This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: tnkrcVZsjbrI+V9S0RKzBzYTslYePnz/85mHFRm+uvQ= Subject key identifier: 08:3D:51:FD:FE:CA:A3:4A:4F:17:B2:64:33:55:F3:39:E5:AB:2D:6A Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: DA Signing time: Fri 05 Dec 2025 03:36:26 +0000 Manifest this update: Fri 05 Dec 2025 03:36:25 +0000 Manifest next update: Fri 12 Dec 2025 03:36:25 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: Nyq0hVao0hBzQUzSGctGcP5bqdqrHwJe9xoAbPcEID4=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: Dec 5 03:36:25 2025 GMT Not After : Dec 12 03:36:25 2025 GMT Subject: CN=6932533a-5d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:ab:6a:e3:1b:9a:da:df:6e:88:bd:d9:a3: 8a:83:cc:d7:3e:05:99:57:64:70:4f:bc:a8:aa:24: d9:cf:f9:af:8a:43:a5:3d:24:94:e3:38:66:98:c9: 61:62:ce:93:43:bd:be:11:39:fe:cb:e4:64:1d:4b: d0:79:1c:e9:c9:0e:5f:2c:2a:42:18:a8:a7:67:e4: 01:37:51:16:3f:49:3d:d8:06:25:b9:64:f9:2e:d7: 2d:66:3d:ce:38:52:d1:a8:46:dd:78:c5:c4:6f:be: 77:bc:47:0a:99:f2:a1:d6:0e:e2:3b:24:17:9e:0d: 03:f2:ec:6e:bb:51:f1:1b:dd:33:13:ab:ea:a8:2a: 28:5e:de:0c:fe:99:9b:c8:ea:00:80:73:69:bb:bc: e6:cb:f4:2c:db:20:dd:5d:3c:df:f1:9b:b6:07:a3: f3:49:87:fb:c7:d2:36:f1:4a:a2:4d:89:ea:88:2c: fb:ee:8b:5a:fa:d0:54:b2:62:11:df:ab:c5:b8:1d: de:d9:e6:7a:c5:e1:b5:09:51:be:d3:7a:46:a2:7a: ac:83:d8:08:d4:c6:39:4f:74:ea:ac:9a:ad:d1:65: 4d:e2:d6:76:0e:0a:09:38:d7:f4:21:c4:76:8e:50: d6:fa:60:b7:bc:ba:62:74:5f:4c:c7:1e:b4:03:40: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3D:51:FD:FE:CA:A3:4A:4F:17:B2:64:33:55:F3:39:E5:AB:2D:6A X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:32:02:54:52:ad:7e:cd:27:bc:91:85:83:98:35:c8:2d:e8: 32:2f:31:40:db:5d:ff:b9:ae:17:96:2c:da:84:65:d3:0b:42: 23:d7:e0:f1:cb:01:d3:50:f5:67:a0:06:b7:72:5b:43:27:d2: 95:41:59:df:3f:ce:3f:13:cc:e0:5c:b6:b7:a2:c1:94:a9:d3: 25:05:ad:cb:f4:9a:61:0c:c6:bf:69:a8:14:2c:94:86:8c:4e: ef:33:b0:44:96:f0:95:55:dd:6b:af:e6:83:71:c4:a6:28:5c: e0:eb:42:e5:8a:1e:67:28:cb:48:22:1d:3e:82:f9:62:fa:15: 02:1a:9e:27:78:fc:61:60:13:d0:a5:3f:d1:a8:60:59:46:23: 1a:cb:24:84:6a:8b:75:68:bf:6e:21:d7:9d:71:cd:ce:c6:04: a0:2f:64:ab:ca:79:18:30:61:e3:71:98:ee:9f:44:81:77:2e: 28:42:b6:0c:9b:f1:63:01:0b:1d:2b:87:3c:f0:02:c3:ef:b2: 04:8b:60:f5:d2:18:b2:dc:f8:f5:c8:1a:76:cc:2b:6a:c4:2f: e8:27:f6:e3:a0:79:81:d3:0f:4e:cd:bd:84:fb:50:4b:d8:48: 56:8b:77:73:be:8c:02:46:19:d8:c1:a2:0f:70:cd:05:84:75: f3:fe:47:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0N0YxMTAvBgNVBAUTKDM2Nzg3OUEwQjg1REQ4MzczNjM3ODgzNzkzRjU1RUVC M0IyMjFEQ0YwHhcNMjUxMjA1MDMzNjI1WhcNMjUxMjEyMDMzNjI1WjAYMRYwFAYD VQQDEw02OTMyNTMzYS01ZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IarauMbmtrfboi92aOKg8zXPgWZV2RwT7yoqiTZz/mvikOlPSSU4zhmmMlh Ys6TQ72+ETn+y+RkHUvQeRzpyQ5fLCpCGKinZ+QBN1EWP0k92AYluWT5LtctZj3O OFLRqEbdeMXEb753vEcKmfKh1g7iOyQXng0D8uxuu1HxG90zE6vqqCooXt4M/pmb yOoAgHNpu7zmy/Qs2yDdXTzf8Zu2B6PzSYf7x9I28UqiTYnqiCz77ota+tBUsmIR 36vFuB3e2eZ6xeG1CVG+03pGonqsg9gI1MY5T3TqrJqt0WVN4tZ2DgoJONf0IcR2 jlDW+mC3vLpidF9Mxx60A0AmjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg9Uf3+ yqNKTxeyZDNV8znlqy1qMB8GA1UdIwQYMBaAFDZ4eaC4Xdg3NjeIN5P1Xus7Ih3P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQ3Ri9DMjFDN0NGNjg2 REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Obmg1b0xoZDJEYzJONGcza19WZTZ6c2lI YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQ3Ri9DMjFDN0NGNjg2REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Obmg1b0xoZDJE YzJONGcza19WZTZ6c2lIYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvMgJUUq1+zSe8kYWDmDXILegyLzFA213/ua4XlizahGXTC0Ij1+Dx ywHTUPVnoAa3cltDJ9KVQVnfP84/E8zgXLa3osGUqdMlBa3L9JphDMa/aagULJSG jE7vM7BElvCVVd1rr+aDccSmKFzg60Llih5nKMtIIh0+gvli+hUCGp4nePxhYBPQ pT/RqGBZRiMayySEaot1aL9uIdedcc3OxgSgL2SrynkYMGHjcZjun0SBdy4oQrYM m/FjAQsdK4c88ALD77IEi2D10hiy3Pj1yBp2zCtqxC/oJ/bjoHmB0w9Ozb2E+1BL 2EhWi3dzvowCRhnYwaIPcM0FhHXz/kf2 -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:03 2025 by rpki-client