This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: KJyuvxCpBk6jBajj6ZhVmcoj6goSI7BKGJ2yMFALZmk= Subject key identifier: B8:78:1D:67:19:D5:E6:9D:E7:95:12:FB:DF:08:E6:4D:F2:C9:14:F6 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: A5 Signing time: Sun 21 Dec 2025 05:21:57 +0000 Manifest this update: Sun 21 Dec 2025 05:21:56 +0000 Manifest next update: Sun 28 Dec 2025 05:21:56 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: qZ2xUuNmXOpbf3K14/nwqixHXTJIgw93BrUj4G1uTyw=) 2: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: rUHAonKHyKGTHsXqPvAHU77iis+UDkigScpxL6u+DWI=) 3: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: wy+E0shlE0SgKblGT9mkubbsdEgdl8xDfG6j2pKg5CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Dec 21 05:21:56 2025 GMT Not After : Dec 28 05:21:56 2025 GMT Subject: CN=694783f5-ddc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8f:d5:a8:e8:f9:74:8e:2a:29:2e:1f:81:8f: f4:2b:d4:04:60:e3:86:e9:ca:d0:53:99:82:d3:ac: 07:4b:69:3e:73:4f:7e:3f:31:6b:3d:77:ea:51:de: 61:c3:4d:d1:6f:e7:d7:74:4f:de:b8:b2:76:40:af: ae:ac:b0:03:0d:c0:f2:15:1d:cf:50:e3:a1:a7:f2: e4:9b:40:52:72:13:4c:70:c1:0f:e9:45:9a:f9:60: 8d:62:23:67:e5:0b:d6:49:d7:0d:e3:19:1e:2b:ac: 58:31:24:a4:c4:1e:4f:f9:3d:b0:7a:94:af:6f:83: ea:98:4b:73:3a:d5:7c:68:f9:2d:d5:85:8f:bc:17: 37:f2:7a:be:f1:9b:83:7f:33:9e:c4:2f:1e:5f:57: 0e:8f:a4:f3:58:61:84:ea:10:77:19:c1:6b:7c:1b: 7a:a1:e7:3f:80:9e:ec:19:bc:bb:64:9c:e3:ec:10: 37:84:7d:2e:f4:9b:8b:73:4f:e6:d1:fd:54:86:3d: 1c:d4:34:87:f6:18:27:1f:99:c4:24:5e:56:6f:70: 61:5a:6a:b3:56:85:cf:21:6d:5d:5e:9a:0d:0f:4a: fe:45:84:d0:e7:c7:bb:0c:9e:de:d7:8b:86:7c:11: 7c:16:14:69:94:51:8f:8d:88:e3:9f:2d:4f:cd:21: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:78:1D:67:19:D5:E6:9D:E7:95:12:FB:DF:08:E6:4D:F2:C9:14:F6 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:82:8e:cb:e6:89:8b:92:dc:d0:33:97:39:97:6f:33:7c:6b: de:bb:62:3e:d6:b6:01:4b:3b:c1:37:75:0a:92:86:b3:a8:e7: 5f:16:a9:94:dd:a4:08:8d:b5:f2:05:e8:18:69:0d:66:ae:7c: ba:ce:be:8b:87:18:5f:72:6e:4a:4c:20:90:8e:52:6b:60:5d: 02:d2:50:a3:d8:1e:c6:c4:34:07:5d:7b:a1:9c:94:41:fd:60: ba:fe:9b:e4:e0:7f:af:f5:9a:13:c7:dd:fd:da:4b:d2:80:65: 79:3a:f8:b8:54:5e:b5:f8:9e:a4:ed:4b:a5:8e:02:f5:62:20: c0:d4:19:22:d2:5b:5c:fa:8c:6a:5a:57:ae:13:cf:70:4a:5c: b1:c7:4c:db:33:68:90:94:35:9e:f3:2c:e1:62:f6:c9:5d:95: 2b:d6:2d:60:7f:5c:a6:69:36:26:c5:4e:c3:ae:ab:49:ec:21: 90:14:5b:36:f4:e9:e2:a0:4e:6f:91:e6:0d:95:87:4c:ab:9b: fc:4f:e6:75:bd:f6:3f:ce:66:11:5d:3e:95:1e:f4:23:15:88: 34:7b:32:65:a6:97:f3:2d:b1:a0:0a:d1:e7:c8:4d:25:8d:f0: f8:a9:40:47:1b:e3:c4:f6:c9:12:fa:f9:fc:a0:90:10:2e:a7: 81:d2:2b:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2 ODZGMjExNzcwHhcNMjUxMjIxMDUyMTU2WhcNMjUxMjI4MDUyMTU2WjAYMRYwFAYD VQQDDA02OTQ3ODNmNS1kZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94/VqOj5dI4qKS4fgY/0K9QEYOOG6crQU5mC06wHS2k+c09+PzFrPXfqUd5h w03Rb+fXdE/euLJ2QK+urLADDcDyFR3PUOOhp/Lkm0BSchNMcMEP6UWa+WCNYiNn 5QvWSdcN4xkeK6xYMSSkxB5P+T2wepSvb4PqmEtzOtV8aPkt1YWPvBc38nq+8ZuD fzOexC8eX1cOj6TzWGGE6hB3GcFrfBt6oec/gJ7sGby7ZJzj7BA3hH0u9JuLc0/m 0f1Uhj0c1DSH9hgnH5nEJF5Wb3BhWmqzVoXPIW1dXpoND0r+RYTQ58e7DJ7e14uG fBF8FhRplFGPjYjjny1PzSEv2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh4HWcZ 1ead55US+98I5k3yyRT2MB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0 MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY R2F0eC1pQTdrdXhvYnlFWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugo7L5omLktzQM5c5l28zfGveu2I+1rYBSzvBN3UKkoazqOdfFqmU 3aQIjbXyBegYaQ1mrny6zr6Lhxhfcm5KTCCQjlJrYF0C0lCj2B7GxDQHXXuhnJRB /WC6/pvk4H+v9ZoTx9392kvSgGV5Ovi4VF61+J6k7UuljgL1YiDA1Bki0ltc+oxq WleuE89wSlyxx0zbM2iQlDWe8yzhYvbJXZUr1i1gf1ymaTYmxU7DrqtJ7CGQFFs2 9OnioE5vkeYNlYdMq5v8T+Z1vfY/zmYRXT6VHvQjFYg0ezJlppfzLbGgCtHnyE0l jfD4qUBHG+PE9skS+vn8oJAQLqeB0ivD -----END CERTIFICATE-----Generated at Sun Dec 21 21:51:51 2025 by rpki-client