This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: ML6LV4jANrs00P63SUm9fwGoZyjIVff3j2wzOCm/YYg= Subject key identifier: C2:C6:A1:9B:21:61:2D:6F:18:41:E1:BC:E5:A6:EC:F9:69:1D:E8:54 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: C5 Signing time: Sun 21 Dec 2025 05:01:44 +0000 Manifest this update: Sun 21 Dec 2025 05:01:43 +0000 Manifest next update: Sun 28 Dec 2025 05:01:43 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: 85qH9hPSlZ7n5tbYZPHGD4g0y8Cz30yLGAAZEHKIP2M=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Dec 21 05:01:43 2025 GMT Not After : Dec 28 05:01:43 2025 GMT Subject: CN=69477f38-2651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:e1:a6:4a:d0:dd:10:a1:f6:c0:4d:f9:9b: c7:a4:c1:f6:c8:13:ba:2c:68:3c:bd:4a:e3:1e:9f: f8:7f:37:08:18:2c:90:d2:8f:67:b5:80:78:6c:fd: 26:d6:1f:c6:9a:7e:0b:2b:f3:ad:e0:65:ab:72:9b: 89:48:2c:64:9b:98:1c:ef:ef:c8:94:44:5f:86:0a: be:71:6a:ec:f6:25:93:38:11:ac:c2:95:48:01:e8: 97:03:3b:b6:5e:9f:b1:43:c7:58:42:e3:c9:aa:d5: 11:8d:3e:09:d8:28:6c:07:6c:13:82:d2:58:bf:e1: 6a:54:4e:62:e5:a7:cb:a4:f4:fe:28:3f:1c:3a:10: 42:8a:53:a8:2d:9a:af:df:54:d3:c8:93:ac:a2:3c: 64:cd:70:94:da:44:55:5c:93:44:3e:e7:42:05:95: be:d6:94:61:77:a0:1f:ef:d3:5b:1a:06:a5:1a:19: 2f:18:18:3c:52:1d:3e:62:9c:a4:6c:a1:e4:0e:87: d4:b5:1f:e8:5d:1d:9a:5d:4e:f0:34:a9:81:d9:52: 5b:2e:d9:c2:2b:ca:45:1b:69:44:ca:d9:ed:d1:9d: 42:cd:25:7c:b3:0d:fe:e5:6f:f3:7e:51:34:d0:cd: be:cb:fb:fb:c9:75:5d:75:2a:31:54:9c:29:12:be: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:A1:9B:21:61:2D:6F:18:41:E1:BC:E5:A6:EC:F9:69:1D:E8:54 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:37:3f:74:70:64:f7:a8:7c:98:65:8e:c1:38:c1:9a:63:57: b0:e0:83:0d:0f:02:fa:3a:9b:71:d2:83:81:8b:03:b8:9d:38: 06:fe:8d:e0:4d:c0:50:9b:9c:a7:08:07:b2:83:4e:96:0c:36: 8c:2c:5d:62:de:9f:f7:ef:d3:a7:e0:ae:94:65:8f:cf:33:4f: 1e:4c:41:f3:66:bc:70:01:58:af:62:24:95:eb:00:a7:28:0b: 6d:24:0e:77:4d:10:17:2c:7d:19:1e:f8:0c:da:c8:d8:ff:7a: e8:66:92:89:61:ba:fe:4a:d7:ae:6d:86:8a:da:4a:4a:11:70: af:76:08:f2:f8:ca:66:63:cb:a0:67:03:70:c5:26:9a:ae:f5: a0:5f:38:01:ba:0d:31:f6:1a:1c:0c:9b:01:80:7a:38:1e:98: 76:38:1a:18:74:fa:1d:6f:9c:ae:6e:62:3d:dc:e5:40:91:0d: 8f:54:37:04:c2:bf:c9:3f:78:54:e5:3b:9c:89:6b:5f:5a:c5: 23:1d:d3:99:e2:86:75:b0:00:74:9d:e6:ae:b5:bf:08:d8:e6: 33:0b:57:ca:0e:fb:db:49:09:c0:dc:8b:25:af:30:89:9e:5b: 88:3f:55:3e:95:5c:66:19:c3:28:91:cd:69:c9:60:5a:af:51: e3:50:9c:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjUxMjIxMDUwMTQzWhcNMjUxMjI4MDUwMTQzWjAYMRYwFAYD VQQDDA02OTQ3N2YzOC0yNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtObhpkrQ3RCh9sBN+ZvHpMH2yBO6LGg8vUrjHp/4fzcIGCyQ0o9ntYB4bP0m 1h/Gmn4LK/Ot4GWrcpuJSCxkm5gc7+/IlERfhgq+cWrs9iWTOBGswpVIAeiXAzu2 Xp+xQ8dYQuPJqtURjT4J2ChsB2wTgtJYv+FqVE5i5afLpPT+KD8cOhBCilOoLZqv 31TTyJOsojxkzXCU2kRVXJNEPudCBZW+1pRhd6Af79NbGgalGhkvGBg8Uh0+Ypyk bKHkDofUtR/oXR2aXU7wNKmB2VJbLtnCK8pFG2lEytnt0Z1CzSV8sw3+5W/zflE0 0M2+y/v7yXVddSoxVJwpEr62lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLGoZsh YS1vGEHhvOWm7PlpHehUMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrNz90cGT3qHyYZY7BOMGaY1ew4IMNDwL6Optx0oOBiwO4nTgG/o3g TcBQm5ynCAeyg06WDDaMLF1i3p/379On4K6UZY/PM08eTEHzZrxwAVivYiSV6wCn KAttJA53TRAXLH0ZHvgM2sjY/3roZpKJYbr+SteubYaK2kpKEXCvdgjy+MpmY8ug ZwNwxSaarvWgXzgBug0x9hocDJsBgHo4Hph2OBoYdPodb5yubmI93OVAkQ2PVDcE wr/JP3hU5TuciWtfWsUjHdOZ4oZ1sAB0neautb8I2OYzC1fKDvvbSQnA3IslrzCJ nluIP1U+lVxmGcMokc1pyWBar1HjUJzo -----END CERTIFICATE-----Generated at Mon Dec 22 08:36:01 2025 by rpki-client