This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: Iq845TtOF+oY7X6/JlvDzk4ejF/FyMv8e0kxoWS8KBA= Subject key identifier: F0:CB:C8:D7:0A:1C:32:7A:63:70:31:D6:84:A0:DD:7F:0C:1F:20:64 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E3A Signing time: Sat 20 Dec 2025 17:30:01 +0000 Manifest this update: Sat 20 Dec 2025 17:30:01 +0000 Manifest next update: Sat 27 Dec 2025 17:30:01 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: D2s0xheZicuc/o3tEyF7yoywwwzAJcT7XZown8JKcQE=) 2: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: xh37AiJohCRfHSRUDjcvxE7B1+32xaC/K8WdUvsEnhs=) 3: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: wn9BYbDEeMgzZ+nvIIVHE03FH3j72pfXBWyBUiQ/bUc=) 4: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 3DrTSsxaKfHNG5QI6Tt7BoAnrvxk6SFVvs/husXrnBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Dec 20 17:30:01 2025 GMT Not After : Dec 27 17:30:01 2025 GMT Subject: CN=6946dd19-d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:0a:a8:11:3f:3f:36:a8:c0:7e:91:ab:38: ec:05:c6:6f:0e:c2:a6:9c:c6:dd:56:7a:bb:03:dd: c2:f1:b3:91:00:f2:5a:c7:3c:28:9f:d2:99:9e:21: 2c:ea:b6:57:98:6f:9d:75:f9:71:d1:c5:54:d5:03: 59:60:2a:4d:b7:bb:31:29:c8:e5:7b:89:09:80:fc: 1b:18:c2:70:24:80:d2:4d:06:b5:f8:ae:09:a2:73: ef:cd:68:f8:d0:6d:c8:0e:59:89:2e:9b:6f:d7:04: 46:c5:c3:3c:c3:73:16:7b:36:68:eb:13:9f:6f:81: 09:a7:c2:34:c8:b9:0e:43:ea:e1:c5:8b:6d:9a:84: 7f:a0:06:6e:f1:d9:c1:77:5f:7e:ac:18:cf:0a:41: 45:69:fd:1c:56:f5:70:b2:0e:68:a2:75:2e:52:c1: 8b:44:98:aa:1b:b7:68:3b:04:b5:51:df:9f:65:a4: 6f:27:29:d7:f3:fc:80:44:17:04:aa:7d:3c:6a:5d: 93:aa:55:20:5a:a2:c3:87:a5:a8:ca:9b:9d:04:23: 30:c0:a7:3e:ac:41:d9:21:49:9f:6f:00:fc:32:9b: 23:eb:60:99:6a:f4:67:0a:57:1a:13:ab:fb:84:6a: 0c:46:96:70:7e:29:df:b1:dd:3c:a8:fc:79:5c:13: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CB:C8:D7:0A:1C:32:7A:63:70:31:D6:84:A0:DD:7F:0C:1F:20:64 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:47:ad:ba:aa:20:5b:3e:f2:14:8d:92:86:a7:b7:73:c0:fa: a4:e7:4e:39:60:19:0f:50:91:3c:78:cd:1d:44:e6:3b:b1:fe: 2d:fa:68:64:34:71:d7:4a:38:4f:09:c6:c9:10:50:62:f9:e8: 4a:13:bf:23:6c:ac:1a:8a:7b:f7:bd:94:3b:4c:38:1d:5b:a0: a3:21:d0:dd:aa:b7:6b:e0:e9:af:b3:b4:c5:37:4a:ee:ed:07: a9:6f:38:ce:af:a6:0e:56:57:ad:02:a2:dc:97:13:f8:f3:9c: 5a:09:bc:f6:03:72:da:b2:6a:f1:36:67:38:fd:37:b6:da:c3: 36:21:0f:2c:45:1f:5d:9a:03:9a:a0:9e:72:18:11:de:cd:1a: 49:93:30:9b:0c:3a:b8:2d:f1:4e:d7:ea:6c:f5:9f:2b:c2:e7: 92:c1:e4:50:33:23:ae:4b:ee:67:95:c5:6d:a2:54:48:8b:b5: 15:08:09:bf:45:9c:e8:b6:fc:16:af:ec:59:64:79:d6:ba:09: a9:b8:bf:de:f8:65:f2:01:9e:94:43:cc:7b:6d:a6:95:7c:42: 66:17:41:18:9c:9e:ab:c3:a0:9f:aa:ff:05:a2:b5:31:54:c2: 25:78:d0:48:33:bf:b7:c4:5c:c9:c8:6d:0c:c2:92:8a:0d:43: e2:72:17:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUxMjIwMTczMDAxWhcNMjUxMjI3MTczMDAxWjAYMRYwFAYD VQQDDA02OTQ2ZGQxOS1kNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl94KqBE/PzaowH6RqzjsBcZvDsKmnMbdVnq7A93C8bORAPJaxzwon9KZniEs 6rZXmG+ddflx0cVU1QNZYCpNt7sxKcjle4kJgPwbGMJwJIDSTQa1+K4JonPvzWj4 0G3IDlmJLptv1wRGxcM8w3MWezZo6xOfb4EJp8I0yLkOQ+rhxYttmoR/oAZu8dnB d19+rBjPCkFFaf0cVvVwsg5oonUuUsGLRJiqG7doOwS1Ud+fZaRvJynX8/yARBcE qn08al2TqlUgWqLDh6WoypudBCMwwKc+rEHZIUmfbwD8Mpsj62CZavRnClcaE6v7 hGoMRpZwfinfsd08qPx5XBM7qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDLyNcK HDJ6Y3Ax1oSg3X8MHyBkMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMR626qiBbPvIUjZKGp7dzwPqk5045YBkPUJE8eM0dROY7sf4t+mhk NHHXSjhPCcbJEFBi+ehKE78jbKwainv3vZQ7TDgdW6CjIdDdqrdr4Omvs7TFN0ru 7QepbzjOr6YOVletAqLclxP485xaCbz2A3LasmrxNmc4/Te22sM2IQ8sRR9dmgOa oJ5yGBHezRpJkzCbDDq4LfFO1+ps9Z8rwueSweRQMyOuS+5nlcVtolRIi7UVCAm/ RZzotvwWr+xZZHnWugmpuL/e+GXyAZ6UQ8x7baaVfEJmF0EYnJ6rw6Cfqv8ForUx VMIleNBIM7+3xFzJyG0MwpKKDUPichf+ -----END CERTIFICATE-----Generated at Sun Dec 21 22:06:34 2025 by rpki-client