This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: m3Rlge+680NHovg5hKWmmMhJycjFGg1x4UqbVkO1yP0= Subject key identifier: A7:38:4C:1A:89:C3:FE:F5:6E:A4:40:16:04:22:2B:6A:ED:16:07:D5 Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 05AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 0594 Signing time: Sat 06 Dec 2025 22:03:31 +0000 Manifest this update: Sat 06 Dec 2025 22:03:31 +0000 Manifest next update: Sat 13 Dec 2025 22:03:31 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: hUw6ZZV6wBCLkedogWDb8YVl1qUr0GOR8h5nrRe28qo=) 2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: 68fiXxDRInABMZSnArOz5po2YH5/5mLBsvEHG5ANoNk=) 3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: ZIpPhxn3ZcCbFE5Pdx2VemD1MQNZXD0fX/y2N95QY8k=) 4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: bqDWaQrEnfW4Yr6xAJ8NbzXfe/Eoz2cTSijNep764D8=) 5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: ZIQc9K7qsEFy9TotgtpdHjpKJ2lZutFq7FE8iTx18Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1450 (0x5aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: Dec 6 22:03:31 2025 GMT Not After : Dec 13 22:03:31 2025 GMT Subject: CN=6934a833-7c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:05:70:2d:ff:fd:26:de:90:79:6c:96:d4: af:1d:7a:08:ac:6e:c6:5e:09:b8:94:5f:53:3b:57: 40:4d:5c:2c:83:fc:12:dc:45:17:8a:b3:22:29:4d: 00:81:e5:bf:2a:0a:2d:8f:49:88:df:f9:16:32:4b: 39:d3:59:b5:2d:5d:65:69:93:b1:44:75:f4:55:6f: 9f:e6:67:98:c3:0c:7d:fa:06:24:56:0e:72:a1:09: 5e:2c:fd:ef:3c:83:dd:71:65:79:50:66:a2:d2:9a: 46:86:93:df:ee:39:3f:81:21:aa:cb:82:32:7c:df: 13:37:f0:85:57:e6:5b:7b:03:70:88:8f:03:85:44: 81:7f:c2:36:c5:4d:31:cc:48:37:a2:30:92:ab:84: d5:80:06:5b:65:5d:68:ba:90:13:ae:2d:b9:25:d2: c9:9d:75:e8:ea:df:11:71:86:08:4a:f0:8f:ff:0d: 53:e2:6e:bc:02:bc:47:a3:57:6f:b6:ad:c2:d3:ea: 8f:90:b1:8c:01:f4:c4:b4:f5:ba:e7:cc:b6:90:54: 9f:7b:96:5a:b0:87:f6:8b:dd:b2:59:5f:92:dd:71: ac:ac:da:07:b5:30:2a:5a:a5:f1:d0:a5:ba:61:01: 8b:73:cc:86:46:98:f3:5d:0d:cf:94:d4:0b:84:b5: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:38:4C:1A:89:C3:FE:F5:6E:A4:40:16:04:22:2B:6A:ED:16:07:D5 X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a2:72:f7:0b:dd:49:0d:5b:39:3c:37:d7:c4:49:bc:7d:16: 6a:29:46:ba:27:12:f3:ce:81:67:1a:5c:4d:57:99:21:f8:21: 61:65:eb:9b:da:1a:0b:42:69:6e:05:4d:4c:47:89:1a:bd:2d: 5c:f4:9c:e7:78:4b:bf:ad:d4:75:eb:85:38:c2:e9:ab:16:77: 0a:df:a0:f8:6e:4e:3a:98:a1:6f:37:0e:db:ec:a1:41:c1:52: c9:be:7c:71:7e:4a:ed:75:af:95:62:56:6a:bd:49:5c:58:32: 39:ad:ce:5c:68:ea:d5:87:8e:44:9f:f7:d7:1c:7a:3a:32:b0: 48:80:9f:ec:b8:28:6e:68:35:0d:3b:ac:3c:af:c0:73:66:11: c5:e9:a9:ef:bf:5f:06:a7:94:bb:0d:5f:e7:04:c2:79:a4:0c: fd:f1:b1:44:37:75:90:24:17:46:0b:7d:df:84:1e:9f:60:cf: 59:e7:2e:bd:56:84:d1:9f:54:bb:57:0b:78:50:16:6a:a7:d2: e1:08:da:04:c2:fb:a2:e3:68:6d:3a:4b:91:d7:c4:08:8d:65: a3:ad:c1:eb:99:dd:0a:75:06:53:72:1b:6f:cd:44:07:4b:43: 7a:ce:56:52:43:4b:69:0d:5f:62:33:14:ff:9f:83:0c:8e:2e: c5:7c:6e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjUxMjA2MjIwMzMxWhcNMjUxMjEzMjIwMzMxWjAYMRYwFAYD VQQDEw02OTM0YTgzMy03YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofAFcC3//SbekHlsltSvHXoIrG7GXgm4lF9TO1dATVwsg/wS3EUXirMiKU0A geW/Kgotj0mI3/kWMks501m1LV1laZOxRHX0VW+f5meYwwx9+gYkVg5yoQleLP3v PIPdcWV5UGai0ppGhpPf7jk/gSGqy4IyfN8TN/CFV+ZbewNwiI8DhUSBf8I2xU0x zEg3ojCSq4TVgAZbZV1oupATri25JdLJnXXo6t8RcYYISvCP/w1T4m68ArxHo1dv tq3C0+qPkLGMAfTEtPW658y2kFSfe5ZasIf2i92yWV+S3XGsrNoHtTAqWqXx0KW6 YQGLc8yGRpjzXQ3PlNQLhLXlbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc4TBqJ w/71bqRAFgQiK2rtFgfVMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxonL3C91JDVs5PDfXxEm8fRZqKUa6JxLzzoFnGlxNV5kh+CFhZeub 2hoLQmluBU1MR4kavS1c9JzneEu/rdR164U4wumrFncK36D4bk46mKFvNw7b7KFB wVLJvnxxfkrtda+VYlZqvUlcWDI5rc5caOrVh45En/fXHHo6MrBIgJ/suChuaDUN O6w8r8BzZhHF6anvv18Gp5S7DV/nBMJ5pAz98bFEN3WQJBdGC33fhB6fYM9Z5y69 VoTRn1S7Vwt4UBZqp9LhCNoEwvui42htOkuR18QIjWWjrcHrmd0KdQZTchtvzUQH S0N6zlZSQ0tpDV9iMxT/n4MMji7FfG6g -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:54 2025 by rpki-client