This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: 58t0KVpMz96gmYqWBKDnxD1ZEsAZRk3k5tO0qbwLIUw= Subject key identifier: FE:D0:BE:91:39:51:21:74:7E:AF:6F:D1:A2:05:E8:DD:5E:F3:39:A7 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: 9D Signing time: Fri 05 Dec 2025 04:20:02 +0000 Manifest this update: Fri 05 Dec 2025 04:20:01 +0000 Manifest next update: Fri 12 Dec 2025 04:20:01 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: d7rhkH77b90M96srKcF6q9fFtKoMUvgMxEiDY0n0tyo=) 2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: wy+E0shlE0SgKblGT9mkubbsdEgdl8xDfG6j2pKg5CM=) 3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: rUHAonKHyKGTHsXqPvAHU77iis+UDkigScpxL6u+DWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Dec 5 04:20:01 2025 GMT Not After : Dec 12 04:20:01 2025 GMT Subject: CN=69325d72-6f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:8e:58:28:30:a5:cb:d8:f7:61:f6:e2:fd: 36:19:9d:1a:7e:4c:dd:23:6b:4f:b8:bd:aa:aa:5a: ef:8d:f2:00:8e:ea:47:8f:30:ef:69:60:33:61:2e: 82:f4:00:b7:25:97:81:38:00:95:40:d4:75:c6:56: f3:f8:f9:63:c1:dc:a1:63:f7:a0:40:6c:8c:0b:37: 97:b5:c4:22:72:a4:9c:0d:69:26:3d:78:84:20:08: 3d:bb:58:40:0d:ad:c1:0e:d0:c0:cf:00:0d:4b:24: 2b:d4:15:27:ba:52:dc:26:1f:58:e5:5b:8c:72:4d: 56:d6:7f:8b:16:13:3b:32:96:84:41:ea:78:cd:bd: 11:54:29:b8:c7:9d:06:b1:52:ab:2e:7b:a6:6d:37: 40:16:28:94:bc:70:4a:fd:e2:0e:de:e3:28:f4:76: c0:a5:a4:18:aa:db:37:af:af:31:e3:f7:5c:2b:8f: 3f:82:4f:93:af:90:0f:a4:61:fd:c8:99:8d:be:60: 90:1d:c2:be:6a:54:ac:6d:a6:5e:77:3e:21:6f:ba: 72:c3:e6:99:e6:21:0c:47:5a:6d:74:ec:2e:9a:97: b5:5f:ce:23:51:3d:6d:a0:f0:c4:1f:f1:0c:16:d4: 77:2d:a3:52:88:dc:97:9c:c3:09:04:97:f3:36:cf: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D0:BE:91:39:51:21:74:7E:AF:6F:D1:A2:05:E8:DD:5E:F3:39:A7 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:77:5f:0d:ac:03:8c:a2:d3:e1:78:ce:b1:3a:1a:e3:3f:d5: 06:23:b9:ab:07:23:80:24:a7:9f:8d:5c:fe:7b:d8:3e:0b:85: c2:7b:b2:a6:b4:b9:19:62:f6:09:71:64:3a:85:89:42:66:59: 56:3a:56:98:32:84:e2:fb:a1:7a:4f:3f:d5:fb:91:37:b8:0c: 02:2e:ba:c7:21:50:15:dc:08:c3:2f:6f:05:d8:af:c8:9c:24: 58:63:a8:e1:4d:f3:a2:a7:ea:e3:5b:21:b6:7b:ed:b2:fc:81: 1a:b4:08:27:09:38:10:fa:27:fd:65:7b:79:0f:cd:2e:3e:85: 83:da:da:57:d9:0c:5c:f0:17:12:40:16:48:a1:91:19:7d:f6: be:41:22:d2:50:9f:37:ef:a1:cb:b4:19:49:c7:51:b4:fb:27: ae:6c:55:1a:c2:02:59:15:64:88:b3:ff:ed:75:c8:92:f6:0b: 98:5e:53:bb:56:77:dd:d9:c1:cb:41:ec:be:80:4c:b0:ed:88: 55:84:7a:62:f7:0a:d0:86:ff:9f:74:6b:7e:4b:60:c3:3f:fa: 94:21:79:9b:a8:29:f8:f9:79:28:05:f4:ca:3d:ed:14:33:7e: 60:00:89:a9:4b:2c:6b:29:76:62:4e:53:9f:a4:93:85:72:55: 5a:83:3c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2 ODZGMjExNzcwHhcNMjUxMjA1MDQyMDAxWhcNMjUxMjEyMDQyMDAxWjAYMRYwFAYD VQQDEw02OTMyNWQ3Mi02ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR6OWCgwpcvY92H24v02GZ0afkzdI2tPuL2qqlrvjfIAjupHjzDvaWAzYS6C 9AC3JZeBOACVQNR1xlbz+PljwdyhY/egQGyMCzeXtcQicqScDWkmPXiEIAg9u1hA Da3BDtDAzwANSyQr1BUnulLcJh9Y5VuMck1W1n+LFhM7MpaEQep4zb0RVCm4x50G sVKrLnumbTdAFiiUvHBK/eIO3uMo9HbApaQYqts3r68x4/dcK48/gk+Tr5APpGH9 yJmNvmCQHcK+alSsbaZedz4hb7pyw+aZ5iEMR1ptdOwumpe1X84jUT1toPDEH/EM FtR3LaNSiNyXnMMJBJfzNs9XIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7QvpE5 USF0fq9v0aIF6N1e8zmnMB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0 MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY R2F0eC1pQTdrdXhvYnlFWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkd18NrAOMotPheM6xOhrjP9UGI7mrByOAJKefjVz+e9g+C4XCe7Km tLkZYvYJcWQ6hYlCZllWOlaYMoTi+6F6Tz/V+5E3uAwCLrrHIVAV3AjDL28F2K/I nCRYY6jhTfOip+rjWyG2e+2y/IEatAgnCTgQ+if9ZXt5D80uPoWD2tpX2Qxc8BcS QBZIoZEZffa+QSLSUJ8376HLtBlJx1G0+yeubFUawgJZFWSIs//tdciS9guYXlO7 Vnfd2cHLQey+gEyw7YhVhHpi9wrQhv+fdGt+S2DDP/qUIXmbqCn4+XkoBfTKPe0U M35gAImpSyxrKXZiTlOfpJOFclVagzxf -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:26 2025 by rpki-client