This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: WZkgFKsJ+YdoJ0iQgdU69GHo1eB9FWvIvRWXT5tGJ44= Subject key identifier: CD:74:D4:93:6A:3B:01:CA:5D:F1:4D:9C:7A:44:83:AE:5B:6C:04:D9 Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 08F0 Signing time: Thu 04 Dec 2025 19:33:46 +0000 Manifest this update: Thu 04 Dec 2025 19:33:46 +0000 Manifest next update: Thu 11 Dec 2025 19:33:46 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: LyysHkI4U1D0z/t7qgHepNaY6Xwj6MA0MEOLRXxU2UA=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cndw19Zty56t27dvRNtU0GtVAt1H5pGdcRIcu3Z2IPk=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: VCA7ATdoKb3bc3VrnHWvqH8lcWu2vv1KBpe9G26/lek=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Dec 4 19:33:46 2025 GMT Not After : Dec 11 19:33:46 2025 GMT Subject: CN=6931e21a-99c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:dd:96:4c:b7:03:72:43:49:68:92:ce:ae: e7:f4:4b:13:cd:b8:bb:6e:84:98:a8:02:6d:a6:9a: b7:cb:31:cf:4a:f6:fe:a5:4d:ea:27:9c:6f:f0:5a: d2:62:39:20:37:23:f9:0e:e2:dd:07:90:0e:97:96: e1:da:40:38:28:fd:3c:05:5e:12:3b:d6:f2:e3:d9: fc:95:06:95:74:78:b7:81:bd:39:99:5c:ca:ae:b4: 8a:7b:9a:a6:2d:2d:7d:95:f6:0d:66:60:57:67:d4: e1:68:62:32:e5:4e:50:dd:d6:ac:c0:49:0f:9d:60: bc:bd:79:8f:66:10:bb:ad:ee:04:9b:37:3e:cc:a8: 38:ac:0c:e6:79:51:6a:f9:83:31:46:93:08:59:90: cb:78:16:af:d6:95:28:e7:75:5d:93:2e:05:ca:ae: c3:65:ea:4a:cb:50:19:d7:f1:77:b8:b6:42:be:5d: 02:7a:20:98:87:ad:67:ef:91:04:04:66:3b:79:ce: 42:7f:bb:8c:61:1d:d3:0c:1f:a9:92:3e:9d:e2:33: d5:6d:93:b2:8c:bf:02:8a:13:a1:e2:b1:11:0c:e9: 5d:86:11:01:dc:ac:a8:de:7d:61:55:97:61:5a:e4: 36:e4:17:e8:dd:19:53:93:87:f0:1e:06:1a:79:ee: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:D4:93:6A:3B:01:CA:5D:F1:4D:9C:7A:44:83:AE:5B:6C:04:D9 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:23:77:81:79:c2:8f:df:a5:07:d1:14:50:4c:34:f0:cc:99: 28:19:77:77:8f:7a:16:77:39:4a:02:38:1f:a4:39:b1:d1:e0: 64:bb:68:37:aa:cc:c0:7d:63:59:0f:87:10:1e:20:47:c4:7e: c0:90:1d:51:a1:e3:1b:d5:94:1f:1e:88:ed:db:0d:d7:0e:31: 90:06:e1:5e:11:a9:df:97:56:8e:78:f9:5d:ca:fd:cf:bc:a9: 68:20:82:3e:22:0b:6e:9d:8a:25:11:ad:85:60:84:b7:26:3b: 11:35:d5:92:a4:cb:c2:ea:b8:00:8a:c7:c0:ee:01:00:a9:49: 6f:08:7f:c8:0c:60:b1:f3:8a:2e:58:82:23:41:10:ee:4d:d8: 42:2f:8c:d7:83:d8:eb:ba:1c:7d:f5:08:14:b8:2a:d9:05:e1: e3:63:fe:ee:32:6b:74:58:55:fe:ae:3d:d8:1e:5d:a3:64:f4: f7:58:69:df:db:a5:4a:98:cf:cd:37:7e:f8:ad:9f:e1:23:74: 3f:32:86:a6:38:d6:5d:33:66:1c:f2:8c:c6:50:69:50:f6:ca: 84:1a:38:0d:fa:79:ef:4d:8d:85:e6:df:41:ef:10:16:dc:47: 36:bd:c0:2d:7f:87:78:b1:fb:27:e0:21:8e:31:9d:90:0c:cf: 71:45:ff:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUxMjA0MTkzMzQ2WhcNMjUxMjExMTkzMzQ2WjAYMRYwFAYD VQQDEw02OTMxZTIxYS05OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Drdlky3A3JDSWiSzq7n9EsTzbi7boSYqAJtppq3yzHPSvb+pU3qJ5xv8FrS YjkgNyP5DuLdB5AOl5bh2kA4KP08BV4SO9by49n8lQaVdHi3gb05mVzKrrSKe5qm LS19lfYNZmBXZ9ThaGIy5U5Q3daswEkPnWC8vXmPZhC7re4Emzc+zKg4rAzmeVFq +YMxRpMIWZDLeBav1pUo53Vdky4Fyq7DZepKy1AZ1/F3uLZCvl0CeiCYh61n75EE BGY7ec5Cf7uMYR3TDB+pkj6d4jPVbZOyjL8CihOh4rERDOldhhEB3Kyo3n1hVZdh WuQ25Bfo3RlTk4fwHgYaee6E4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM101JNq OwHKXfFNnHpEg65bbATZMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6I3eBecKP36UH0RRQTDTwzJkoGXd3j3oWdzlKAjgfpDmx0eBku2g3 qszAfWNZD4cQHiBHxH7AkB1RoeMb1ZQfHojt2w3XDjGQBuFeEanfl1aOePldyv3P vKloIII+IgtunYolEa2FYIS3JjsRNdWSpMvC6rgAisfA7gEAqUlvCH/IDGCx84ou WIIjQRDuTdhCL4zXg9jruhx99QgUuCrZBeHjY/7uMmt0WFX+rj3YHl2jZPT3WGnf 26VKmM/NN374rZ/hI3Q/MoamONZdM2Yc8ozGUGlQ9sqEGjgN+nnvTY2F5t9B7xAW 3Ec2vcAtf4d4sfsn4CGOMZ2QDM9xRf/O -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:46 2025 by rpki-client