This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: IXNs7Ze+f/uuRCs4Ey3qlcyB/yJ/cNNtn6LcVrSShIQ= Subject key identifier: 65:AC:9A:86:92:79:E0:9A:5B:58:8B:F9:22:E4:EC:E6:18:30:23:73 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1E26 Signing time: Thu 04 Dec 2025 15:51:27 +0000 Manifest this update: Thu 04 Dec 2025 15:51:26 +0000 Manifest next update: Thu 11 Dec 2025 15:51:26 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: odYu6ds6hNqTy3sPjoIKKMVQ9eD9/jpYOfApWVxuAjg=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7732 (0x1e34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Dec 4 15:51:26 2025 GMT Not After : Dec 11 15:51:26 2025 GMT Subject: CN=6931adff-b969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:fc:1a:3c:5d:4a:af:55:4a:65:10:f1:59: 26:01:42:d2:c1:a8:57:76:53:32:80:cf:9e:8e:61: c2:39:e2:2c:90:a7:37:29:9d:91:10:45:55:65:19: 1b:66:3c:b7:77:87:57:41:71:f3:89:e9:9b:00:cf: e1:e0:1c:5f:6d:4c:bb:5b:38:27:62:b6:a5:ba:b0: 05:75:a2:19:11:9f:1e:c3:a1:81:8f:12:47:9a:51: ce:cb:35:72:eb:42:69:a6:56:da:9c:0f:84:8f:1e: 27:6c:eb:77:37:23:4a:4b:6c:2a:b4:62:a9:b6:ca: c0:57:5f:b7:99:9b:1a:7d:c7:af:4c:2c:6e:fd:97: e7:2c:54:ec:92:2e:8f:d4:44:3d:0f:b4:4e:57:e2: 96:81:ef:5c:04:8d:c4:40:bb:fa:e2:a7:1b:2b:72: c6:01:e3:65:28:54:37:23:c9:4b:93:df:d2:92:8e: f1:1f:14:74:f8:c7:7d:1b:f3:b1:3f:01:c5:5b:fa: 8f:20:36:f5:66:21:82:5d:11:50:78:a1:dd:c2:2a: ba:3e:6f:69:de:68:22:65:d4:2f:c2:fc:b0:4b:29: fa:38:25:ef:8a:98:7e:98:be:b1:6f:d1:c8:45:2f: 27:cb:45:1e:3a:4e:78:33:08:90:e7:bb:65:ce:eb: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AC:9A:86:92:79:E0:9A:5B:58:8B:F9:22:E4:EC:E6:18:30:23:73 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:db:24:c9:34:f8:e1:d7:c5:15:2f:e4:20:50:dd:21:cd:2a: dd:cc:04:48:e2:21:8d:a6:72:95:50:a1:48:76:b0:7a:90:63: 80:9a:d7:69:5f:a9:95:9b:29:26:3a:89:f8:65:1e:f0:d5:c6: e2:cd:18:01:6c:11:55:1b:d0:87:e1:e9:1e:ba:a9:c5:38:fd: 91:10:83:0e:ec:d3:c2:de:de:e5:f9:7c:7d:a1:64:24:84:05: e8:8f:73:ab:9c:a8:5b:90:24:97:da:91:59:08:8d:25:f2:1e: 36:b7:8b:4a:e1:1f:58:0e:7b:03:18:be:b8:89:3d:45:24:ab: e8:77:4a:53:7f:90:e1:04:35:47:a6:12:4c:b8:8f:7a:2d:bf: 8b:d9:a3:ec:15:77:a4:29:0e:59:03:56:a6:08:f1:3f:56:b8: 37:f4:4c:51:d3:08:01:37:8a:75:46:53:14:48:85:4d:ae:52: 97:cb:76:49:7b:b1:31:ac:5a:9d:7a:61:63:56:d0:a9:a5:1c: 26:18:12:5e:aa:ae:6f:94:00:61:31:32:26:d2:6b:2f:98:3a: ba:cd:c5:72:5a:0b:ba:b5:4f:a7:9f:8b:8a:d4:59:f6:6c:66: 45:30:8d:7a:c9:65:19:3e:c7:14:8d:00:29:36:4b:bf:13:fa: 57:ba:1e:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUxMjA0MTU1MTI2WhcNMjUxMjExMTU1MTI2WjAYMRYwFAYD VQQDEw02OTMxYWRmZi1iOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV78GjxdSq9VSmUQ8VkmAULSwahXdlMygM+ejmHCOeIskKc3KZ2REEVVZRkb Zjy3d4dXQXHziembAM/h4BxfbUy7WzgnYralurAFdaIZEZ8ew6GBjxJHmlHOyzVy 60JpplbanA+Ejx4nbOt3NyNKS2wqtGKptsrAV1+3mZsafcevTCxu/ZfnLFTski6P 1EQ9D7ROV+KWge9cBI3EQLv64qcbK3LGAeNlKFQ3I8lLk9/Sko7xHxR0+Md9G/Ox PwHFW/qPIDb1ZiGCXRFQeKHdwiq6Pm9p3mgiZdQvwvywSyn6OCXviph+mL6xb9HI RS8ny0UeOk54MwiQ57tlzus2lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWsmoaS eeCaW1iL+SLk7OYYMCNzMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa2yTJNPjh18UVL+QgUN0hzSrdzARI4iGNpnKVUKFIdrB6kGOAmtdp X6mVmykmOon4ZR7w1cbizRgBbBFVG9CH4ekeuqnFOP2REIMO7NPC3t7l+Xx9oWQk hAXoj3OrnKhbkCSX2pFZCI0l8h42t4tK4R9YDnsDGL64iT1FJKvod0pTf5DhBDVH phJMuI96Lb+L2aPsFXekKQ5ZA1amCPE/Vrg39ExR0wgBN4p1RlMUSIVNrlKXy3ZJ e7ExrFqdemFjVtCppRwmGBJeqq5vlABhMTIm0msvmDq6zcVyWgu6tU+nn4uK1Fn2 bGZFMI16yWUZPscUjQApNku/E/pXuh6S -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:32 2025 by rpki-client