This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: pJDFF3NKkIxqM1P2vANMAogXezUkWbU6zj3wWNJYRDk= Subject key identifier: CD:D5:5D:49:A9:54:4C:B8:3D:E1:53:D1:4D:F8:B5:A6:E1:0C:91:3D Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0ABE Signing time: Sat 06 Dec 2025 18:43:07 +0000 Manifest this update: Sat 06 Dec 2025 18:43:06 +0000 Manifest next update: Sat 13 Dec 2025 18:43:06 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: LD2zgMjinAyjG9jUiVCrHLs/5IMCizH1SkYuSKGG+tQ=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Dec 6 18:43:06 2025 GMT Not After : Dec 13 18:43:06 2025 GMT Subject: CN=6934793a-057d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:c7:d1:d4:77:77:24:1c:2c:0c:02:6a:b6: 9e:dc:1c:d8:7d:c6:6d:57:ac:e0:2c:56:b4:2b:d8: 5a:c1:b8:8f:ff:e7:38:7f:8f:0c:86:ef:73:26:a3: 23:cc:b2:7d:32:e0:a6:ad:9b:97:e7:98:b9:82:32: 39:52:73:be:50:3d:b7:23:44:e1:27:70:8a:f6:85: 17:f8:e4:d7:b0:ca:38:44:89:1e:49:81:10:0d:31: 36:60:88:42:76:53:ff:7d:f0:a0:63:03:01:17:23: 21:d1:b2:02:d5:50:ed:e1:11:0b:f8:b9:bc:4d:d2: bd:9d:45:86:26:5b:37:58:5d:12:80:be:f7:3a:e6: 42:61:b3:f5:b5:02:c0:57:c8:f0:95:1b:ab:24:ec: 6d:5c:ee:55:cf:37:96:6d:c3:36:ef:4a:13:00:1a: 1b:a9:e1:46:6c:5a:4e:24:da:60:14:f1:08:1c:85: ab:d2:84:e7:df:bb:84:93:a5:70:d3:49:84:05:dd: 74:f6:da:51:8e:14:9b:e7:ee:a5:b8:60:d6:e0:66: fe:4f:c5:fe:6e:d1:09:81:48:32:d3:3a:59:21:2e: c5:21:89:66:4a:7a:61:68:20:d2:7e:f7:c2:25:59: ee:f6:45:b2:91:91:b7:d7:6d:18:20:4c:74:13:1f: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D5:5D:49:A9:54:4C:B8:3D:E1:53:D1:4D:F8:B5:A6:E1:0C:91:3D X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:0d:8d:13:a0:6f:3a:fe:73:2f:1d:65:2e:70:34:42:5b:b4: 34:7f:fb:37:f6:27:f4:37:a2:f3:29:6a:5d:0b:bc:1d:07:a6: ca:65:7a:8a:20:95:ac:a7:4d:7d:ba:8d:d3:27:da:70:2d:a3: 6f:b4:db:aa:03:9c:93:9b:21:06:a3:8e:4b:5f:0c:3b:39:02: 9a:a5:ef:58:e2:54:c5:b5:50:61:e0:67:f2:91:95:34:0f:e7: c0:f8:22:7d:77:d5:ff:98:df:e4:02:f6:5d:58:23:5e:37:ce: c1:68:eb:b4:41:8a:8b:95:c9:52:79:3d:fc:23:56:e5:40:1d: 6a:e6:a5:90:b1:a3:ca:4b:fe:9e:33:22:2a:e7:ea:45:2d:8d: a8:6b:09:ad:22:60:8d:45:13:26:e4:85:41:a0:c2:0b:00:a4: df:3f:61:85:c0:98:d8:1d:51:5a:2e:27:21:18:5a:6f:48:0d: 10:c7:3c:93:04:50:a7:e9:de:2d:55:78:fb:d2:22:3b:93:a5: 3f:93:7a:25:0a:51:8a:de:d9:b5:b9:e2:f7:68:96:ba:2a:c7: 35:7d:4f:a1:33:91:77:37:2f:2a:5b:79:51:68:f2:3c:10:8d: ce:07:57:0d:85:64:e9:b4:b5:12:c7:12:64:46:63:6b:32:18: d5:7a:f1:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUxMjA2MTg0MzA2WhcNMjUxMjEzMTg0MzA2WjAYMRYwFAYD VQQDEw02OTM0NzkzYS0wNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA117H0dR3dyQcLAwCarae3BzYfcZtV6zgLFa0K9hawbiP/+c4f48Mhu9zJqMj zLJ9MuCmrZuX55i5gjI5UnO+UD23I0ThJ3CK9oUX+OTXsMo4RIkeSYEQDTE2YIhC dlP/ffCgYwMBFyMh0bIC1VDt4REL+Lm8TdK9nUWGJls3WF0SgL73OuZCYbP1tQLA V8jwlRurJOxtXO5VzzeWbcM270oTABobqeFGbFpOJNpgFPEIHIWr0oTn37uEk6Vw 00mEBd109tpRjhSb5+6luGDW4Gb+T8X+btEJgUgy0zpZIS7FIYlmSnphaCDSfvfC JVnu9kWykZG3120YIEx0Ex+FUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3VXUmp VEy4PeFT0U34tabhDJE9MB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGDY0ToG86/nMvHWUucDRCW7Q0f/s39if0N6LzKWpdC7wdB6bKZXqK IJWsp019uo3TJ9pwLaNvtNuqA5yTmyEGo45LXww7OQKape9Y4lTFtVBh4GfykZU0 D+fA+CJ9d9X/mN/kAvZdWCNeN87BaOu0QYqLlclSeT38I1blQB1q5qWQsaPKS/6e MyIq5+pFLY2oawmtImCNRRMm5IVBoMILAKTfP2GFwJjYHVFaLichGFpvSA0QxzyT BFCn6d4tVXj70iI7k6U/k3olClGK3tm1ueL3aJa6Ksc1fU+hM5F3Ny8qW3lRaPI8 EI3OB1cNhWTptLUSxxJkRmNrMhjVevGt -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:26 2025 by rpki-client