This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: +tpzcsyyfPotjwNfMKnGS2sbjog2i0dEw+7Zy1+NUmc= Subject key identifier: B6:4A:48:F4:2D:83:E2:86:29:06:F7:B2:65:6F:B7:86:74:5D:CB:72 Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 04ED Signing time: Thu 04 Dec 2025 22:18:17 +0000 Manifest this update: Thu 04 Dec 2025 22:18:17 +0000 Manifest next update: Thu 11 Dec 2025 22:18:17 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: LJ2HWp42qTl6s7UO8GEoVa3/04otwv6B1u42D+QN0LU=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: nj3zL8oObjV8NLXqj4IbNKya+FtBjMvRptjlINscrUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Dec 4 22:18:17 2025 GMT Not After : Dec 11 22:18:17 2025 GMT Subject: CN=693208a9-274e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c0:0f:e6:76:67:d5:4b:56:c3:31:b2:de:f8: 62:11:cc:bf:5f:29:8c:fe:8c:26:a7:a7:5a:18:be: 9a:ac:b6:ae:16:3e:4f:5e:ac:b3:6d:75:09:62:b8: 66:dc:dd:80:6d:c0:a0:ca:cf:89:60:e4:22:4b:7e: b3:f4:3a:4f:d6:a5:06:c9:87:fd:ca:af:8d:0b:d0: 84:06:01:cd:99:08:b9:c0:b1:2b:ae:4e:d9:fd:81: f7:f5:b8:33:88:4a:7a:b3:47:dd:20:22:b4:d5:7c: c3:3a:b2:b5:7e:16:7e:84:6a:89:72:6e:11:32:33: 02:70:fb:93:5a:67:47:fb:0e:02:3c:b2:fb:fb:da: 97:5a:94:ab:df:1f:74:59:cb:b2:68:a2:d1:11:a7: bd:9a:aa:26:c9:9b:84:18:34:42:78:96:83:5c:05: 68:7c:a2:ba:3d:e1:10:55:03:05:7d:09:c1:11:98: d3:08:30:b4:78:be:3e:f3:fc:be:9c:53:83:c3:70: 13:75:87:bd:ec:49:4f:28:6b:f3:ec:77:7b:7e:7c: 0f:2f:44:1e:ce:58:bf:9d:52:07:8e:60:3c:22:9c: 35:3a:7e:a0:bf:11:31:b3:51:9e:90:82:2a:c3:42: 3a:6f:29:75:5c:e7:91:ba:b6:64:fa:6f:43:e3:14: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4A:48:F4:2D:83:E2:86:29:06:F7:B2:65:6F:B7:86:74:5D:CB:72 X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:82:a8:38:78:bd:b3:50:a8:d6:d0:e1:01:8a:07:fe:a7:64: 6f:9d:25:41:26:8d:56:c2:38:ed:28:de:7e:13:ba:43:f6:7c: 44:5f:7b:d9:14:8a:ca:26:42:b9:b7:6f:45:c5:e9:37:9c:56: c6:f3:34:84:75:c5:0f:2c:73:f4:0c:d5:a3:06:4e:4b:77:ec: c3:38:cf:b3:19:ef:e2:cf:b6:8d:fa:42:fa:41:50:a7:6b:be: 88:8d:57:76:52:79:0d:da:b4:f0:19:53:07:1c:d5:43:7c:cf: d3:73:f8:83:0c:f0:53:4a:cf:be:9c:8e:55:55:90:f8:ce:95: dc:84:98:f9:51:41:76:ae:fa:7e:16:c9:f4:61:2c:30:4b:a9: a3:fd:6d:be:09:9a:10:fb:ab:ef:97:a3:e1:bb:18:7a:40:56: 79:ac:89:18:01:26:7b:5f:82:21:86:86:5e:2d:13:f7:94:93: a4:d3:2d:27:7e:23:55:b5:a3:00:db:31:1d:f7:c6:21:6b:07: a1:80:aa:02:1b:d5:55:31:cc:d3:35:2f:98:c1:7d:85:65:69: 27:6d:0b:69:2d:0c:69:af:91:47:6a:01:e5:96:17:47:03:54: f7:08:32:c7:ca:c3:28:b3:0e:ad:c2:ca:66:a6:2f:60:25:4c: c9:e9:4b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUxMjA0MjIxODE3WhcNMjUxMjExMjIxODE3WjAYMRYwFAYD VQQDEw02OTMyMDhhOS0yNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48AP5nZn1UtWwzGy3vhiEcy/XymM/owmp6daGL6arLauFj5PXqyzbXUJYrhm 3N2AbcCgys+JYOQiS36z9DpP1qUGyYf9yq+NC9CEBgHNmQi5wLErrk7Z/YH39bgz iEp6s0fdICK01XzDOrK1fhZ+hGqJcm4RMjMCcPuTWmdH+w4CPLL7+9qXWpSr3x90 WcuyaKLREae9mqomyZuEGDRCeJaDXAVofKK6PeEQVQMFfQnBEZjTCDC0eL4+8/y+ nFODw3ATdYe97ElPKGvz7Hd7fnwPL0Qezli/nVIHjmA8Ipw1On6gvxExs1GekIIq w0I6byl1XOeRurZk+m9D4xTldQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZKSPQt g+KGKQb3smVvt4Z0XctyMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkgqg4eL2zUKjW0OEBigf+p2RvnSVBJo1WwjjtKN5+E7pD9nxEX3vZ FIrKJkK5t29Fxek3nFbG8zSEdcUPLHP0DNWjBk5Ld+zDOM+zGe/iz7aN+kL6QVCn a76IjVd2UnkN2rTwGVMHHNVDfM/Tc/iDDPBTSs++nI5VVZD4zpXchJj5UUF2rvp+ Fsn0YSwwS6mj/W2+CZoQ+6vvl6Phuxh6QFZ5rIkYASZ7X4IhhoZeLRP3lJOk0y0n fiNVtaMA2zEd98YhawehgKoCG9VVMczTNS+YwX2FZWknbQtpLQxpr5FHagHllhdH A1T3CDLHysMosw6twspmpi9gJUzJ6UtF -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:24 2025 by rpki-client