This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: O5s63QIqgWGkCJ3C4YdjFVC9nxz8gJ7f8H6OgEgt8jQ= Subject key identifier: C8:1A:F9:06:3E:9A:C6:BF:CC:17:55:EA:75:8C:54:61:7F:B2:CD:92 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 52 Signing time: Fri 05 Dec 2025 05:04:54 +0000 Manifest this update: Fri 05 Dec 2025 05:04:53 +0000 Manifest next update: Fri 12 Dec 2025 05:04:53 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: nrFHnz4gnILbCXNZlUiNxS0ZD5a1ssvZTiLxj7F3idI=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Dec 5 05:04:53 2025 GMT Not After : Dec 12 05:04:53 2025 GMT Subject: CN=693267f5-36ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:62:fe:fc:7f:63:29:40:4d:62:2e:45:1c: d9:22:5e:a2:7d:5d:8b:76:cd:cf:0f:7f:33:b0:a0: 77:8e:63:0c:d3:d2:69:9e:1c:db:85:21:10:33:6b: 7e:c3:d3:50:85:31:c4:16:31:f0:07:3e:59:86:fa: 98:aa:c9:29:b2:1e:9f:70:e5:4a:c5:0a:91:98:b7: 4a:5e:ea:e0:c5:d7:06:62:8a:6a:1f:09:11:ef:38: 02:19:40:69:08:59:b2:6d:23:32:09:87:1a:0c:1a: 96:28:25:d9:ff:00:e6:f9:4e:02:6a:54:4a:dd:23: 1d:5c:9a:de:0c:01:8a:6d:7a:03:9c:dd:6c:d6:ee: aa:1a:55:52:6b:d7:f4:42:6d:4e:a7:65:cc:11:0e: 75:21:ea:86:0d:6a:56:b8:09:b0:c7:55:3a:93:69: 94:cd:7c:71:66:8e:88:53:b0:fd:f3:ca:26:8f:f9: bd:18:56:23:5a:7d:1b:d0:bb:7c:20:7a:1a:7d:68: 7a:3a:6b:ec:33:0d:4b:03:25:5b:3a:7d:ab:02:97: 0e:e8:4e:bb:58:a0:1c:a8:3f:bd:82:6c:fb:6c:33: d2:ea:d7:cb:12:0e:4f:7b:81:16:b6:21:49:37:a1: 41:a0:f4:c4:ed:12:28:78:4f:ca:4b:11:d7:f1:0a: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1A:F9:06:3E:9A:C6:BF:CC:17:55:EA:75:8C:54:61:7F:B2:CD:92 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:4d:94:ab:a5:a1:1c:44:95:02:2f:5c:50:bd:18:ab:45:fe: d7:25:9d:9a:b8:58:0a:54:2f:d2:c2:5d:b1:42:63:5f:4c:ff: 80:46:f1:8e:5a:da:cb:59:5c:07:41:92:38:9a:05:7a:5d:c2: 29:be:36:07:75:34:fc:b3:6d:b6:2c:cb:f1:8c:47:c8:7b:cf: 86:ef:5d:39:c7:41:6a:19:21:23:48:ec:ec:82:13:5b:ce:8b: 95:d4:ca:28:5f:6d:ac:55:4f:d1:39:04:35:53:b2:26:37:69: f8:68:84:31:24:10:75:18:71:5b:7f:5f:cc:2a:b8:e9:ca:36: d2:84:db:e0:f7:b6:da:fd:27:00:4b:d6:d9:ea:49:61:bc:b1: 9b:43:79:a0:d8:10:f3:9e:6c:7b:5f:a9:06:52:d7:98:fc:34: f7:55:75:d8:f5:d3:4b:a5:87:b0:b6:25:43:02:59:b3:76:b3: be:68:43:d0:b3:72:b0:36:42:f3:e7:be:c0:1e:a4:57:9e:0b: ae:97:c2:d4:3a:50:be:73:36:fa:ec:a8:e4:ef:a7:08:a8:80: 43:ae:0d:32:e6:fb:ee:ec:c1:59:42:e4:14:04:58:7d:e5:d0: 49:bc:a0:73:85:28:b9:ba:3f:c6:4e:5b:45:02:59:87:0e:95: dc:3c:24:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTEyMDUwNTA0NTNaFw0yNTEyMTIwNTA0NTNaMBgxFjAUBgNV BAMTDTY5MzI2N2Y1LTM2YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVmL+/H9jKUBNYi5FHNkiXqJ9XYt2zc8PfzOwoHeOYwzT0mmeHNuFIRAza37D 01CFMcQWMfAHPlmG+piqySmyHp9w5UrFCpGYt0pe6uDF1wZiimofCRHvOAIZQGkI WbJtIzIJhxoMGpYoJdn/AOb5TgJqVErdIx1cmt4MAYptegOc3WzW7qoaVVJr1/RC bU6nZcwRDnUh6oYNala4CbDHVTqTaZTNfHFmjohTsP3zyiaP+b0YViNafRvQu3wg ehp9aHo6a+wzDUsDJVs6fasClw7oTrtYoByoP72CbPtsM9Lq18sSDk97gRa2IUk3 oUGg9MTtEih4T8pLEdfxCnsDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyBr5Bj6a xr/MF1XqdYxUYX+yzZIwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OTBGL0QzNUFDNjNFNTRBRTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhr dTB3cmw0OWtuMFljNmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAVNlKuloRxElQIvXFC9GKtF/tclnZq4WApUL9LCXbFCY19M/4BG8Y5a 2stZXAdBkjiaBXpdwim+Ngd1NPyzbbYsy/GMR8h7z4bvXTnHQWoZISNI7OyCE1vO i5XUyihfbaxVT9E5BDVTsiY3afhohDEkEHUYcVt/X8wquOnKNtKE2+D3ttr9JwBL 1tnqSWG8sZtDeaDYEPOebHtfqQZS15j8NPdVddj100ulh7C2JUMCWbN2s75oQ9Cz crA2QvPnvsAepFeeC66XwtQ6UL5zNvrsqOTvpwiogEOuDTLm++7swVlC5BQEWH3l 0Em8oHOFKLm6P8ZOW0UCWYcOldw8JFM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:23 2025 by rpki-client