This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: 6pSKv28m3eqGA7xtm5ncy6TfYLL0Q0hBYPvwPqhgSJU= Subject key identifier: 10:83:87:22:6C:C1:8D:8F:01:4D:F1:C8:74:1A:C9:A6:42:27:4A:EA Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 02B5 Signing time: Sun 21 Dec 2025 00:41:42 +0000 Manifest this update: Sun 21 Dec 2025 00:41:41 +0000 Manifest next update: Sun 28 Dec 2025 00:41:41 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: xNWfke7jTChakUwdBfzul/EXrgRBZPhfQrzWKKN+R48=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: jNBzv9AEhkETumwnZVmfkixYJ4ySA7uLCgYaGX6tsDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Dec 21 00:41:41 2025 GMT Not After : Dec 28 00:41:41 2025 GMT Subject: CN=69474246-6680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:a5:de:41:ea:5f:21:aa:92:36:ea:d2:74: 70:19:27:99:e1:ca:3d:bb:6c:7d:e8:d3:ca:30:70: 6b:ce:a5:92:4e:c8:d2:a8:39:62:b5:3d:9a:09:73: 7b:ab:44:de:da:f7:5c:4b:00:f3:21:06:8d:6f:e7: 11:1f:99:1a:23:c9:8a:6b:db:a9:59:e4:e4:0d:9e: b1:89:9c:79:16:d4:af:20:a7:6c:8a:fc:e0:87:6c: 21:8f:29:2a:fc:42:f9:81:7a:63:78:5d:cd:ca:f7: 89:63:88:8c:78:28:1e:64:6a:59:ae:a2:14:9b:d5: e7:20:18:09:5f:61:17:06:0e:cc:9a:e6:19:19:f6: 94:aa:66:92:5f:d9:a2:e7:72:39:7b:30:7f:f8:23: 17:4f:e3:f3:81:f0:36:8d:7c:76:6c:26:1d:4b:9a: d5:3e:ec:f7:16:ba:d2:94:7f:8c:af:6d:05:6a:2c: ce:cf:f3:26:3b:b4:38:94:bc:92:a3:15:fc:75:32: 1d:31:4f:73:99:01:d5:f0:d1:b3:b5:b2:09:14:40: 23:1b:50:3f:66:d1:ab:ef:10:c9:ce:35:4e:85:91: 79:85:b3:cb:84:cd:00:fc:96:a5:4c:c0:35:1d:51: 27:1d:5a:ff:d3:68:9f:f2:59:24:e8:1b:ad:3a:4c: 0d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:87:22:6C:C1:8D:8F:01:4D:F1:C8:74:1A:C9:A6:42:27:4A:EA X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e4:80:21:2a:08:1e:de:9e:b0:d4:60:df:c7:fe:b2:0c:91: 9e:74:f3:03:9d:46:6e:e5:a1:b1:6f:3e:99:7c:dd:7f:da:11: 7f:c1:62:af:ec:fb:a0:f0:9d:c3:7d:0a:19:f1:81:7c:25:f2: da:85:10:aa:fd:f3:4d:11:e4:e4:8b:df:87:42:21:a3:65:25: 43:61:9e:44:39:dc:20:6f:e9:94:e0:78:62:13:d6:5a:62:e0: b6:13:28:9c:bd:e8:c3:5c:dc:64:0c:95:01:85:fb:2c:6c:b7: 4d:aa:d7:1f:07:ed:fc:fc:d6:d5:f1:d4:86:55:49:d5:e3:27: 11:11:d5:0d:55:97:e6:79:27:92:17:97:7c:34:27:77:65:42: 7c:bb:0f:6f:30:bc:4b:b9:11:fd:a8:7b:d6:31:43:56:34:10: 85:51:cd:71:84:ca:78:49:89:bd:c0:db:04:4e:fe:dd:79:35: 2b:43:63:a5:86:d5:25:5c:6f:67:cb:a2:35:4e:91:ed:77:ce: 2f:05:91:a9:6a:e4:8f:8b:f1:0f:f4:27:c7:17:c7:31:10:45: e9:ce:6d:92:7b:b1:4a:0b:29:a9:63:4a:f7:6e:8c:0d:b2:0a: cf:a4:85:42:6c:5a:ae:07:ca:40:92:7c:92:89:4a:8a:cd:b7: 75:99:b5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUxMjIxMDA0MTQxWhcNMjUxMjI4MDA0MTQxWjAYMRYwFAYD VQQDDA02OTQ3NDI0Ni02NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUal3kHqXyGqkjbq0nRwGSeZ4co9u2x96NPKMHBrzqWSTsjSqDlitT2aCXN7 q0Te2vdcSwDzIQaNb+cRH5kaI8mKa9upWeTkDZ6xiZx5FtSvIKdsivzgh2whjykq /EL5gXpjeF3NyveJY4iMeCgeZGpZrqIUm9XnIBgJX2EXBg7MmuYZGfaUqmaSX9mi 53I5ezB/+CMXT+PzgfA2jXx2bCYdS5rVPuz3FrrSlH+Mr20FaizOz/MmO7Q4lLyS oxX8dTIdMU9zmQHV8NGztbIJFEAjG1A/ZtGr7xDJzjVOhZF5hbPLhM0A/JalTMA1 HVEnHVr/02if8lkk6ButOkwNxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCDhyJs wY2PAU3xyHQayaZCJ0rqMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA85IAhKgge3p6w1GDfx/6yDJGedPMDnUZu5aGxbz6ZfN1/2hF/wWKv 7Pug8J3DfQoZ8YF8JfLahRCq/fNNEeTki9+HQiGjZSVDYZ5EOdwgb+mU4HhiE9Za YuC2EyicvejDXNxkDJUBhfssbLdNqtcfB+38/NbV8dSGVUnV4ycREdUNVZfmeSeS F5d8NCd3ZUJ8uw9vMLxLuRH9qHvWMUNWNBCFUc1xhMp4SYm9wNsETv7deTUrQ2Ol htUlXG9ny6I1TpHtd84vBZGpauSPi/EP9CfHF8cxEEXpzm2Se7FKCympY0r3bowN sgrPpIVCbFquB8pAknySiUqKzbd1mbUC -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:07 2025 by rpki-client