This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: NNmFkZHVX97xwcgdoTxSZXNeRtMCCbnOs+/t04TJDxI= Subject key identifier: 56:23:6A:CD:E2:1C:D8:34:BD:3D:4C:D6:90:02:D2:43:3C:10:AD:4B Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 26C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 26AD Signing time: Sat 06 Dec 2025 15:26:56 +0000 Manifest this update: Sat 06 Dec 2025 15:26:56 +0000 Manifest next update: Sat 13 Dec 2025 15:26:56 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: wGbhlOzLli2p5/QUSlLBUugPSlKJRu2hp6Kn+35prTI=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9920 (0x26c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Dec 6 15:26:56 2025 GMT Not After : Dec 13 15:26:56 2025 GMT Subject: CN=69344b40-ed89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:0d:26:c4:bc:bc:1c:ab:87:c6:ce:44:78: 91:ce:fb:c8:52:22:81:01:9e:59:3b:98:f0:5f:bf: 5d:ea:af:31:d8:b3:10:27:f8:39:99:2c:2e:e0:29: 61:f8:06:28:3e:1d:cb:40:e7:6a:a3:a8:0b:27:ce: 82:c6:5a:c4:5b:71:5f:08:b3:00:81:c2:ec:cc:76: d3:3a:9a:8e:f4:d6:10:c8:c0:75:12:98:91:78:66: 57:17:59:0d:15:ac:06:5b:ba:8b:9a:34:e4:c7:4f: 91:3c:14:8f:a7:b4:15:18:23:5e:fe:c3:7e:a9:89: 7a:64:eb:d9:4f:c9:a5:45:32:fe:09:92:f2:a5:fc: 88:e1:4d:06:12:9d:10:95:57:d6:c7:19:95:a6:29: 3e:83:bf:b1:12:ed:f0:9f:20:63:e9:74:bd:57:19: 09:07:8a:7a:39:06:39:f3:fa:67:9a:77:cc:4d:ad: 32:28:a7:b4:e0:ed:8f:20:53:a7:95:88:a4:63:4a: a0:ef:dd:f5:5f:e3:ba:42:40:50:2f:0b:87:e0:0b: a1:d5:87:82:9a:2b:a9:27:de:93:a3:d5:5b:89:1f: 00:55:04:67:f6:88:9e:c4:ea:66:52:d4:5e:99:c4: c2:98:4f:2a:a3:e7:46:2c:28:c7:0d:e4:34:5e:79: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:23:6A:CD:E2:1C:D8:34:BD:3D:4C:D6:90:02:D2:43:3C:10:AD:4B X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:c0:f2:11:bc:e3:9c:0c:c9:6c:ec:35:61:fe:11:4d:0c:33: f7:c2:bf:ee:49:6d:74:0a:a4:2a:32:90:63:3e:16:d8:4e:5a: 49:8a:6a:ac:0f:cf:7b:ce:f8:3d:a2:72:46:ed:b7:01:1b:ac: 3f:bf:87:cb:09:5c:d9:78:a2:3c:30:67:53:b9:19:2a:b6:b5: cd:59:d5:61:f6:f5:2f:a6:63:00:7e:54:b6:b3:a1:db:69:33: e4:3e:14:18:28:b3:6d:be:35:58:e3:1e:94:d8:42:f1:5e:77: 6b:41:f5:40:ec:9a:22:43:ac:45:24:9d:4e:f3:8c:2c:f2:06: 4d:a0:54:15:20:c7:57:2a:89:86:a8:ec:d2:2f:df:30:fb:f0: 3c:05:d9:49:23:73:fe:6b:58:f7:f6:63:33:51:d6:5c:47:cf: 3b:eb:c0:b8:32:b8:b3:bd:7c:b3:c5:b4:60:ce:52:2d:d5:76: 0f:4f:c7:18:33:4b:c9:be:aa:67:aa:15:c7:8b:96:b1:b6:3b: fa:14:ad:53:9c:5e:83:6f:e3:2d:8a:71:c2:c6:ba:1d:63:3e: e5:09:a0:5e:6b:8e:06:b4:68:41:f4:e7:86:c3:65:d1:62:f2: 63:2b:8c:21:ad:cb:03:10:0c:84:45:b8:b1:e5:8d:bc:8a:21: bf:86:3a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUxMjA2MTUyNjU2WhcNMjUxMjEzMTUyNjU2WjAYMRYwFAYD VQQDEw02OTM0NGI0MC1lZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPcNJsS8vByrh8bORHiRzvvIUiKBAZ5ZO5jwX79d6q8x2LMQJ/g5mSwu4Clh +AYoPh3LQOdqo6gLJ86CxlrEW3FfCLMAgcLszHbTOpqO9NYQyMB1EpiReGZXF1kN FawGW7qLmjTkx0+RPBSPp7QVGCNe/sN+qYl6ZOvZT8mlRTL+CZLypfyI4U0GEp0Q lVfWxxmVpik+g7+xEu3wnyBj6XS9VxkJB4p6OQY58/pnmnfMTa0yKKe04O2PIFOn lYikY0qg7931X+O6QkBQLwuH4Auh1YeCmiupJ96To9VbiR8AVQRn9oiexOpmUtRe mcTCmE8qo+dGLCjHDeQ0XnmzVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYjas3i HNg0vT1M1pAC0kM8EK1LMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWwPIRvOOcDMls7DVh/hFNDDP3wr/uSW10CqQqMpBjPhbYTlpJimqs D897zvg9onJG7bcBG6w/v4fLCVzZeKI8MGdTuRkqtrXNWdVh9vUvpmMAflS2s6Hb aTPkPhQYKLNtvjVY4x6U2ELxXndrQfVA7JoiQ6xFJJ1O84ws8gZNoFQVIMdXKomG qOzSL98w+/A8BdlJI3P+a1j39mMzUdZcR88768C4MrizvXyzxbRgzlIt1XYPT8cY M0vJvqpnqhXHi5axtjv6FK1TnF6Db+MtinHCxrodYz7lCaBea44GtGhB9OeGw2XR YvJjK4whrcsDEAyERbix5Y28iiG/hjoC -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:29 2025 by rpki-client