This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: Vr6nj3KgZCxYLqIDusA1vxHKEWrhpmfFU9nhHExdTzs= Subject key identifier: 10:5D:60:14:8D:0C:6E:1C:9E:9E:7A:5E:B6:CA:1B:8E:D2:EE:7F:D4 Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 04F9 Signing time: Sun 28 Dec 2025 22:51:24 +0000 Manifest this update: Sun 28 Dec 2025 22:51:23 +0000 Manifest next update: Sun 04 Jan 2026 22:51:23 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: 7RWWejnL5U+BdyQw5zq//fJ5UfPzrYRV/SCsoIk350g=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: nj3zL8oObjV8NLXqj4IbNKya+FtBjMvRptjlINscrUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 22:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Dec 28 22:51:23 2025 GMT Not After : Jan 4 22:51:23 2026 GMT Subject: CN=6951b46c-b33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:82:89:eb:9f:9e:f5:86:45:fc:82:86:fa: c3:23:b0:a0:8a:84:38:92:31:4e:6d:4f:c4:da:97: d9:36:43:ac:21:21:8f:3a:c8:c4:71:57:49:ea:de: 7d:87:04:8c:6f:e9:51:39:a9:fb:ed:2e:70:4a:f7: da:f5:99:3c:d7:19:e5:db:a2:d9:b1:b3:84:06:be: 80:a0:06:64:d3:2a:f4:cc:01:31:32:52:c1:3a:bd: 49:6f:b1:e8:e0:e9:fc:3c:d6:97:91:fe:f8:ae:92: 61:84:c0:6f:e2:a2:74:be:d4:69:31:a3:b9:dd:1e: 38:15:4d:5c:01:3e:2b:f5:29:8c:98:4f:56:0d:56: 90:96:aa:78:43:3e:50:39:08:c0:65:20:10:f0:58: 73:c6:03:56:af:da:c8:f4:00:51:80:dc:49:50:13: e6:22:75:34:bb:85:ee:55:87:da:e6:ae:d0:fe:ba: 70:73:1c:56:03:33:af:38:d7:23:49:3f:fe:b2:ff: 6f:70:b5:95:35:fd:5c:64:8a:a9:0f:60:6f:86:1c: f7:ce:34:5b:24:c1:12:13:7b:6d:11:87:ae:51:91: 9d:70:79:80:1c:46:f1:c3:bb:40:10:50:10:d2:75: 87:fe:57:c3:23:cd:1f:08:25:54:d8:f9:a7:e4:11: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5D:60:14:8D:0C:6E:1C:9E:9E:7A:5E:B6:CA:1B:8E:D2:EE:7F:D4 X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:26:9b:a5:d4:93:97:fb:5f:73:d7:4c:c9:eb:e3:86:dc:fc: 9a:2a:4c:40:16:d4:e6:d3:95:7a:3d:c6:03:43:e1:4c:3f:60: c9:09:96:71:31:1a:73:71:05:cf:a3:99:41:65:55:2e:41:33: 21:de:f9:1f:3e:32:ed:a5:5c:79:41:3c:77:60:44:a3:23:ae: f4:55:cf:7b:8f:8b:a7:d8:70:ba:cc:ef:e4:8b:13:1a:93:f1: 24:87:54:a7:85:e1:3c:16:13:12:57:7a:e1:72:6f:32:3f:5c: 80:6d:ae:db:c8:ab:ca:f8:23:19:e7:5c:ab:e3:87:97:8b:28: b2:07:a4:2e:85:a1:db:ee:0d:c4:02:b3:d3:e1:58:40:24:14: 78:ca:f4:59:0c:82:d2:51:ae:40:dd:ab:2b:70:ef:21:de:bf: 89:ab:e2:d2:de:23:1a:67:cc:85:c1:c9:a0:95:44:1c:d1:db: ed:aa:eb:1b:60:b5:77:38:87:93:e0:82:4f:b7:a5:c4:0d:82: 88:60:cd:f6:9e:e1:f3:6a:b3:cd:07:58:36:66:69:72:f6:05: b7:55:73:4b:97:33:84:3e:45:c5:70:6f:99:b3:d6:31:ad:b0: a6:de:f0:c2:fc:11:ce:ac:9c:7d:df:7b:17:55:c8:cb:28:e6: 47:ed:ac:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUxMjI4MjI1MTIzWhcNMjYwMTA0MjI1MTIzWjAYMRYwFAYD VQQDDA02OTUxYjQ2Yy1iMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzaCieufnvWGRfyChvrDI7CgioQ4kjFObU/E2pfZNkOsISGPOsjEcVdJ6t59 hwSMb+lROan77S5wSvfa9Zk81xnl26LZsbOEBr6AoAZk0yr0zAExMlLBOr1Jb7Ho 4On8PNaXkf74rpJhhMBv4qJ0vtRpMaO53R44FU1cAT4r9SmMmE9WDVaQlqp4Qz5Q OQjAZSAQ8FhzxgNWr9rI9ABRgNxJUBPmInU0u4XuVYfa5q7Q/rpwcxxWAzOvONcj ST/+sv9vcLWVNf1cZIqpD2Bvhhz3zjRbJMESE3ttEYeuUZGdcHmAHEbxw7tAEFAQ 0nWH/lfDI80fCCVU2Pmn5BGM/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBdYBSN DG4cnp56XrbKG47S7n/UMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeJpul1JOX+19z10zJ6+OG3PyaKkxAFtTm05V6PcYDQ+FMP2DJCZZx MRpzcQXPo5lBZVUuQTMh3vkfPjLtpVx5QTx3YESjI670Vc97j4un2HC6zO/kixMa k/Ekh1SnheE8FhMSV3rhcm8yP1yAba7byKvK+CMZ51yr44eXiyiyB6QuhaHb7g3E ArPT4VhAJBR4yvRZDILSUa5A3asrcO8h3r+Jq+LS3iMaZ8yFwcmglUQc0dvtqusb YLV3OIeT4IJPt6XEDYKIYM32nuHzarPNB1g2Zmly9gW3VXNLlzOEPkXFcG+Zs9Yx rbCm3vDC/BHOrJx933sXVcjLKOZH7azb -----END CERTIFICATE-----Generated at Tue Dec 30 07:05:25 2025 by rpki-client