:17:30:6E:20:27:CE:DC:63:A1 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0c:f6:d7:e3:e6:78:03:9c:2e:c7:4a:99:dc:fe:4d:b6:15: 4e:4d:8a:d5:9d:34:dd:1d:9e:d9:95:80:2c:a6:96:d1:dd:73: 88:24:7d:2c:3c:7b:c7:98:f6:c5:52:bc:b5:87:eb:ee:8f:10: 30:60:89:51:3e:31:fe:3c:d0:35:19:07:5a:87:8e:5c:0c:c2: 4d:5f:a7:f8:2c:13:df:f3:c8:d8:75:3a:38:9a:b5:aa:47:5a: a2:0d:97:44:7c:0a:7d:1c:1c:1c:72:71:1c:d3:91:5c:45:b3: 45:4a:92:87:be:03:f6:74:65:ef:4e:7a:53:73:aa:f1:64:81: 16:35:27:b0:53:f1:a3:06:fd:88:2e:28:45:3b:cd:ef:ce:23: 7d:ef:7a:a0:81:6e:75:81:cf:9c:63:73:27:09:bf:1b:cd:fd: 1e:8b:a4:09:5d:96:cd:d2:30:dd:aa:d7:b6:b9:d2:91:95:5e: 63:f3:c4:74:2b:a9:40:13:31:3f:6d:72:11:05:eb:56:24:c1: f0:1e:ca:01:4a:ff:2e:9a:64:db:bc:74:fe:95:09:11:7a:7f: 9f:00:9d:dc:46:e2:91:23:a9:21:9f:c3:8e:2b:90:87:b9:0e: a7:0a:d2:dc:7a:c8:d1:ee:e9:31:6d:b7:c4:1b:85:9b:a0:37: 70:93:70:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUxMjMxMTcxMzQyWhcNMjYwMTA3MTcxMzQyWjAYMRYwFAYD VQQDDA02OTU1NTljNi1kNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjAU86OJK1+8rShnoYowNqLAQLFwvjE4eOwbua/GR4pAvYqO3/+89+NzkNiMw RKp1xddgJcUHKWks1KjKHeB372EKz+Jlr1Gwc2c4cjEpjfvWlb6tTWa+PeXcYV/h 5Pw2EgWLus/Fhh2IygvMwjoBHGZioEOsyjk4kUo7Bio3jxljN7ZVtUz3Gtat27vG lzgvUjQepUO9sGCpE2mDX7yLExwfUYfl78Nl2gMtxPDfNFOgEtiJehNYfIBZiMck 3ns3tQY980P0IQSNJoUKqEjA2m011w008989mK7tpzOXuVC9RhcWTaTTXw+YWGD+ iPdkCgpfkw4cpNxLmZTVjy5/ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8lqOxt VaBuSI4zFzBuICfO3GOhMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHDPbX4+Z4A5wux0qZ3P5NthVOTYrVnTTdHZ7ZlYAsppbR3XOIJH0s PHvHmPbFUry1h+vujxAwYIlRPjH+PNA1GQdah45cDMJNX6f4LBPf88jYdTo4mrWq R1qiDZdEfAp9HBwccnEc05FcRbNFSpKHvgP2dGXvTnpTc6rxZIEWNSewU/GjBv2I LihFO83vziN973qggW51gc+cY3MnCb8bzf0ei6QJXZbN0jDdqte2udKRlV5j88R0 K6lAEzE/bXIRBetWJMHwHsoBSv8ummTbvHT+lQkRen+fAJ3cRuKRI6khn8OOK5CH uQ6nCtLcesjR7ukxbbfEG4WboDdwk3Ba -----END CERTIFICATE-----Generated at Fri Jan 2 08:20:43 2026 by rpki-client