This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: 6r2oPteWYPxbGtxCMrqBL2exO87Pifs8bCRqsBHzgt4= Subject key identifier: 97:B4:24:AF:0F:ED:71:62:67:18:78:9F:AB:72:DF:C4:B0:3C:84:D2 Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 04F4 Signing time: Thu 18 Dec 2025 23:02:53 +0000 Manifest this update: Thu 18 Dec 2025 23:02:53 +0000 Manifest next update: Thu 25 Dec 2025 23:02:53 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: b8HsOWR/Ub+70Ffe5sKyNy/AcUZKTurXdsR+CGJT4bg=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: nj3zL8oObjV8NLXqj4IbNKya+FtBjMvRptjlINscrUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Dec 18 23:02:53 2025 GMT Not After : Dec 25 23:02:53 2025 GMT Subject: CN=6944881d-0637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:1a:50:ba:28:29:35:b6:a3:b0:89:ba:45: 05:e9:e8:86:53:4c:23:da:ed:f4:f2:30:80:f2:96: 4d:5a:24:02:68:8f:da:65:34:cd:11:ce:c6:a6:c1: ed:5c:1d:c9:01:01:a4:2f:68:53:88:5f:8e:da:b3: d9:f0:27:a5:51:c7:33:d6:cc:d2:2c:b4:32:cc:c1: 82:b0:a7:fd:22:7a:e4:c3:75:c3:53:f0:85:b7:c9: 4a:8a:35:10:f4:f9:96:1f:79:dc:79:a2:45:56:c6: 1b:b1:1a:ea:bc:ac:6c:e9:69:e1:17:74:d4:d7:bc: 05:28:64:89:62:24:c0:0f:98:0b:17:56:e2:1a:b1: 8d:dd:b6:9b:d5:c0:e4:94:6c:e1:64:9c:c1:c6:f7: b4:8e:78:3d:fc:d2:2f:59:c2:27:c7:b4:2f:ea:60: 02:52:68:3e:70:cd:31:9e:4e:70:5e:b5:4b:b7:ff: 9b:23:34:0b:4f:96:fd:f4:b7:2b:4e:c6:7a:56:7d: 94:d1:af:b9:38:15:f6:94:9e:63:73:aa:c6:4d:2d: 8e:4a:03:ee:5b:4c:b8:ea:b1:d0:3c:fa:5b:ab:f9: 08:bd:31:b3:0f:40:42:34:b8:9a:0e:8c:64:ac:4a: a8:4c:3e:2d:a8:a5:38:3f:c3:f3:02:bf:d9:cb:42: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B4:24:AF:0F:ED:71:62:67:18:78:9F:AB:72:DF:C4:B0:3C:84:D2 X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:90:03:4c:46:df:ca:12:81:5f:3b:f7:f5:40:8d:b5:f4:a4: 2f:6c:20:b2:cb:25:e2:3c:db:92:3b:08:17:43:19:77:63:c2: d8:a4:04:41:e3:4b:2e:cf:47:71:24:4a:77:1b:9a:08:ff:2b: 2b:8e:68:5c:bb:cc:b6:a4:7e:6c:ec:9e:c4:5e:87:2d:c9:c9: 11:cf:37:db:d1:46:05:5a:6f:d2:4a:02:ef:a2:4b:50:3e:cc: 06:e6:27:ba:7c:ab:93:a6:be:a7:08:98:78:ff:67:cd:cf:58: 3f:40:f2:0e:32:8c:19:20:75:e7:20:9b:98:0a:bc:3c:e4:6b: 3b:1d:eb:1b:b7:33:9e:7a:15:35:df:56:0c:6a:a4:26:a2:0a: a7:51:f1:89:09:6b:50:50:61:5c:41:7f:4c:22:98:d6:2b:78: 9b:2d:3a:b4:0e:49:d4:17:fc:cc:00:ae:47:53:c6:e8:91:49: a7:d7:41:d4:a7:f0:41:89:71:af:b9:31:d2:55:c4:fb:0e:53: 6e:2c:b9:1c:f3:de:c7:34:6f:2c:c0:dd:98:d0:82:da:a1:cb: 96:af:26:fa:e0:4e:fc:38:5e:cf:73:95:b6:a9:9f:0d:4c:bc: 02:19:45:b8:c7:d6:61:cc:a8:ab:4e:58:0d:40:d7:bf:85:99: a0:66:3e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUxMjE4MjMwMjUzWhcNMjUxMjI1MjMwMjUzWjAYMRYwFAYD VQQDDA02OTQ0ODgxZC0wNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7MaULooKTW2o7CJukUF6eiGU0wj2u308jCA8pZNWiQCaI/aZTTNEc7GpsHt XB3JAQGkL2hTiF+O2rPZ8CelUccz1szSLLQyzMGCsKf9Inrkw3XDU/CFt8lKijUQ 9PmWH3nceaJFVsYbsRrqvKxs6WnhF3TU17wFKGSJYiTAD5gLF1biGrGN3bab1cDk lGzhZJzBxve0jng9/NIvWcInx7Qv6mACUmg+cM0xnk5wXrVLt/+bIzQLT5b99Lcr TsZ6Vn2U0a+5OBX2lJ5jc6rGTS2OSgPuW0y46rHQPPpbq/kIvTGzD0BCNLiaDoxk rEqoTD4tqKU4P8PzAr/Zy0KTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe0JK8P 7XFiZxh4n6ty38SwPITSMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCukANMRt/KEoFfO/f1QI219KQvbCCyyyXiPNuSOwgXQxl3Y8LYpARB 40suz0dxJEp3G5oI/ysrjmhcu8y2pH5s7J7EXoctyckRzzfb0UYFWm/SSgLvoktQ PswG5ie6fKuTpr6nCJh4/2fNz1g/QPIOMowZIHXnIJuYCrw85Gs7HesbtzOeehU1 31YMaqQmogqnUfGJCWtQUGFcQX9MIpjWK3ibLTq0DknUF/zMAK5HU8bokUmn10HU p/BBiXGvuTHSVcT7DlNuLLkc897HNG8swN2Y0ILaocuWryb64E78OF7Pc5W2qZ8N TLwCGUW4x9ZhzKirTlgNQNe/hZmgZj7r -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:06 2025 by rpki-client