This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: nfj4xXSPqeMU8hBdczSve/e1yE4CnZFCRiAP8sioTI0= Subject key identifier: D7:19:B9:F0:A9:92:6F:71:BF:08:97:71:27:E5:41:4D:6D:B7:4E:F1 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2AB8 Signing time: Thu 18 Dec 2025 15:30:37 +0000 Manifest this update: Thu 18 Dec 2025 15:30:37 +0000 Manifest next update: Thu 25 Dec 2025 15:30:37 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: mIWS8AKttxBKLYmxLKc3NP1E+5obh9JOpD4Eqv28CC0=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Ey/Kmg1iRRIttYY5811s3SHGsRnkg9ROhR5r3BngPPg=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: foVnGp/jqxcrwmjuMi9JIuJxuKPFhTJXYXUK/5x/qrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11000 (0x2af8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Dec 18 15:30:37 2025 GMT Not After : Dec 25 15:30:37 2025 GMT Subject: CN=69441e1d-bb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:cd:f9:f2:85:45:7e:a9:cf:8c:7c:45:5f: c7:79:8f:00:53:4c:d7:b4:b9:48:8f:7f:0c:92:5e: c7:89:82:f3:7a:da:e7:82:59:ef:46:99:3d:39:e4: 5a:36:6e:1a:97:eb:44:bd:92:e1:27:17:53:8e:53: 79:7e:b9:8f:91:d5:cf:f2:79:cc:e7:0b:84:6b:5c: fc:2a:56:69:4c:5c:d9:05:c4:2f:c7:b7:0e:39:fc: 33:7f:52:40:51:50:89:c8:4c:b9:06:06:70:be:3e: df:4a:92:15:15:5d:b7:84:1f:02:a8:42:2c:e5:b0: 02:94:68:35:dd:97:28:b6:25:8f:ba:d2:ed:10:0e: 01:8b:d7:8f:a0:49:b6:f8:21:f6:cd:d8:f2:68:cf: f9:4e:99:63:a8:2c:4c:74:e7:e9:f2:94:ca:8a:8f: 59:f6:7c:fc:17:af:24:9c:9d:f5:be:3f:2c:38:80: 8f:47:80:01:a8:b3:21:98:da:6a:98:9c:44:9a:40: e2:54:59:6c:db:6c:a3:77:f9:d8:c0:03:1c:ee:9f: 13:09:12:2d:d4:d1:3b:e7:03:b0:cd:14:96:34:46: 18:50:f5:95:69:14:9e:92:98:91:44:b7:46:96:c5: af:42:63:ce:5b:7f:24:df:7b:c8:26:6f:e9:fa:e1: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:19:B9:F0:A9:92:6F:71:BF:08:97:71:27:E5:41:4D:6D:B7:4E:F1 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7d:d6:79:b1:90:04:be:12:48:3c:63:80:39:29:09:5c:69: ad:2d:58:f8:59:8c:06:55:89:d1:65:8b:f4:a2:2d:d7:b5:7b: 2b:e0:d2:98:38:d1:52:c4:ec:5a:7e:35:1c:c8:c8:96:e0:a1: dc:fb:21:50:be:02:d0:f3:d4:d4:39:7a:81:b2:5f:7e:29:dc: 54:55:02:0f:d8:c9:57:9d:ad:59:a3:6e:78:f7:9f:01:0d:32: 22:79:e2:95:38:64:55:5e:a0:4d:c8:5d:f6:57:91:47:c4:c1: 5f:ce:a5:81:46:63:04:18:09:5e:1d:7f:90:59:89:e6:fb:bc: 33:f0:66:f0:85:ae:87:56:b5:3d:22:84:b3:a5:e4:9f:ca:b5: b7:26:48:2c:c3:74:2f:42:36:2d:6f:79:2e:d2:53:12:9d:dc: ed:2e:10:1a:21:b3:ff:99:71:5c:51:2f:64:da:0c:76:28:9a: 35:f3:3e:b4:59:4a:67:1b:cb:cf:d6:91:bb:90:4f:89:4f:64: a4:12:e3:fe:85:79:11:01:d4:4b:5b:eb:44:45:8e:ee:5d:36: 3e:94:65:8f:c7:aa:46:05:f4:32:f0:ee:42:45:8b:54:dc:1c: a2:2c:90:0f:fa:38:a5:c3:56:3d:30:9c:6c:2f:08:f2:8d:31: f7:b7:5c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUxMjE4MTUzMDM3WhcNMjUxMjI1MTUzMDM3WjAYMRYwFAYD VQQDDA02OTQ0MWUxZC1iYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut/N+fKFRX6pz4x8RV/HeY8AU0zXtLlIj38Mkl7HiYLzetrnglnvRpk9OeRa Nm4al+tEvZLhJxdTjlN5frmPkdXP8nnM5wuEa1z8KlZpTFzZBcQvx7cOOfwzf1JA UVCJyEy5BgZwvj7fSpIVFV23hB8CqEIs5bAClGg13ZcotiWPutLtEA4Bi9ePoEm2 +CH2zdjyaM/5TpljqCxMdOfp8pTKio9Z9nz8F68knJ31vj8sOICPR4ABqLMhmNpq mJxEmkDiVFls22yjd/nYwAMc7p8TCRIt1NE75wOwzRSWNEYYUPWVaRSekpiRRLdG lsWvQmPOW38k33vIJm/p+uERzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcZufCp km9xvwiXcSflQU1tt07xMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFfdZ5sZAEvhJIPGOAOSkJXGmtLVj4WYwGVYnRZYv0oi3XtXsr4NKY ONFSxOxafjUcyMiW4KHc+yFQvgLQ89TUOXqBsl9+KdxUVQIP2MlXna1Zo254958B DTIieeKVOGRVXqBNyF32V5FHxMFfzqWBRmMEGAleHX+QWYnm+7wz8Gbwha6HVrU9 IoSzpeSfyrW3Jkgsw3QvQjYtb3ku0lMSndztLhAaIbP/mXFcUS9k2gx2KJo18z60 WUpnG8vP1pG7kE+JT2SkEuP+hXkRAdRLW+tERY7uXTY+lGWPx6pGBfQy8O5CRYtU 3ByiLJAP+jilw1Y9MJxsLwjyjTH3t1zE -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:35 2025 by rpki-client