This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: DYdjvvaoc0hdhgIdKvouS3BuMl04dr2c4xOtLE1047c= Subject key identifier: DD:D3:A3:E3:3D:2F:E1:1D:27:9A:BA:A7:B4:A9:BC:1B:6B:12:67:79 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 0394 Signing time: Fri 19 Dec 2025 00:00:35 +0000 Manifest this update: Fri 19 Dec 2025 00:00:35 +0000 Manifest next update: Fri 26 Dec 2025 00:00:35 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: 8Vpu7KoPj+4AoA6lo7c7ogDBb+L1FgUugMW0jzNciBA=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Dec 19 00:00:35 2025 GMT Not After : Dec 26 00:00:35 2025 GMT Subject: CN=694495a3-ae88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:b0:75:93:88:00:2a:3c:98:d8:54:8b:62: ef:e8:ba:5d:3c:70:42:57:2a:06:91:67:e3:cd:37: 55:ac:1b:80:25:df:52:df:8f:1f:c4:ce:06:a2:2e: e3:2e:8d:f6:41:c2:f6:dd:d3:e3:a7:cc:02:ee:ec: 61:a7:33:b7:f9:eb:b1:9c:61:32:70:15:bf:f0:a0: 29:4c:e1:08:f8:5f:8c:f3:92:6c:e4:54:dc:a4:d3: b9:6d:6c:c1:f4:15:97:db:15:a3:43:0e:48:db:be: a5:c3:86:3a:98:f8:27:37:69:52:20:86:b1:fd:51: e1:32:79:bc:74:c8:04:cf:c5:b6:43:48:d8:ed:4e: 55:74:29:e7:d5:19:1f:64:ee:7c:49:b4:19:b0:fd: 28:37:11:92:54:95:67:21:11:b4:21:50:e9:c4:b0: fe:fa:4f:9f:49:fb:dc:14:91:00:30:d6:d3:80:d6: 46:a0:e5:ed:ad:e7:56:10:04:4d:a6:be:b5:d4:20: da:5e:36:f3:8a:34:c3:68:ff:87:ef:e9:f2:f6:8d: 24:17:5b:4b:99:42:75:c9:02:43:15:00:8b:3a:5e: e1:2f:90:32:59:e2:b2:ea:63:1e:53:1c:8e:80:6e: 80:56:49:07:d9:94:f7:60:93:42:36:ac:9e:4f:73: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D3:A3:E3:3D:2F:E1:1D:27:9A:BA:A7:B4:A9:BC:1B:6B:12:67:79 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:26:79:f9:cc:c5:13:7c:5e:2e:2b:3e:78:e9:87:72:f5:6b: a6:2a:aa:ea:de:48:0b:a3:e4:f8:28:32:95:80:2c:10:f3:76: f3:05:df:c4:59:f9:08:15:77:fc:33:fd:76:bf:26:8e:c1:f2: 44:ba:07:d3:f2:43:36:69:56:c4:e8:83:b1:ad:7c:9d:5d:90: 35:9c:42:68:c1:b5:07:71:44:84:95:6b:6f:d7:ec:8e:66:e3: 06:b5:ee:24:b7:92:63:7f:7d:aa:7b:52:b5:b4:de:f8:b2:e8: 1f:fb:50:69:57:c0:a6:83:96:40:b0:08:b5:6f:00:47:3d:ea: 5f:fd:fb:6a:fa:76:57:6e:e7:f9:b8:b8:49:8d:6a:db:00:db: 6f:e9:dc:73:44:eb:f0:75:81:72:55:8a:55:8c:92:79:c5:f0: ed:32:99:7b:77:ff:82:b6:d4:cb:cc:d4:ed:cf:53:b4:f9:7c: 46:d6:0e:4e:51:b0:6a:dc:37:32:ef:14:c1:a8:f1:6c:f7:88: 1d:cc:c8:41:69:1c:e9:22:ab:4a:20:6d:87:cb:32:9c:ca:f6: 64:66:c9:3d:a5:5f:8d:76:61:2e:85:af:b2:c4:1d:53:d0:9f: b3:0b:d4:46:b9:b0:49:8b:02:48:36:d0:4a:be:da:b6:61:73: 4a:6f:15:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUxMjE5MDAwMDM1WhcNMjUxMjI2MDAwMDM1WjAYMRYwFAYD VQQDDA02OTQ0OTVhMy1hZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJWwdZOIACo8mNhUi2Lv6LpdPHBCVyoGkWfjzTdVrBuAJd9S348fxM4Goi7j Lo32QcL23dPjp8wC7uxhpzO3+euxnGEycBW/8KApTOEI+F+M85Js5FTcpNO5bWzB 9BWX2xWjQw5I276lw4Y6mPgnN2lSIIax/VHhMnm8dMgEz8W2Q0jY7U5VdCnn1Rkf ZO58SbQZsP0oNxGSVJVnIRG0IVDpxLD++k+fSfvcFJEAMNbTgNZGoOXtredWEARN pr611CDaXjbzijTDaP+H7+ny9o0kF1tLmUJ1yQJDFQCLOl7hL5AyWeKy6mMeUxyO gG6AVkkH2ZT3YJNCNqyeT3NBVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3To+M9 L+EdJ5q6p7SpvBtrEmd5MB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNJnn5zMUTfF4uKz546Ydy9WumKqrq3kgLo+T4KDKVgCwQ83bzBd/E WfkIFXf8M/12vyaOwfJEugfT8kM2aVbE6IOxrXydXZA1nEJowbUHcUSElWtv1+yO ZuMGte4kt5Jjf32qe1K1tN74sugf+1BpV8Cmg5ZAsAi1bwBHPepf/ftq+nZXbuf5 uLhJjWrbANtv6dxzROvwdYFyVYpVjJJ5xfDtMpl7d/+CttTLzNTtz1O0+XxG1g5O UbBq3Dcy7xTBqPFs94gdzMhBaRzpIqtKIG2HyzKcyvZkZsk9pV+NdmEuha+yxB1T 0J+zC9RGubBJiwJINtBKvtq2YXNKbxWw -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:52 2025 by rpki-client