This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: P1ON0MBcrBvvdTLa0R10gtSVOR+X3Q44WMSZmlqxI4w= Subject key identifier: 97:4D:9B:57:77:CF:8F:6E:17:1E:7A:88:58:61:E7:B7:4A:DB:DA:9D Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 1813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 17FD Signing time: Tue 30 Dec 2025 16:21:34 +0000 Manifest this update: Tue 30 Dec 2025 16:21:34 +0000 Manifest next update: Tue 06 Jan 2026 16:21:34 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: 7RsstLlHInHW8EtXky8ibd9XeSWg/HcNqW8xxpzVU4E=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: YPOOK5AIk3gBw37/F4hGfOPvVpq+0nympVjwZNkZ59I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 16:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6163 (0x1813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Dec 30 16:21:34 2025 GMT Not After : Jan 6 16:21:34 2026 GMT Subject: CN=6953fc0e-1b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:2b:8c:55:d3:52:9c:62:4f:8a:0a:de:be: bf:45:ba:ea:45:e8:2b:9b:75:f2:b4:f3:08:52:e9: 85:a7:a6:80:c7:7d:e4:b8:d1:b0:4e:37:d4:c0:70: 74:bb:ec:06:02:af:64:60:98:60:3d:3f:9d:6d:a2: 6b:20:4e:9c:50:b1:73:c5:9e:f0:02:e6:8f:1f:9d: a7:3f:a6:40:57:6c:69:e4:a1:ff:45:d7:62:35:25: 2d:76:d3:77:ad:e0:17:45:f3:9c:56:fc:8a:b6:75: 98:63:1f:75:7b:00:39:2e:d8:c8:a7:46:e8:82:48: f1:12:2a:b0:71:c9:f6:25:bf:5b:b2:a7:62:18:21: fb:4b:cb:53:3f:bb:46:5b:b0:5a:00:68:21:8a:76: 87:d7:a8:42:0a:82:7e:ed:2a:55:ab:86:f9:90:d7: 93:4f:fa:02:17:93:e8:91:d0:ff:c3:b5:8d:0c:eb: 9a:83:b2:e6:d7:93:65:e4:bf:81:7c:84:49:af:7d: 0b:1a:39:1e:d9:71:22:3e:a3:0c:1a:d3:f3:81:fe: 00:23:c0:fc:57:a3:7c:8e:c0:7f:74:aa:bf:35:7b: 13:0b:00:6e:68:ac:9b:d2:ff:ae:ce:7d:38:f7:9e: 49:9e:4b:7f:0e:7c:c5:fa:2a:21:a5:c9:9b:94:b8: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4D:9B:57:77:CF:8F:6E:17:1E:7A:88:58:61:E7:B7:4A:DB:DA:9D X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6f:9e:ca:2d:df:0d:b8:3a:51:09:0b:bf:a1:06:d7:0f:a7: cb:f5:ed:65:78:9b:6c:51:19:be:6e:76:3e:fb:46:2f:79:57: c9:82:72:a5:80:c6:77:cd:90:45:79:00:19:1f:2f:eb:fa:b5: 9e:3f:a3:36:19:bf:c9:f0:45:d3:d4:16:7c:be:2d:1e:30:6a: 80:dd:c8:a1:bd:7d:c2:08:89:c5:ee:6e:3a:68:94:be:69:03: 79:78:61:39:a8:05:c0:dd:53:e5:52:7d:30:2a:7f:fb:55:24: ff:fe:63:e6:98:92:4c:96:c2:5a:1a:38:8e:1a:68:c4:57:bf: 74:5e:67:b4:4f:6c:97:e8:6d:df:ce:e6:25:94:65:13:52:00: 7d:12:1b:e4:76:c2:7d:bf:5d:79:f9:7c:d7:f4:9f:86:f9:5f: f5:2c:10:3f:b4:fb:61:0a:a9:d6:d7:4d:98:07:9b:db:29:d8: 63:ae:8c:d5:b8:44:a9:72:4a:be:b5:d7:b8:3d:38:e4:c1:d1: 95:45:b7:06:0f:1f:0e:62:97:85:b7:cc:b5:b6:e7:f3:76:f8: 33:41:fd:d2:2e:e6:e3:ea:84:72:47:48:d1:1e:43:45:1b:e2: bf:f2:b7:ed:3b:03:e4:05:3c:36:95:f2:28:2c:ab:9a:6d:58: d4:8d:24:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUxMjMwMTYyMTM0WhcNMjYwMTA2MTYyMTM0WjAYMRYwFAYD VQQDDA02OTUzZmMwZS0xYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaIrjFXTUpxiT4oK3r6/RbrqRegrm3XytPMIUumFp6aAx33kuNGwTjfUwHB0 u+wGAq9kYJhgPT+dbaJrIE6cULFzxZ7wAuaPH52nP6ZAV2xp5KH/RddiNSUtdtN3 reAXRfOcVvyKtnWYYx91ewA5LtjIp0bogkjxEiqwccn2Jb9bsqdiGCH7S8tTP7tG W7BaAGghinaH16hCCoJ+7SpVq4b5kNeTT/oCF5PokdD/w7WNDOuag7Lm15Nl5L+B fIRJr30LGjke2XEiPqMMGtPzgf4AI8D8V6N8jsB/dKq/NXsTCwBuaKyb0v+uzn04 955Jnkt/DnzF+iohpcmblLiY8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdNm1d3 z49uFx56iFhh57dK29qdMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtb57KLd8NuDpRCQu/oQbXD6fL9e1leJtsURm+bnY++0YveVfJgnKl gMZ3zZBFeQAZHy/r+rWeP6M2Gb/J8EXT1BZ8vi0eMGqA3cihvX3CCInF7m46aJS+ aQN5eGE5qAXA3VPlUn0wKn/7VST//mPmmJJMlsJaGjiOGmjEV790Xme0T2yX6G3f zuYllGUTUgB9EhvkdsJ9v115+XzX9J+G+V/1LBA/tPthCqnW102YB5vbKdhjrozV uESpckq+tde4PTjkwdGVRbcGDx8OYpeFt8y1tufzdvgzQf3SLubj6oRyR0jRHkNF G+K/8rftOwPkBTw2lfIoLKuabVjUjSR0 -----END CERTIFICATE-----Generated at Wed Dec 31 03:44:09 2025 by rpki-client