This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json) Hash identifier: JEzLBcr4qVMgWonTZ3Iobeo6P6tRlfWSRQEVmgiGsxA= Subject key identifier: B5:FD:40:7C:D6:42:54:19:86:25:79:F2:F5:BB:31:D6:59:A1:82:92 Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft Manifest number: 59 Signing time: Sat 06 Dec 2025 23:37:36 +0000 Manifest this update: Sat 06 Dec 2025 23:37:36 +0000 Manifest next update: Sat 13 Dec 2025 23:37:36 +0000 Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: avMHRbQaXqbC+9uAsnckNACNVUONoaPOcW0MCidlAQs=) 2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: hMuLJheRFMre3o95xQZ4egylCXlDJ3pGeYvC5sIkz/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Validity Not Before: Dec 6 23:37:36 2025 GMT Not After : Dec 13 23:37:36 2025 GMT Subject: CN=6934be40-4e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:6b:57:c5:8b:ea:de:cd:8b:15:a5:3d:ff: d4:b2:87:a3:e6:a4:d1:68:15:ef:42:6b:87:20:75: 18:29:be:35:44:15:72:b8:10:d7:01:78:c3:4e:1f: df:4d:20:c4:1c:0a:80:9d:cc:55:9d:82:25:5b:1a: 34:f2:31:2b:b3:ab:b6:6e:72:6a:f5:8e:20:68:8f: b8:53:e0:33:5a:6b:96:2d:40:4c:58:75:62:b4:6f: 94:d3:3c:86:1b:96:b4:0f:ec:4a:9a:25:4c:58:8f: 38:71:f0:e9:27:cc:a6:fb:cc:03:14:25:4b:11:ee: 9f:6f:f1:21:df:25:f9:c6:79:4a:00:49:47:db:9a: 6e:0e:0b:d1:6f:34:b4:b3:f0:e5:0d:a1:4b:18:ab: 5f:9a:d1:f8:7d:24:27:93:4a:5d:8b:dd:b3:e3:aa: ef:bd:24:fc:be:4c:33:61:3f:df:ae:ce:da:08:25: f6:f9:4f:0a:c4:88:84:f1:51:19:ec:1e:02:d6:39: 79:0b:f9:32:0d:2d:d2:a8:c2:73:5b:6a:2f:47:54: 92:51:68:9c:a3:73:b6:59:56:6c:d0:b9:64:0b:b4: 05:1c:11:c0:bc:46:cd:fa:54:17:75:93:3f:5a:ac: aa:20:43:3e:a6:54:34:d6:76:da:fb:ef:28:59:5d: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FD:40:7C:D6:42:54:19:86:25:79:F2:F5:BB:31:D6:59:A1:82:92 X509v3 Authority Key Identifier: keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0c:e7:c9:d5:35:1f:46:7e:bb:79:47:bc:dc:7d:34:f5:27: dc:d6:42:ac:7a:1d:5f:08:b5:f2:9d:2e:e5:77:ca:7a:4b:bc: 6b:a2:3d:2c:26:30:c7:f5:5a:ea:7d:01:00:a3:e5:40:78:f2: 90:f6:cc:95:aa:54:04:f1:59:f8:ec:f6:19:e5:70:72:03:61: a3:44:af:61:77:75:73:68:75:a1:df:31:b9:d2:10:0a:48:60: d1:cc:5b:eb:9b:71:5b:16:60:44:57:5b:54:b7:49:86:14:ae: a8:e5:ba:b4:86:12:71:a1:3a:45:e5:fc:42:5a:7c:27:cf:31: d1:92:11:67:8e:b4:32:8b:1b:01:29:23:55:e4:90:3e:77:9f: 74:29:59:f4:74:6e:88:b9:96:b3:1e:87:9b:4d:d8:43:6a:9e: 4a:9e:b2:b1:3c:10:06:ac:37:0c:ec:1e:73:4b:b8:60:62:ae: 25:5c:e1:db:32:84:2b:33:23:ce:64:19:ab:f4:50:ed:4f:d9: 2f:95:2c:b8:ba:dc:f6:ef:44:65:45:15:1d:f6:c6:9d:25:29: 7a:1d:ed:c3:e4:e4:e6:5b:85:54:4c:ff:e3:55:f5:f8:76:bb: a3:6f:44:74:e3:0d:5c:ba:eb:51:c3:ec:57:6d:db:e9:64:a3: 0f:77:2f:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDQyQTExMC8GA1UEBRMoMzU0RTMyQjlERTBFNTY5QTE5NTFBOTdCOTMyMDE5RjY4 OEEzNTBBQzAeFw0yNTEyMDYyMzM3MzZaFw0yNTEyMTMyMzM3MzZaMBgxFjAUBgNV BAMTDTY5MzRiZTQwLTRlMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqNWtXxYvq3s2LFaU9/9Syh6PmpNFoFe9Ca4cgdRgpvjVEFXK4ENcBeMNOH99N IMQcCoCdzFWdgiVbGjTyMSuzq7Zucmr1jiBoj7hT4DNaa5YtQExYdWK0b5TTPIYb lrQP7EqaJUxYjzhx8OknzKb7zAMUJUsR7p9v8SHfJfnGeUoASUfbmm4OC9FvNLSz 8OUNoUsYq1+a0fh9JCeTSl2L3bPjqu+9JPy+TDNhP9+uztoIJfb5TwrEiITxURns HgLWOXkL+TINLdKownNbai9HVJJRaJyjc7ZZVmzQuWQLtAUcEcC8Rs36VBd1kz9a rKogQz6mVDTWdtr77yhZXSYFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtf1AfNZC VBmGJXny9bsx1lmhgpIwHwYDVR0jBBgwFoAUNU4yud4OVpoZUal7kyAZ9oijUKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NDJBLzU1RUJCODU4NEUz QjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlU0eXVkNE9WcG9aVWFsN2t5QVo5b2lqVUt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NDJBLzU1RUJCODU4NEUzQjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBv WlVhbDdreUFaOW9palVLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEM58nVNR9Gfrt5R7zcfTT1J9zWQqx6HV8ItfKdLuV3ynpLvGuiPSwm MMf1Wup9AQCj5UB48pD2zJWqVATxWfjs9hnlcHIDYaNEr2F3dXNodaHfMbnSEApI YNHMW+ubcVsWYERXW1S3SYYUrqjlurSGEnGhOkXl/EJafCfPMdGSEWeOtDKLGwEp I1XkkD53n3QpWfR0boi5lrMeh5tN2ENqnkqesrE8EAasNwzsHnNLuGBiriVc4dsy hCszI85kGav0UO1P2S+VLLi63PbvRGVFFR32xp0lKXod7cPk5OZbhVRM/+NV9fh2 u6NvRHTjDVy661HD7Fdt2+lkow93L68= -----END CERTIFICATE-----Generated at Sun Dec 7 04:19:42 2025 by rpki-client