This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: hafDF8ftEfGfFfuOjWcJdTkzJBBGYVE0LlsRdUX6HfU= Subject key identifier: 63:DB:55:45:29:EF:97:05:7D:41:9C:05:9B:AF:77:A5:C3:6C:8F:81 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 02AD Signing time: Thu 04 Dec 2025 23:51:46 +0000 Manifest this update: Thu 04 Dec 2025 23:51:45 +0000 Manifest next update: Thu 11 Dec 2025 23:51:45 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: IxSfRFDJJIo5aTJ/lbND6+jacPJgw45hJ0qhQk0EEAA=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: jNBzv9AEhkETumwnZVmfkixYJ4ySA7uLCgYaGX6tsDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Dec 4 23:51:45 2025 GMT Not After : Dec 11 23:51:45 2025 GMT Subject: CN=69321e91-cea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:00:74:b4:75:e1:c9:73:0c:3b:54:82:db: b7:f0:23:05:bf:3e:59:89:d5:0c:41:14:d9:2c:a3: d4:e5:3c:8c:a3:ea:e6:61:fe:1f:57:88:34:9b:df: 5f:d9:52:5c:e3:4e:5d:ac:6c:d0:f1:cd:89:78:0b: f3:54:4e:6c:6a:ff:0e:d9:87:88:04:24:b3:c5:cd: ac:3c:05:61:1e:87:86:c7:ef:ce:41:1d:de:eb:4d: f4:06:9f:55:30:37:62:80:b3:6a:b5:65:d9:58:f7: c8:61:a8:1c:36:c6:12:f6:e9:d4:24:34:54:57:9e: 37:27:80:60:37:3a:bb:a3:e4:f0:88:35:52:51:bf: 73:73:7a:cd:c3:26:6d:4e:09:d1:4c:d8:5a:7e:3d: 54:15:4c:e5:7c:d7:83:7d:eb:88:c3:4a:6f:25:91: bd:8e:89:24:9e:16:fd:eb:19:9c:ce:99:12:d4:cf: b3:4c:27:b6:de:92:a5:49:e1:56:54:f8:e0:8d:4b: f6:af:9c:61:51:8d:ae:ea:8b:8e:05:d0:3f:80:f3: 5d:2d:11:a1:f0:b1:30:e9:e4:e3:f4:df:6a:d1:33: db:e4:3c:25:9a:2f:58:a4:a8:d1:08:8d:72:88:2e: e8:05:32:3a:c5:bd:99:cd:de:55:40:60:91:58:12: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DB:55:45:29:EF:97:05:7D:41:9C:05:9B:AF:77:A5:C3:6C:8F:81 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:87:bc:4a:f4:bd:c3:a5:9e:2d:71:51:89:78:e3:84:9a:a0: 8a:84:77:32:e7:8b:d5:6e:13:6e:4b:28:4b:45:d3:d6:6a:00: 21:70:e9:23:97:c8:a0:e5:c6:c9:c4:7d:fa:5f:d0:b0:69:3b: 89:ec:33:2e:97:00:b6:bf:6c:ad:a1:34:a0:86:b6:d8:6d:6e: 46:3e:62:31:90:f2:12:bb:62:1b:6b:6e:b2:4e:61:9b:06:1c: 33:65:d1:ba:44:df:69:68:be:53:43:27:11:c4:73:a5:12:7e: bb:32:da:53:22:16:a0:71:30:63:3e:5d:a5:9c:fb:4e:b7:73: 33:35:99:2e:90:a2:40:61:73:fd:f8:25:98:19:9e:4d:f3:52: aa:7b:80:d9:79:c3:2c:06:b1:6b:10:07:8e:be:2c:64:6e:2d: 31:56:3d:0e:a4:e0:45:51:ea:cc:a0:43:e7:4b:a7:0d:1d:f0: 99:80:18:0d:7a:6e:76:dc:4b:87:94:f5:91:30:e2:b4:df:0c: 86:9e:ea:21:c0:b7:b9:4b:f3:56:40:8a:20:62:24:9f:80:17: 4d:4a:73:8b:5b:c4:13:b5:9e:70:51:0d:0e:6a:c4:cf:f0:fa: 31:fa:2e:d5:cf:23:38:6f:2a:09:af:40:8a:9a:33:44:70:7b: 41:e8:b1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUxMjA0MjM1MTQ1WhcNMjUxMjExMjM1MTQ1WjAYMRYwFAYD VQQDEw02OTMyMWU5MS1jZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3oAdLR14clzDDtUgtu38CMFvz5ZidUMQRTZLKPU5TyMo+rmYf4fV4g0m99f 2VJc405drGzQ8c2JeAvzVE5sav8O2YeIBCSzxc2sPAVhHoeGx+/OQR3e6030Bp9V MDdigLNqtWXZWPfIYagcNsYS9unUJDRUV543J4BgNzq7o+TwiDVSUb9zc3rNwyZt TgnRTNhafj1UFUzlfNeDfeuIw0pvJZG9jokknhb96xmczpkS1M+zTCe23pKlSeFW VPjgjUv2r5xhUY2u6ouOBdA/gPNdLRGh8LEw6eTj9N9q0TPb5Dwlmi9YpKjRCI1y iC7oBTI6xb2Zzd5VQGCRWBINuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPbVUUp 75cFfUGcBZuvd6XDbI+BMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAah7xK9L3DpZ4tcVGJeOOEmqCKhHcy54vVbhNuSyhLRdPWagAhcOkj l8ig5cbJxH36X9CwaTuJ7DMulwC2v2ytoTSghrbYbW5GPmIxkPISu2Iba26yTmGb BhwzZdG6RN9paL5TQycRxHOlEn67MtpTIhagcTBjPl2lnPtOt3MzNZkukKJAYXP9 +CWYGZ5N81Kqe4DZecMsBrFrEAeOvixkbi0xVj0OpOBFUerMoEPnS6cNHfCZgBgN em523EuHlPWRMOK03wyGnuohwLe5S/NWQIogYiSfgBdNSnOLW8QTtZ5wUQ0OasTP 8Pox+i7VzyM4byoJr0CKmjNEcHtB6LFG -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:12 2025 by rpki-client