This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: +11INJq68EcF+Tmmoi8qz279IGBLhozndoIrgjaLmrA= Subject key identifier: 7F:E0:0E:BA:17:F6:F1:05:A6:73:D2:1E:85:AD:AB:F1:D2:27:96:A7 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 05F2 Signing time: Thu 18 Dec 2025 22:17:18 +0000 Manifest this update: Thu 18 Dec 2025 22:17:18 +0000 Manifest next update: Thu 25 Dec 2025 22:17:18 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: RU1LWocZ0DiPmYNKL2/o0408aAnHDpXm9g7uSyAHhOc=) 2: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: OIkPyY1gexI0QB7Mc75F4AkfEDtSi4kbvtIlfRRk1O0=) 3: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 91y/zfPKe4toYeLlym6g8YBWRWa9in1N6/DuRedfMc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Dec 18 22:17:18 2025 GMT Not After : Dec 25 22:17:18 2025 GMT Subject: CN=69447d6e-bcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:07:4f:13:8e:90:9f:f3:3b:91:ee:d6:63: 06:60:01:89:7f:3e:5b:44:5f:76:ee:3c:37:25:b4: da:e8:a9:e1:29:1e:96:2a:23:b9:bd:a4:b3:ca:bf: 41:56:f1:2a:ab:04:ca:5e:37:02:0d:e7:c7:36:f7: 57:6b:fc:12:f1:ed:a6:ce:44:0a:23:20:e6:5e:3a: 16:47:61:2f:3a:38:1f:08:60:d6:cf:3c:38:ca:51: df:14:4f:91:7d:29:9d:3d:3e:67:e2:54:e4:11:bf: 0f:ae:bc:bd:00:f9:4f:22:29:b0:3e:1b:6c:67:ef: 78:34:ba:49:b0:fa:dc:0d:0c:c5:af:3e:50:31:9f: d2:b9:5a:a4:3b:dd:4a:c6:56:b9:07:03:ec:a7:77: 78:60:02:db:04:a5:21:18:6d:eb:d8:17:12:97:8d: 99:6e:b4:97:3a:94:94:54:e6:2e:ce:8f:60:ef:be: 4c:76:59:af:74:9e:8a:d5:dd:f9:50:34:ef:ef:a3: 18:1d:4e:78:8b:af:33:d1:b1:76:a8:d9:16:0d:ad: 0b:9d:87:89:7f:ef:84:ee:f3:5e:2b:e2:92:3d:d3: 2d:62:84:7d:47:3e:e9:98:c5:03:1a:c6:d3:66:b1: e2:0d:ba:7e:71:86:51:72:26:bc:4c:f9:ef:a8:38: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:0E:BA:17:F6:F1:05:A6:73:D2:1E:85:AD:AB:F1:D2:27:96:A7 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a1:36:b6:3c:e8:27:f4:98:86:3a:b3:88:84:36:28:9b:a1: 3a:68:78:eb:9e:fb:5c:27:26:22:67:ad:13:07:8b:8d:38:73: 0f:8c:fa:09:18:a2:76:1c:95:e0:d9:25:37:62:9c:b2:ab:1b: 5f:de:ea:3e:e6:ea:a6:db:a4:d2:be:4d:a8:5d:c1:fd:d3:e4: 54:aa:49:db:3a:4a:d6:a1:f9:09:5a:c7:64:e7:f4:ea:04:e9: 39:47:ea:29:ea:e6:1c:a8:15:93:da:45:fa:88:5d:1a:9c:ca: ca:7c:7e:39:e9:90:53:3e:fc:41:fa:86:0c:71:4b:bf:24:c7: 34:25:c5:87:cd:0f:63:2a:b9:87:6a:c6:fe:30:1b:0e:d8:4a: 97:4a:82:43:4a:7d:28:0d:ea:a7:fd:03:1e:23:1c:5a:8b:3f: 5a:3a:0e:7a:28:ab:21:fe:b0:45:a1:07:92:01:87:34:96:84: 7c:be:c3:4a:b0:74:c3:7c:57:e2:09:97:c4:74:4f:67:df:79: 28:e7:0c:8f:b4:05:cb:f3:03:f5:5c:ef:90:b5:72:d0:d7:06: be:61:c8:fe:7a:80:d5:9c:d8:97:b6:32:14:37:22:eb:c2:13: 7b:98:46:46:24:12:64:1b:3e:91:a5:25:26:6d:dd:14:9e:b5: d7:d1:1f:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUxMjE4MjIxNzE4WhcNMjUxMjI1MjIxNzE4WjAYMRYwFAYD VQQDDA02OTQ0N2Q2ZS1iY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv88HTxOOkJ/zO5Hu1mMGYAGJfz5bRF927jw3JbTa6KnhKR6WKiO5vaSzyr9B VvEqqwTKXjcCDefHNvdXa/wS8e2mzkQKIyDmXjoWR2EvOjgfCGDWzzw4ylHfFE+R fSmdPT5n4lTkEb8Prry9APlPIimwPhtsZ+94NLpJsPrcDQzFrz5QMZ/SuVqkO91K xla5BwPsp3d4YALbBKUhGG3r2BcSl42ZbrSXOpSUVOYuzo9g775MdlmvdJ6K1d35 UDTv76MYHU54i68z0bF2qNkWDa0LnYeJf++E7vNeK+KSPdMtYoR9Rz7pmMUDGsbT ZrHiDbp+cYZRcia8TPnvqDj8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/gDroX 9vEFpnPSHoWtq/HSJ5anMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKoTa2POgn9JiGOrOIhDYom6E6aHjrnvtcJyYiZ60TB4uNOHMPjPoJ GKJ2HJXg2SU3Ypyyqxtf3uo+5uqm26TSvk2oXcH90+RUqknbOkrWofkJWsdk5/Tq BOk5R+op6uYcqBWT2kX6iF0anMrKfH456ZBTPvxB+oYMcUu/JMc0JcWHzQ9jKrmH asb+MBsO2EqXSoJDSn0oDeqn/QMeIxxaiz9aOg56KKsh/rBFoQeSAYc0loR8vsNK sHTDfFfiCZfEdE9n33ko5wyPtAXL8wP1XO+QtXLQ1wa+Ycj+eoDVnNiXtjIUNyLr whN7mEZGJBJkGz6RpSUmbd0UnrXX0R8d -----END CERTIFICATE-----Generated at Fri Dec 19 19:14:15 2025 by rpki-client