This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: NPG+fjhNhrtQPepZWNyb6/MH6xhT8rumc9zyBVnnNno= Subject key identifier: 47:B7:68:5B:F2:0F:B3:46:9D:74:CA:8C:5B:B1:6F:6C:0F:B8:73:7F Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 0129 Signing time: Sun 07 Dec 2025 02:57:52 +0000 Manifest this update: Sun 07 Dec 2025 02:57:51 +0000 Manifest next update: Sun 14 Dec 2025 02:57:51 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: Ysj7b++7JrlNp46Fj3msAZC6FUVzr5oLHfJflCy2CHI=) 2: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: vyWjtraKy2uNU188bHY1lVeQD/xqPddD3pXN0n/73vU=) 3: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: ppr+f3CQLMrxRnmkUupoZgwnP/LYRvSbiOC7CwxVMhs=) 4: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: G6b5iOlkKludFCzss6jnAMWJYZcz6E/s4QELN3EDX6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Dec 7 02:57:51 2025 GMT Not After : Dec 14 02:57:51 2025 GMT Subject: CN=6934ed30-1b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:65:16:15:ab:c5:fd:0b:a0:10:b2:0a:b6:46: 43:31:e4:f4:34:1f:32:ac:84:cb:6b:45:bc:2b:7e: 71:b5:3a:a1:60:f5:d3:10:ef:0d:12:78:88:a2:69: 81:9d:e5:f3:d6:04:01:e7:30:5a:ef:0f:92:a5:d0: 2f:ba:c0:d5:53:35:7d:3c:e1:24:0e:5b:1b:67:71: 20:0d:2f:8a:03:4c:50:cb:c0:bb:b7:94:24:db:ff: b5:d5:79:e5:27:db:fe:80:18:0b:70:25:2e:bd:84: 6b:37:53:84:55:e1:53:20:01:08:9e:24:bf:87:d8: bc:4b:f1:95:e5:eb:a2:7d:dc:24:d6:21:f7:88:5f: cc:45:9c:35:42:eb:c9:b0:1a:fb:a7:82:b1:22:e0: 68:ff:b0:10:34:6c:89:2d:ff:a7:ac:32:b5:bd:74: df:fb:b8:e3:41:25:dd:ef:01:15:bb:0c:23:00:e5: 89:3b:a8:5d:72:8a:5f:c9:8a:a8:49:70:15:2b:a7: 17:85:da:1e:53:5c:92:f0:8c:c2:00:bc:c7:07:9b: ef:c9:43:18:03:30:ed:1b:78:1c:fb:f1:83:91:77: b1:0a:dc:72:eb:05:79:69:c6:22:08:ec:50:78:da: 7b:78:61:ba:ad:92:a1:e8:86:41:70:f6:be:e2:97: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B7:68:5B:F2:0F:B3:46:9D:74:CA:8C:5B:B1:6F:6C:0F:B8:73:7F X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:32:f3:ee:8b:ff:35:44:e0:91:21:41:c5:d5:b2:a2:92:6a: 2a:4c:26:68:b1:92:8e:d5:1c:12:cf:c0:06:c1:ae:29:55:f8: 85:0d:93:9b:5e:28:3e:d3:ea:8a:ec:da:c5:72:6f:b7:28:d0: 6d:79:6b:0f:78:ae:6e:1f:d6:95:4c:72:5b:9c:ba:92:5a:50: 94:fe:c2:64:d9:f8:ce:fb:01:dc:d0:91:0f:54:d9:13:63:bf: 26:ea:74:74:5c:5f:e7:ce:29:a2:7d:3c:6a:27:8c:28:7e:0c: 3d:db:b8:bf:cb:2c:e9:e9:18:e6:6d:19:7c:5a:8f:96:26:4b: 47:15:6b:05:35:35:70:b8:17:9d:34:35:88:5f:6d:44:d0:3e: 10:97:56:f7:61:c6:e6:a7:b6:22:38:6a:16:26:bc:6d:10:48: 0f:df:26:f0:6d:ff:b5:1a:ee:88:36:c6:2c:1c:9d:77:b8:6f: 00:e1:03:89:77:e9:39:41:c1:62:a9:3a:6a:f0:72:4f:30:e5: f2:9f:5e:0a:bd:b7:4c:1f:28:0e:1f:68:a1:d2:6a:23:f6:3e: f3:f8:1f:cc:fc:21:e4:44:5b:a0:85:15:c6:b1:f4:ab:50:85: 28:64:3d:55:bf:ec:ce:a8:3c:a5:23:89:88:3d:27:27:b9:29: 52:52:9b:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUxMjA3MDI1NzUxWhcNMjUxMjE0MDI1NzUxWjAYMRYwFAYD VQQDEw02OTM0ZWQzMC0xYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mUWFavF/QugELIKtkZDMeT0NB8yrITLa0W8K35xtTqhYPXTEO8NEniIommB neXz1gQB5zBa7w+SpdAvusDVUzV9POEkDlsbZ3EgDS+KA0xQy8C7t5Qk2/+11Xnl J9v+gBgLcCUuvYRrN1OEVeFTIAEIniS/h9i8S/GV5euifdwk1iH3iF/MRZw1QuvJ sBr7p4KxIuBo/7AQNGyJLf+nrDK1vXTf+7jjQSXd7wEVuwwjAOWJO6hdcopfyYqo SXAVK6cXhdoeU1yS8IzCALzHB5vvyUMYAzDtG3gc+/GDkXexCtxy6wV5acYiCOxQ eNp7eGG6rZKh6IZBcPa+4peLEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe3aFvy D7NGnXTKjFuxb2wPuHN/MB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnMvPui/81ROCRIUHF1bKikmoqTCZosZKO1RwSz8AGwa4pVfiFDZOb Xig+0+qK7NrFcm+3KNBteWsPeK5uH9aVTHJbnLqSWlCU/sJk2fjO+wHc0JEPVNkT Y78m6nR0XF/nzimifTxqJ4wofgw927i/yyzp6RjmbRl8Wo+WJktHFWsFNTVwuBed NDWIX21E0D4Ql1b3Ycbmp7YiOGoWJrxtEEgP3ybwbf+1Gu6INsYsHJ13uG8A4QOJ d+k5QcFiqTpq8HJPMOXyn14KvbdMHygOH2ih0moj9j7z+B/M/CHkRFughRXGsfSr UIUoZD1Vv+zOqDylI4mIPScnuSlSUptr -----END CERTIFICATE-----Generated at Sun Dec 7 04:37:17 2025 by rpki-client