This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: tpCDtZJ//TrExnBfB/vUd28L/Bxcy0nWY2fc3q6Lglk= Subject key identifier: FE:B3:91:AD:E5:5F:D0:12:29:07:1A:4F:51:2B:E5:F9:C3:3F:78:51 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 0454 Signing time: Thu 04 Dec 2025 22:40:51 +0000 Manifest this update: Thu 04 Dec 2025 22:40:50 +0000 Manifest next update: Thu 11 Dec 2025 22:40:50 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: nqFsui39yiskWUgZ3y/GHjEAZ08INh4OrKOQGEkswOM=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Dec 4 22:40:50 2025 GMT Not After : Dec 11 22:40:50 2025 GMT Subject: CN=69320df3-de96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:7e:02:70:cd:ba:0f:69:aa:2f:13:bc:bf: f7:f4:53:65:a4:a7:a8:b9:bc:14:07:bf:f1:31:b8: 6d:f2:73:b5:2e:57:5a:70:98:8e:77:4c:3f:a9:29: a2:ac:4c:30:67:29:ce:47:1f:3d:3e:2c:56:46:63: ae:16:69:e4:9c:85:5f:35:04:c5:c4:ff:96:72:44: 85:02:44:36:65:fc:5a:d1:55:21:10:a5:7a:9a:65: 24:eb:3b:43:c0:fb:4c:52:03:a6:fe:72:f2:b5:64: 22:5c:3e:bf:ba:6b:18:dc:8f:fc:ba:6d:c6:8a:65: dc:f5:11:86:35:7f:46:00:b1:87:63:25:64:9a:f9: 42:4e:6a:04:fa:50:60:a1:b0:7b:a8:cc:c8:57:d1: b8:f9:19:a2:e7:b5:43:02:cb:67:c7:f2:fb:d8:8e: d6:ef:fc:db:0e:a2:8d:47:4d:9b:92:d3:89:a8:3a: 14:69:2e:89:bf:a4:8b:b1:28:c6:c4:a2:27:fb:ec: 0b:b0:20:89:4e:39:e4:e2:2f:38:9c:cb:bc:e5:05: 2f:11:e8:57:b1:5b:86:76:2b:03:5c:e0:ad:92:7d: af:72:34:14:3b:b1:db:ea:bc:26:12:d0:57:4c:dc: c2:60:dc:af:64:60:e3:07:c4:46:45:73:a0:f5:cd: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:91:AD:E5:5F:D0:12:29:07:1A:4F:51:2B:E5:F9:C3:3F:78:51 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:84:2a:d5:91:91:5e:3c:9d:b6:c7:ef:74:33:61:24:99:93: c0:9b:9f:6d:57:cc:65:18:5a:0b:6a:ff:de:65:28:e8:e7:20: 5d:d8:f5:87:86:af:ad:6b:df:55:93:76:18:6a:ca:52:ff:25: 82:49:70:16:ea:72:0d:19:08:3d:28:f3:7c:ed:c0:34:3c:18: e8:e5:2c:de:b3:a9:b6:a7:cd:ae:13:22:30:7e:9d:a0:9e:c9: 06:96:fc:e2:48:30:9b:0d:0f:a9:5d:02:76:22:8e:de:93:84: d4:cd:88:6c:f5:4c:8e:77:f1:43:f6:e5:5d:a3:1a:c6:2e:7d: 19:29:43:6c:03:74:14:b4:fb:02:42:1e:4a:3a:f5:8c:64:65: f8:ef:ac:f6:b4:f9:a3:20:73:96:06:28:69:bd:23:ca:0c:72: b9:66:ec:c2:41:1e:b7:db:95:04:09:ba:f1:d4:60:3f:60:fe: 38:a4:e3:8c:65:ee:79:a9:8a:2e:dc:09:de:66:73:46:ec:ab: 3e:3f:06:84:e0:dd:5e:16:6c:56:12:9b:d1:c2:d7:4c:bc:5f: 5e:4a:7f:c7:8e:c7:c3:5a:d1:31:42:66:37:fa:ef:db:cb:55: 9b:d9:17:a5:65:4d:69:98:c0:f9:5b:97:5d:32:46:63:c2:e4: 79:00:af:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUxMjA0MjI0MDUwWhcNMjUxMjExMjI0MDUwWjAYMRYwFAYD VQQDEw02OTMyMGRmMy1kZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2I1+AnDNug9pqi8TvL/39FNlpKeoubwUB7/xMbht8nO1LldacJiOd0w/qSmi rEwwZynORx89PixWRmOuFmnknIVfNQTFxP+WckSFAkQ2Zfxa0VUhEKV6mmUk6ztD wPtMUgOm/nLytWQiXD6/umsY3I/8um3GimXc9RGGNX9GALGHYyVkmvlCTmoE+lBg obB7qMzIV9G4+Rmi57VDAstnx/L72I7W7/zbDqKNR02bktOJqDoUaS6Jv6SLsSjG xKIn++wLsCCJTjnk4i84nMu85QUvEehXsVuGdisDXOCtkn2vcjQUO7Hb6rwmEtBX TNzCYNyvZGDjB8RGRXOg9c1gHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6zka3l X9ASKQcaT1Er5fnDP3hRMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCihCrVkZFePJ22x+90M2EkmZPAm59tV8xlGFoLav/eZSjo5yBd2PWH hq+ta99Vk3YYaspS/yWCSXAW6nINGQg9KPN87cA0PBjo5Szes6m2p82uEyIwfp2g nskGlvziSDCbDQ+pXQJ2Io7ek4TUzYhs9UyOd/FD9uVdoxrGLn0ZKUNsA3QUtPsC Qh5KOvWMZGX476z2tPmjIHOWBihpvSPKDHK5ZuzCQR6325UECbrx1GA/YP44pOOM Ze55qYou3AneZnNG7Ks+PwaE4N1eFmxWEpvRwtdMvF9eSn/HjsfDWtExQmY3+u/b y1Wb2RelZU1pmMD5W5ddMkZjwuR5AK9R -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:10 2025 by rpki-client