This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: gOq7Prpd2T9zedDNYmVGCkIGn1Cd+8wMzavYOOLSP7I= Subject key identifier: 1A:C9:8A:53:0D:8C:AC:D9:74:EB:D2:BF:36:0D:FE:26:97:D6:B8:B4 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 100A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0FE1 Signing time: Sat 20 Dec 2025 17:11:51 +0000 Manifest this update: Sat 20 Dec 2025 17:11:50 +0000 Manifest next update: Sat 27 Dec 2025 17:11:50 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: 8f/5g38jIgS6WYAE7Q95ukzmX0zukPDKr9b3U1bMkE0=) 2: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) 3: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 4: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 5: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 6: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 7: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4106 (0x100a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Dec 20 17:11:50 2025 GMT Not After : Dec 27 17:11:50 2025 GMT Subject: CN=6946d8d7-8162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:cc:c4:f2:e8:1f:57:a4:ef:d0:21:a2:e7: f8:38:30:ad:29:eb:d5:46:e4:20:a7:35:e1:a8:ca: de:a1:c4:24:b9:2a:7e:ae:9b:d2:a4:27:92:ca:87: 17:0e:27:39:ff:60:0a:c6:9e:0a:47:a7:74:3e:d0: f0:e4:e6:c8:75:f5:65:ab:61:2a:1b:ce:f5:be:9a: ba:9c:c1:22:09:6e:e9:a8:ae:b6:5a:e9:b4:0d:8b: 9a:51:1b:59:c2:e8:19:d6:d3:83:18:52:5c:1d:91: 45:06:d6:6d:2d:36:b4:04:6f:43:59:92:e3:47:c0: 1f:c4:de:f4:1d:1f:10:c0:4b:42:cf:d1:2c:0e:e0: ba:10:af:6e:92:ba:1b:aa:4d:fd:39:6e:e9:1b:42: 10:97:48:5b:c0:b4:19:fc:ea:0e:9c:5b:4f:a8:8a: be:e5:ee:0c:05:a9:f5:74:0f:d5:e0:98:5c:80:54: c7:cf:a9:26:6c:cb:8e:32:d5:da:93:9f:77:44:ab: 52:91:39:b1:c0:fb:83:1a:a5:28:bb:bc:a7:9a:14: 0a:2c:ff:3d:82:23:14:eb:b6:23:c6:6c:59:f1:4b: 03:a3:bd:64:f5:31:4b:95:c5:59:13:f3:72:b1:9a: d8:4b:72:1d:87:a2:14:c5:76:62:97:59:87:f7:2d: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C9:8A:53:0D:8C:AC:D9:74:EB:D2:BF:36:0D:FE:26:97:D6:B8:B4 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:36:8a:7a:f4:f2:e5:7f:e2:52:c7:34:5e:25:8d:45:ae:6f: d9:48:7c:0f:03:2c:05:25:a4:ac:9b:23:4d:82:17:8c:1d:fb: 13:14:29:53:ed:c4:1c:99:4b:6d:b8:41:84:64:bd:a7:e9:30: c6:2e:c2:d7:6c:38:52:8f:dd:e7:a7:2c:62:8e:96:af:9e:08: d9:76:95:ed:2f:cd:6b:52:af:3c:98:fa:fb:58:5f:1d:06:63: f3:16:1a:58:26:0f:ce:58:8f:80:56:cc:d9:e3:48:02:fb:ea: d2:f2:12:30:4d:d6:a5:58:3e:a3:9d:d3:16:a7:ca:2d:d2:d2: 38:20:bd:46:d4:80:be:1d:34:26:88:e6:ac:ea:69:03:7a:ad: b7:90:52:de:0a:c9:06:80:10:8c:8f:ee:a5:5e:1a:46:78:ff: ff:9a:e7:66:ad:d4:14:d6:52:85:67:db:04:f7:f0:96:69:57: 71:20:a1:98:7b:96:6e:0e:cb:9e:ad:f3:c3:b9:79:be:2f:a6: 1f:ad:70:dd:94:46:e3:36:8e:8f:d6:c4:d6:ce:73:16:94:10: 7b:02:1f:1f:4e:99:3a:e7:af:7c:62:cc:29:d9:ad:99:04:68: 97:be:c2:45:0e:c4:f8:0f:34:f1:9d:93:7b:b1:2a:c0:d9:bd: b7:6b:fb:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUxMjIwMTcxMTUwWhcNMjUxMjI3MTcxMTUwWjAYMRYwFAYD VQQDDA02OTQ2ZDhkNy04MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02/MxPLoH1ek79Ahouf4ODCtKevVRuQgpzXhqMreocQkuSp+rpvSpCeSyocX Dic5/2AKxp4KR6d0PtDw5ObIdfVlq2EqG871vpq6nMEiCW7pqK62Wum0DYuaURtZ wugZ1tODGFJcHZFFBtZtLTa0BG9DWZLjR8AfxN70HR8QwEtCz9EsDuC6EK9ukrob qk39OW7pG0IQl0hbwLQZ/OoOnFtPqIq+5e4MBan1dA/V4JhcgFTHz6kmbMuOMtXa k593RKtSkTmxwPuDGqUou7ynmhQKLP89giMU67YjxmxZ8UsDo71k9TFLlcVZE/Ny sZrYS3Idh6IUxXZil1mH9y23jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrJilMN jKzZdOvSvzYN/iaX1ri0MB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmNop69PLlf+JSxzReJY1Frm/ZSHwPAywFJaSsmyNNgheMHfsTFClT 7cQcmUttuEGEZL2n6TDGLsLXbDhSj93npyxijpavngjZdpXtL81rUq88mPr7WF8d BmPzFhpYJg/OWI+AVszZ40gC++rS8hIwTdalWD6jndMWp8ot0tI4IL1G1IC+HTQm iOas6mkDeq23kFLeCskGgBCMj+6lXhpGeP//mudmrdQU1lKFZ9sE9/CWaVdxIKGY e5ZuDsuerfPDuXm+L6YfrXDdlEbjNo6P1sTWznMWlBB7Ah8fTpk65698Yswp2a2Z BGiXvsJFDsT4DzTxnZN7sSrA2b23a/v9 -----END CERTIFICATE-----Generated at Mon Dec 22 11:35:19 2025 by rpki-client