This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: pjx/iuUzFMSPNoBlHRsUGOJqhbHSPUXQ96pjQRUJxyE= Subject key identifier: 2E:D0:83:CC:64:A1:5F:75:2C:D3:88:36:51:2F:12:2B:94:F0:D6:BD Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 085B Signing time: Sat 06 Dec 2025 19:59:10 +0000 Manifest this update: Sat 06 Dec 2025 19:59:09 +0000 Manifest next update: Sat 13 Dec 2025 19:59:09 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: IoUDfNYHeEjyd97lcJ262k4zmU7m+a4ACD88n7u6/4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Dec 6 19:59:09 2025 GMT Not After : Dec 13 19:59:09 2025 GMT Subject: CN=69348b0e-e54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:b0:6a:be:d4:b6:6f:bc:ca:4a:7f:62:ef: 54:6a:cf:a3:08:78:83:7c:6d:99:19:fc:ca:d0:b4: 95:c4:3e:de:4a:0f:94:01:0a:67:db:87:25:a4:54: 8a:a9:d4:30:95:e7:b7:5f:2c:d2:3a:75:b8:ff:5b: 36:81:e8:3a:e0:a1:02:6f:8f:52:38:57:ef:ac:8c: 4b:97:46:31:a7:bb:97:15:6a:ad:c5:52:b9:e8:52: 97:46:30:d5:68:a5:bb:39:fa:ba:d7:47:1f:9b:9d: 93:28:36:3b:79:14:8e:74:d5:a8:a9:b2:99:8a:4d: 38:59:2e:37:9c:e6:28:ee:98:4a:38:80:87:a5:f4: 47:9b:6d:92:23:27:e1:05:48:51:49:09:91:71:5c: c9:33:e3:fa:8d:45:9e:2d:f4:5e:dc:ae:00:78:e0: 1c:53:8b:4e:e5:b8:90:28:f0:ea:ef:33:10:21:01: ca:51:df:13:fa:f0:7e:20:68:10:eb:d2:ba:fc:79: 3b:0b:ac:1a:2c:73:70:6c:78:66:16:cc:40:be:7e: 37:d2:f1:09:ef:87:7a:68:53:1d:b1:49:95:67:68: b6:61:a3:de:d3:a8:bb:30:0f:e3:97:10:5b:b1:31: a4:66:90:a5:a0:aa:a3:a0:a2:27:b6:e0:e1:51:76: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D0:83:CC:64:A1:5F:75:2C:D3:88:36:51:2F:12:2B:94:F0:D6:BD X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:55:53:f3:08:f0:d6:b1:c9:61:ab:0f:0b:88:ca:2d:dd:ed: 73:00:83:90:26:ed:71:eb:69:63:58:86:80:4d:c2:3a:ae:c5: ba:6b:bb:31:59:c1:93:fa:06:b5:28:45:20:9c:f8:b9:62:25: 59:25:94:13:16:46:d0:fb:8b:77:5e:88:a0:8f:45:ee:b5:4a: ae:8f:76:8c:1f:dc:29:ea:34:3c:ea:9b:5a:22:ed:52:b5:de: bd:e5:02:32:3f:60:9b:a3:29:a7:81:c7:6d:9e:e3:45:ec:a9: be:23:f9:9a:46:f5:43:f6:1d:b4:b1:ab:44:e3:4b:d1:2a:b3: 69:5b:d4:9b:cb:1c:62:b7:95:71:bd:81:57:7a:6a:b3:32:8c: 32:ff:97:35:67:10:ed:cb:a8:97:55:3c:47:9b:3f:94:f9:2a: 60:f2:6e:58:bc:95:60:b7:22:78:c2:9b:d6:42:48:48:b6:de: a2:22:ff:32:c6:56:7c:99:38:53:9c:82:9b:71:ae:6f:eb:ba: 3c:d0:a0:07:3e:08:c6:86:de:87:06:ac:e8:3f:f9:98:70:b6: 94:08:19:9b:9f:30:3b:aa:15:e9:e0:ff:54:18:c5:b2:d7:fd: b2:85:f8:09:cc:6f:22:c6:24:ab:d8:34:75:46:f3:14:7a:15: 39:6d:2c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUxMjA2MTk1OTA5WhcNMjUxMjEzMTk1OTA5WjAYMRYwFAYD VQQDEw02OTM0OGIwZS1lNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoSwar7Utm+8ykp/Yu9Uas+jCHiDfG2ZGfzK0LSVxD7eSg+UAQpn24clpFSK qdQwlee3XyzSOnW4/1s2geg64KECb49SOFfvrIxLl0Yxp7uXFWqtxVK56FKXRjDV aKW7Ofq610cfm52TKDY7eRSOdNWoqbKZik04WS43nOYo7phKOICHpfRHm22SIyfh BUhRSQmRcVzJM+P6jUWeLfRe3K4AeOAcU4tO5biQKPDq7zMQIQHKUd8T+vB+IGgQ 69K6/Hk7C6waLHNwbHhmFsxAvn430vEJ74d6aFMdsUmVZ2i2YaPe06i7MA/jlxBb sTGkZpCloKqjoKIntuDhUXYFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7Qg8xk oV91LNOINlEvEiuU8Na9MB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7VVPzCPDWsclhqw8LiMot3e1zAIOQJu1x62ljWIaATcI6rsW6a7sx WcGT+ga1KEUgnPi5YiVZJZQTFkbQ+4t3Xoigj0XutUquj3aMH9wp6jQ86ptaIu1S td695QIyP2CboymngcdtnuNF7Km+I/maRvVD9h20satE40vRKrNpW9Sbyxxit5Vx vYFXemqzMowy/5c1ZxDty6iXVTxHmz+U+Spg8m5YvJVgtyJ4wpvWQkhItt6iIv8y xlZ8mThTnIKbca5v67o80KAHPgjGht6HBqzoP/mYcLaUCBmbnzA7qhXp4P9UGMWy 1/2yhfgJzG8ixiSr2DR1RvMUehU5bSyQ -----END CERTIFICATE-----Generated at Sun Dec 7 06:23:59 2025 by rpki-client