This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: olbxGEzT2548w/LEvaquQnAdAaXj2BCRAOzseUHMD2w= Subject key identifier: 2A:D2:9C:BC:66:75:0D:95:15:B5:C8:72:FA:F5:07:97:3D:9A:29:6E Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 03F3 Signing time: Sat 06 Dec 2025 23:08:33 +0000 Manifest this update: Sat 06 Dec 2025 23:08:33 +0000 Manifest next update: Sat 13 Dec 2025 23:08:33 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: +BVw91h0QSXY8a5GpGz9lU978PZOIoUC9Mks9SPb9pw=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: l5UPW8luctznfhC7jBJpvRQP7pkTfMgJK+ognjXHfwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Dec 6 23:08:33 2025 GMT Not After : Dec 13 23:08:33 2025 GMT Subject: CN=6934b771-f1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:41:a4:82:2c:63:ba:cc:5c:52:55:04:f8: 1d:2b:7b:c0:ff:1e:d4:f7:1f:9f:c1:49:a2:d9:8b: 13:f9:29:9c:e2:e8:89:bc:60:d2:68:50:4e:f5:0a: 56:fc:fb:0d:35:73:95:c3:a9:ee:0d:45:d5:8c:28: 8b:e6:dc:82:22:1e:7e:9a:ca:d3:e5:1b:d6:1c:03: 4d:44:90:7d:28:48:b5:b5:93:17:ee:3d:36:13:1b: 39:f4:0e:e9:c3:73:1b:fd:ae:0b:9b:ac:e3:a6:17: 76:dc:f6:21:ab:ea:ca:aa:45:c5:cc:d7:e2:99:07: 43:76:63:fc:84:4e:aa:98:44:d9:f2:dc:b9:44:80: b3:6f:c3:ca:e7:3e:1a:2a:4f:79:d9:9a:9c:e8:13: 51:b1:84:7a:d0:ff:28:76:de:c8:c2:fa:33:ae:99: aa:77:8c:79:ff:6d:b8:89:8e:d1:4a:0e:52:57:65: 1a:8e:82:36:81:87:ac:6b:0b:84:b1:37:18:d5:7d: 31:e8:90:ac:2e:11:1c:8b:2f:85:13:06:70:b9:a0: 2b:11:b0:20:60:af:68:71:83:cb:f8:7a:02:b1:60: 1a:82:34:01:fe:9e:20:94:0f:94:bc:07:4d:96:5e: 0f:3d:92:df:43:fa:ca:66:42:b3:b7:56:54:48:79: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D2:9C:BC:66:75:0D:95:15:B5:C8:72:FA:F5:07:97:3D:9A:29:6E X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d7:ef:7d:c6:b9:a9:9d:22:8b:0f:d8:b2:18:7c:e3:2e:6c: a0:8f:a9:af:fa:d9:16:df:d9:5f:dc:6f:8d:b7:e9:a8:f8:c2: 70:ca:46:63:b6:c6:36:02:c2:35:b8:73:3b:e7:21:1c:12:6c: e9:70:45:eb:ed:bf:2f:6b:d6:c3:31:20:92:ae:cd:fb:1e:74: 07:ab:ba:ae:8f:55:8e:9c:f3:17:69:fc:d0:5c:c4:dd:64:61: 77:14:11:60:6b:33:9a:38:30:1f:92:5e:1f:0e:64:29:3d:05: 94:3f:f4:1e:75:df:e3:6d:48:f6:cf:23:85:08:72:27:b4:11: 6d:13:96:71:2f:a9:29:ac:58:d4:f7:2d:0b:ea:58:d2:48:3a: 13:71:5a:0d:e5:ed:69:82:5e:32:24:c9:0e:a2:54:70:e1:2f: 94:1e:35:1a:59:99:f6:a3:0f:13:57:5b:cf:e9:a7:c3:9c:63: d3:5d:a3:2c:df:48:ea:ca:07:8b:0a:9b:11:d0:eb:ff:3f:a4: 44:a3:02:f4:11:1a:39:48:aa:55:57:e5:6c:34:eb:6d:99:d9: 98:2b:d5:c6:d6:a8:cc:63:d3:78:6d:02:70:fb:f7:34:38:8a: e5:05:e0:73:cc:9b:d1:54:e9:21:11:79:d1:1f:d5:4e:e4:aa: e9:be:22:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUxMjA2MjMwODMzWhcNMjUxMjEzMjMwODMzWjAYMRYwFAYD VQQDEw02OTM0Yjc3MS1mMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNNBpIIsY7rMXFJVBPgdK3vA/x7U9x+fwUmi2YsT+Smc4uiJvGDSaFBO9QpW /PsNNXOVw6nuDUXVjCiL5tyCIh5+msrT5RvWHANNRJB9KEi1tZMX7j02Exs59A7p w3Mb/a4Lm6zjphd23PYhq+rKqkXFzNfimQdDdmP8hE6qmETZ8ty5RICzb8PK5z4a Kk952Zqc6BNRsYR60P8odt7Iwvozrpmqd4x5/224iY7RSg5SV2UajoI2gYesawuE sTcY1X0x6JCsLhEciy+FEwZwuaArEbAgYK9ocYPL+HoCsWAagjQB/p4glA+UvAdN ll4PPZLfQ/rKZkKzt1ZUSHmhhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrSnLxm dQ2VFbXIcvr1B5c9miluMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1+99xrmpnSKLD9iyGHzjLmygj6mv+tkW39lf3G+Nt+mo+MJwykZj tsY2AsI1uHM75yEcEmzpcEXr7b8va9bDMSCSrs37HnQHq7quj1WOnPMXafzQXMTd ZGF3FBFgazOaODAfkl4fDmQpPQWUP/Qedd/jbUj2zyOFCHIntBFtE5ZxL6kprFjU 9y0L6ljSSDoTcVoN5e1pgl4yJMkOolRw4S+UHjUaWZn2ow8TV1vP6afDnGPTXaMs 30jqygeLCpsR0Ov/P6REowL0ERo5SKpVV+VsNOttmdmYK9XG1qjMY9N4bQJw+/c0 OIrlBeBzzJvRVOkhEXnRH9VO5KrpviKu -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:32 2025 by rpki-client