This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: LJlSd090Lm0BXmpmUaC5Kp7/o9FLBHMYUvF1irBrnMA= Subject key identifier: F9:0F:01:D3:5A:59:5C:5B:CA:6A:58:5E:D5:86:07:F6:46:CE:1A:44 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2BDC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2BC6 Signing time: Wed 24 Dec 2025 14:25:00 +0000 Manifest this update: Wed 24 Dec 2025 14:25:00 +0000 Manifest next update: Wed 31 Dec 2025 14:25:00 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: YT5kLD7cC6/f7/Oy+EvgDBciidMrkixLWtO6PwReIC4=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: NK9ND6m4XQQdYJfdTkVni6Vzs2GTwmWQ7OeeG3lJVUs=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: Dh1mpv4UoWbEEeCnj4hWDVua0Kb3Ya4BmP9+TVk00i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11228 (0x2bdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Dec 24 14:25:00 2025 GMT Not After : Dec 31 14:25:00 2025 GMT Subject: CN=694bf7bc-4ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:4d:1a:4a:0c:72:28:f6:df:b3:3a:f5:5b: 51:49:4c:bf:5e:0f:c7:02:74:3c:57:67:e1:83:c5: 2f:f0:39:e9:e4:da:90:1e:cf:bf:d5:aa:76:e5:82: 92:5d:4e:4d:7c:be:57:1f:05:56:aa:fb:ba:1c:23: 70:36:8a:20:d8:f1:26:d1:32:a0:36:36:f9:15:d3: e7:44:1f:ed:cb:03:0e:01:63:74:e1:72:cb:bf:a1: 28:4c:aa:42:1e:b8:ce:79:e9:38:6b:95:31:07:0a: 1f:58:57:31:6b:d2:f8:12:a3:65:2b:c7:57:e7:48: 17:51:96:f9:fc:bb:9c:8f:ea:89:ab:fe:d9:f7:df: c7:17:d8:9e:4a:af:d5:63:7c:f6:73:26:f6:46:61: 27:a3:f0:db:1f:38:78:ca:69:f2:1a:ba:7d:2e:1d: ca:a0:3d:57:8b:0c:65:72:86:80:10:de:bd:0c:94: bc:d8:ce:c3:a0:36:64:36:d3:e1:6e:60:f8:08:09: 74:80:0e:55:63:18:a9:92:7e:ab:42:dc:34:af:05: a9:35:28:0b:13:88:77:49:78:24:b3:24:47:89:a9: 56:34:0e:65:3c:4d:b1:a2:a0:1f:e1:6a:24:02:ed: 14:2b:aa:07:86:aa:55:28:43:cf:78:90:d1:40:c4: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0F:01:D3:5A:59:5C:5B:CA:6A:58:5E:D5:86:07:F6:46:CE:1A:44 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:94:57:78:4e:cd:ee:51:6d:f8:41:d2:6e:bb:6f:0f:24:75: 3f:7f:97:cb:15:6a:27:42:e7:f8:f2:01:5f:bf:07:4b:1a:60: fb:55:ef:df:a1:d2:b9:ce:61:ce:3e:40:7b:e5:75:8c:00:90: 1c:03:a2:0c:e9:17:93:04:99:e4:43:db:e0:6f:dc:6b:42:85: ea:2b:83:47:1e:aa:95:46:bd:28:db:11:d7:de:53:55:12:da: 35:c9:ea:7c:32:3b:66:38:49:6c:ab:88:ff:55:b5:c7:13:63: c4:80:95:39:65:f1:24:74:9d:98:bf:93:30:38:d4:50:39:f2: 91:5f:48:86:cf:e5:16:76:6d:df:1f:5e:b9:8f:72:25:f7:1b: 4c:96:4c:94:2e:38:30:09:74:87:f5:c0:e8:68:80:68:53:cf: 15:d9:e4:d3:c6:0c:66:6a:a1:0f:95:c0:bf:89:e3:47:29:fa: 60:0b:42:e1:8e:b2:b8:4d:5f:4a:ca:7e:83:dc:f4:c6:0b:ed: fb:6b:f4:8a:87:eb:62:58:82:d8:2d:93:1c:16:ff:4e:12:a1: 78:c4:ca:a3:c9:4f:ba:d3:d1:e6:2e:bc:f0:aa:46:9f:da:5b: 0f:f9:df:9a:e5:3b:df:07:59:b0:85:57:a1:45:34:d1:04:d4: 7a:7d:42:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUxMjI0MTQyNTAwWhcNMjUxMjMxMTQyNTAwWjAYMRYwFAYD VQQDDA02OTRiZjdiYy00ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv69NGkoMcij237M69VtRSUy/Xg/HAnQ8V2fhg8Uv8Dnp5NqQHs+/1ap25YKS XU5NfL5XHwVWqvu6HCNwNoog2PEm0TKgNjb5FdPnRB/tywMOAWN04XLLv6EoTKpC HrjOeek4a5UxBwofWFcxa9L4EqNlK8dX50gXUZb5/Lucj+qJq/7Z99/HF9ieSq/V Y3z2cyb2RmEno/DbHzh4ymnyGrp9Lh3KoD1XiwxlcoaAEN69DJS82M7DoDZkNtPh bmD4CAl0gA5VYxipkn6rQtw0rwWpNSgLE4h3SXgksyRHialWNA5lPE2xoqAf4Wok Au0UK6oHhqpVKEPPeJDRQMTasQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkPAdNa WVxbympYXtWGB/ZGzhpEMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDClFd4Ts3uUW34QdJuu28PJHU/f5fLFWonQuf48gFfvwdLGmD7Ve/f odK5zmHOPkB75XWMAJAcA6IM6ReTBJnkQ9vgb9xrQoXqK4NHHqqVRr0o2xHX3lNV Eto1yep8MjtmOElsq4j/VbXHE2PEgJU5ZfEkdJ2Yv5MwONRQOfKRX0iGz+UWdm3f H165j3Il9xtMlkyULjgwCXSH9cDoaIBoU88V2eTTxgxmaqEPlcC/ieNHKfpgC0Lh jrK4TV9Kyn6D3PTGC+37a/SKh+tiWILYLZMcFv9OEqF4xMqjyU+609HmLrzwqkaf 2lsP+d+a5TvfB1mwhVehRTTRBNR6fUI8 -----END CERTIFICATE-----Generated at Thu Dec 25 14:00:16 2025 by rpki-client