This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: gpA+DLxvJDmQ4YalwxiD5aOUvUGZObZou759w1ofJ8k= Subject key identifier: 04:63:40:32:BF:6A:22:71:66:8B:2E:71:8F:2B:38:BF:DD:F6:79:3E Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0CA3 Signing time: Thu 18 Dec 2025 18:06:49 +0000 Manifest this update: Thu 18 Dec 2025 18:06:48 +0000 Manifest next update: Thu 25 Dec 2025 18:06:48 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: gAL/YSv05/7v9Y2EIrk6vbCXdSPrVEATPLcoutk6+AY=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: I2P5GKiYO+A0JWj3FCOtq5Wyspf+9wzs4i0nVaTxKFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Dec 18 18:06:48 2025 GMT Not After : Dec 25 18:06:48 2025 GMT Subject: CN=694442b9-795b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:37:0d:78:aa:a0:f1:72:19:60:15:d9:ad: 07:af:5b:16:4b:ed:18:33:fe:8a:2f:c8:4a:58:84: 1e:65:b4:14:cc:9b:10:f4:86:7c:25:91:ca:0f:13: 36:78:27:b4:15:3a:a3:6c:dd:ff:44:eb:da:bc:0a: 5e:ec:b7:97:0c:f7:67:35:04:15:ad:d3:db:5d:23: 32:c0:7d:a2:91:18:de:6f:68:9b:f1:a0:dc:92:94: e0:6d:a0:d3:ab:ab:1d:5e:e7:20:71:77:3c:fc:28: 84:4e:9b:41:84:32:b0:34:b2:5b:3b:91:4c:c2:51: a7:15:46:49:4e:ed:d9:d8:d7:c2:7b:ab:94:f0:64: 4c:aa:09:a0:f3:71:10:11:07:03:ea:ee:02:8a:a1: cb:83:b9:cd:e5:c5:99:98:9b:22:2b:ff:6d:2e:74: 11:64:6c:c2:cf:01:59:ae:a1:07:cd:91:63:8d:92: 03:03:51:92:a2:24:b0:76:b9:f8:96:6a:ce:2d:81: 7e:c1:4e:56:c6:17:cd:82:89:13:b4:fa:d0:3f:bf: 3b:64:20:b9:e7:ef:11:78:cf:44:e3:e8:e0:58:d0: 9a:1e:f1:29:84:23:15:62:f8:a4:3f:e1:da:31:c0: 95:e8:70:cc:bc:94:c7:16:bc:03:40:79:d1:2d:1b: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:63:40:32:BF:6A:22:71:66:8B:2E:71:8F:2B:38:BF:DD:F6:79:3E X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c4:7b:e7:ae:58:0a:f3:d7:6a:ec:b8:8b:61:41:a9:91:32: bf:88:48:28:64:40:92:7a:7a:d2:16:10:9e:05:cf:12:15:70: 6c:cf:1f:c3:fd:94:c6:b9:c0:85:64:8f:2a:58:43:a9:12:7f: aa:88:42:d8:6f:6e:7f:2d:ae:a3:db:f6:b8:85:29:59:ea:a1: 7c:90:b6:d5:1a:72:04:7d:da:2f:71:10:8f:f1:1d:a8:a3:f9: 70:ce:49:da:d0:10:21:b6:98:ac:9f:fd:2e:7f:77:69:ee:f0: b9:25:e1:64:f2:89:88:00:14:d0:b7:12:06:db:cf:7f:d1:fd: 82:7a:c8:fa:de:76:47:f8:8f:21:66:75:52:5b:95:61:80:eb: db:54:c4:d7:a7:6b:e4:a6:c8:d2:0b:79:e4:c1:04:b5:35:ea: 58:cc:60:58:99:a3:57:a8:79:38:03:d4:47:db:5a:da:86:98: 00:9f:da:38:55:65:f2:72:3f:5a:5a:92:bb:84:52:ab:81:cf: 8a:ae:9a:95:04:93:be:2b:14:57:95:d5:d8:96:2a:db:0a:6e: f6:c1:d7:43:40:c3:45:31:09:ad:d3:01:62:8d:4f:93:3f:cf: bc:3d:63:fa:ab:1b:7f:80:2a:a0:60:44:2c:00:78:0e:4a:ea: 59:de:04:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjUxMjE4MTgwNjQ4WhcNMjUxMjI1MTgwNjQ4WjAYMRYwFAYD VQQDDA02OTQ0NDJiOS03OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tI3DXiqoPFyGWAV2a0Hr1sWS+0YM/6KL8hKWIQeZbQUzJsQ9IZ8JZHKDxM2 eCe0FTqjbN3/ROvavApe7LeXDPdnNQQVrdPbXSMywH2ikRjeb2ib8aDckpTgbaDT q6sdXucgcXc8/CiETptBhDKwNLJbO5FMwlGnFUZJTu3Z2NfCe6uU8GRMqgmg83EQ EQcD6u4CiqHLg7nN5cWZmJsiK/9tLnQRZGzCzwFZrqEHzZFjjZIDA1GSoiSwdrn4 lmrOLYF+wU5WxhfNgokTtPrQP787ZCC55+8ReM9E4+jgWNCaHvEphCMVYvikP+Ha McCV6HDMvJTHFrwDQHnRLRvWJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARjQDK/ aiJxZosucY8rOL/d9nk+MB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzxHvnrlgK89dq7LiLYUGpkTK/iEgoZECSenrSFhCeBc8SFXBszx/D /ZTGucCFZI8qWEOpEn+qiELYb25/La6j2/a4hSlZ6qF8kLbVGnIEfdovcRCP8R2o o/lwzkna0BAhtpisn/0uf3dp7vC5JeFk8omIABTQtxIG289/0f2Cesj63nZH+I8h ZnVSW5VhgOvbVMTXp2vkpsjSC3nkwQS1NepYzGBYmaNXqHk4A9RH21rahpgAn9o4 VWXycj9aWpK7hFKrgc+KrpqVBJO+KxRXldXYlirbCm72wddDQMNFMQmt0wFijU+T P8+8PWP6qxt/gCqgYEQsAHgOSupZ3gRh -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:09 2025 by rpki-client