This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: Pa1CHT1fe8CtH/jQ7tuDxlR7ZaaXmVVr6enO4iGMaIs= Subject key identifier: F4:54:0E:E0:59:68:64:23:9A:FC:C9:AB:CB:45:B1:AC:0C:F2:DB:A3 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E4D Signing time: Sat 06 Dec 2025 15:46:24 +0000 Manifest this update: Sat 06 Dec 2025 15:46:23 +0000 Manifest next update: Sat 13 Dec 2025 15:46:23 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: 8JqIXxYliz2G4m+3hz3zR3kAMDG5GG7kKgAMngO9QpE=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7772 (0x1e5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Dec 6 15:46:23 2025 GMT Not After : Dec 13 15:46:23 2025 GMT Subject: CN=69344fd0-19b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:26:02:19:2a:85:14:fc:93:42:52:c8:3a: 79:00:20:7e:4a:f2:91:87:ae:21:cf:6d:56:69:c1: f0:d2:7a:73:9f:31:75:dc:9b:17:5c:77:d9:c4:96: ac:1c:50:48:42:ad:59:3e:ef:bc:0a:ba:ff:3a:10: 44:5c:dd:c6:5c:8d:ff:bf:3a:25:25:41:0c:5e:b0: 60:52:52:68:d6:04:1e:48:47:0b:59:a3:4f:a9:c8: 49:bc:7d:bd:dc:bb:01:9c:96:e1:d7:53:ae:c6:93: c3:21:92:b4:e4:ba:0a:9d:2b:f6:5f:92:40:30:a4: bf:14:87:83:cb:b0:29:54:f9:49:38:22:8c:17:35: d1:e1:cd:8d:0c:af:91:0e:4f:7e:ea:7e:3c:09:92: 1c:6b:e3:14:18:c1:ad:02:8b:fa:27:03:1b:8b:df: 89:a0:8e:b4:30:79:85:65:57:91:b1:59:b8:e2:a3: 60:f0:0b:1b:53:84:86:fa:7f:51:a0:e7:c8:c6:8c: 78:60:94:62:cd:48:35:0b:78:5c:38:1b:ba:94:81: 9f:37:d3:ed:93:17:cc:cc:c7:6c:5d:b5:55:39:5b: c0:3c:f4:c3:73:d2:c5:4c:b8:7b:7b:10:76:45:e0: 18:75:4e:28:78:f1:d8:1f:52:e5:dd:40:09:31:05: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:54:0E:E0:59:68:64:23:9A:FC:C9:AB:CB:45:B1:AC:0C:F2:DB:A3 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0f:3c:e1:9a:12:4d:b0:98:38:ea:34:e0:42:2a:c2:0a:29: 9e:a7:21:a5:52:82:03:ae:f4:2a:23:6a:f3:1e:33:90:86:3e: a3:25:22:39:6b:2d:fa:d9:c6:0c:b9:7e:32:32:33:2e:61:fa: c0:46:fc:f4:79:9d:25:a7:3c:4f:ee:06:14:17:c7:f3:56:39: ce:ee:cf:31:0f:af:e4:72:0c:ff:3a:25:0a:0d:a4:20:55:9b: d7:e9:25:85:7e:3f:85:24:eb:ab:a6:b6:77:09:bf:33:0f:0b: fd:71:f6:c5:a6:43:8d:80:22:53:a5:9f:37:01:ce:4b:f1:9b: 61:18:4e:e9:52:a3:0f:fc:b9:5c:e5:9d:81:54:29:5c:2f:31: 1b:05:9e:81:8a:ec:df:5e:8e:a9:96:1c:8a:30:f8:e6:3c:ce: c8:f2:25:8e:c7:5c:e6:cf:a9:2e:58:c7:3c:8a:ee:0b:97:b9: 4b:e3:18:27:80:29:a8:d6:ce:91:4f:ee:56:3f:bf:c0:6d:3e: 66:d0:5b:9b:37:7f:eb:46:fd:40:bc:08:6c:03:1c:ce:72:69: 26:18:e4:3f:5a:56:1d:f5:1c:08:87:27:61:6c:29:f4:e6:87: 3b:f4:a7:2a:e3:1d:e4:ad:5b:58:96:10:4a:32:84:1b:00:71: e1:16:6c:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUxMjA2MTU0NjIzWhcNMjUxMjEzMTU0NjIzWjAYMRYwFAYD VQQDEw02OTM0NGZkMC0xOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjImAhkqhRT8k0JSyDp5ACB+SvKRh64hz21WacHw0npznzF13JsXXHfZxJas HFBIQq1ZPu+8Crr/OhBEXN3GXI3/vzolJUEMXrBgUlJo1gQeSEcLWaNPqchJvH29 3LsBnJbh11OuxpPDIZK05LoKnSv2X5JAMKS/FIeDy7ApVPlJOCKMFzXR4c2NDK+R Dk9+6n48CZIca+MUGMGtAov6JwMbi9+JoI60MHmFZVeRsVm44qNg8AsbU4SG+n9R oOfIxox4YJRizUg1C3hcOBu6lIGfN9PtkxfMzMdsXbVVOVvAPPTDc9LFTLh7exB2 ReAYdU4oePHYH1Ll3UAJMQVteQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRUDuBZ aGQjmvzJq8tFsawM8tujMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnDzzhmhJNsJg46jTgQirCCimepyGlUoIDrvQqI2rzHjOQhj6jJSI5 ay362cYMuX4yMjMuYfrARvz0eZ0lpzxP7gYUF8fzVjnO7s8xD6/kcgz/OiUKDaQg VZvX6SWFfj+FJOurprZ3Cb8zDwv9cfbFpkONgCJTpZ83Ac5L8ZthGE7pUqMP/Llc 5Z2BVClcLzEbBZ6BiuzfXo6plhyKMPjmPM7I8iWOx1zmz6kuWMc8iu4Ll7lL4xgn gCmo1s6RT+5WP7/AbT5m0FubN3/rRv1AvAhsAxzOcmkmGOQ/WlYd9RwIhydhbCn0 5oc79Kcq4x3krVtYlhBKMoQbAHHhFmwS -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:25 2025 by rpki-client