This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft File: NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json) Hash identifier: M9Du4BAmjxI/4Drd1V0px4Oes/55Iq0IaWDHqXEZkTU= Subject key identifier: 96:AD:FA:05:DD:D1:48:A0:96:70:48:04:BE:38:1B:91:FD:A4:57:AD Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B Certificate issuer: /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft Manifest number: 04 Signing time: Fri 05 Dec 2025 05:57:02 +0000 Manifest this update: Fri 05 Dec 2025 05:57:01 +0000 Manifest next update: Fri 12 Dec 2025 05:57:01 +0000 Files and hashes: 1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: 5mwp7LA/krrm6/l+t1oOZoLZMx4NaTJ96lDhyvJhA2A=) 2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: 2Lc1FIKsjB7NXZkrDBswLhzcT+KlGRsME98+/KK0zhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Validity Not Before: Dec 5 05:57:01 2025 GMT Not After : Dec 12 05:57:01 2025 GMT Subject: CN=6932742d-efd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:f1:6a:6f:9c:07:4d:27:ac:0a:74:35:8e: 81:ca:d0:31:68:95:34:79:4f:ed:09:ee:af:ab:de: d0:f3:ef:5a:75:3d:ab:9f:d5:71:fb:01:15:a8:8a: 52:65:88:01:38:be:c7:88:42:2a:58:95:be:5b:84: d6:f4:cf:93:b4:de:44:a3:79:29:39:3f:74:17:6b: 50:57:d5:78:d6:48:96:69:9b:a7:ff:40:be:a6:2f: 7c:58:94:05:d0:31:45:68:6f:35:51:83:44:36:50: 25:c9:5a:6f:59:d0:f8:d3:c2:53:4c:78:32:4b:f6: 82:38:89:65:f0:0b:66:e3:e7:8c:a7:f6:2e:27:13: 53:a3:10:81:41:99:cf:f1:79:d3:f2:b2:dd:55:64: 69:d4:40:ad:97:49:c5:be:b7:b2:2b:8d:11:7e:1b: 2f:9a:0a:94:84:81:e2:bb:c7:c3:c0:9d:dd:5a:d6: e2:c6:10:54:4c:b3:a3:1b:b3:e4:4e:90:40:52:e5: 24:32:67:a4:fb:3a:d3:cc:55:fd:58:f1:f0:36:69: 4c:ca:3a:85:58:79:81:81:6d:52:b8:ad:14:1d:43: c1:4c:52:aa:06:d2:34:89:36:c0:49:e6:77:bc:c3: 3f:cd:f2:ce:46:ce:21:fa:91:be:cf:7c:cb:f8:70: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:FA:05:DD:D1:48:A0:96:70:48:04:BE:38:1B:91:FD:A4:57:AD X509v3 Authority Key Identifier: keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:aa:eb:84:96:74:16:4a:fd:df:f9:5d:29:ae:31:22:eb:fe: d0:af:36:07:44:41:16:e8:8f:1c:10:78:5a:ec:34:e0:22:77: ff:f8:7d:5e:31:ba:cb:23:4a:8d:f2:e7:ac:96:54:60:c2:d8: fb:39:23:e7:fc:ca:20:19:41:db:d8:ea:c1:90:82:d3:13:a3: ea:f3:c8:d5:e5:a4:dc:d2:1e:d4:ae:bb:2e:dd:84:97:f9:a6: 23:e0:f7:4d:e9:6f:b7:b9:fe:f9:48:65:8e:b7:62:1b:bd:50: 3c:1a:d0:f4:8d:0d:a6:3b:38:c3:91:6d:7f:87:a8:0a:ab:68: e8:b6:9f:c4:dc:3e:90:e2:aa:ad:e4:0e:82:69:d3:1d:46:46: 29:6a:ff:d0:d6:9c:3d:df:ae:0e:94:60:b0:51:4f:f7:a6:32: c3:87:47:13:bb:1a:ca:6a:94:76:2e:a6:7b:e9:f9:53:2d:e5: 9f:16:18:b5:5b:1a:4e:5b:06:e4:20:88:64:3c:22:b7:e5:89: af:c1:bc:97:7a:b1:d2:7b:3b:91:15:b6:80:c5:7d:73:3e:70: 97:f5:f7:f2:b7:57:0b:1f:7c:f4:fe:b5:07:ee:ac:d6:14:fb: f7:08:b3:63:18:76:37:76:38:21:0d:e8:41:ee:f9:a1:56:ac: c8:8f:d6:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwMTExMC8GA1UEBRMoMzQ4QjU0Q0ZGNzk5NjVFMjFCMkRCQUI5OUYyMTAxRTMx QTU2MEU5QjAeFw0yNTEyMDUwNTU3MDFaFw0yNTEyMTIwNTU3MDFaMBgxFjAUBgNV BAMTDTY5MzI3NDJkLWVmZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7svFqb5wHTSesCnQ1joHK0DFolTR5T+0J7q+r3tDz71p1Pauf1XH7ARWoilJl iAE4vseIQipYlb5bhNb0z5O03kSjeSk5P3QXa1BX1XjWSJZpm6f/QL6mL3xYlAXQ MUVobzVRg0Q2UCXJWm9Z0PjTwlNMeDJL9oI4iWXwC2bj54yn9i4nE1OjEIFBmc/x edPyst1VZGnUQK2XScW+t7IrjRF+Gy+aCpSEgeK7x8PAnd1a1uLGEFRMs6Mbs+RO kEBS5SQyZ6T7OtPMVf1Y8fA2aUzKOoVYeYGBbVK4rRQdQ8FMUqoG0jSJNsBJ5ne8 wz/N8s5GziH6kb7PfMv4cB6TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlq36Bd3R SKCWcEgEvjgbkf2kV60wHwYDVR0jBBgwFoAUNItUz/eZZeIbLbq5nyEB4xpWDpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTAxLzQ2OTI3RjE0Q0Y1 OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJYkxicTVueUVCNHhwV0Rw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkl0VXpfZVpaZUliTGJxNW55RUI0eHBXRHBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 RTAxLzQ2OTI3RjE0Q0Y1OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJ YkxicTVueUVCNHhwV0Rwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2q64SWdBZK/d/5XSmuMSLr/tCvNgdEQRbojxwQeFrsNOAid//4fV4x ussjSo3y56yWVGDC2Ps5I+f8yiAZQdvY6sGQgtMTo+rzyNXlpNzSHtSuuy7dhJf5 piPg903pb7e5/vlIZY63Yhu9UDwa0PSNDaY7OMORbX+HqAqraOi2n8TcPpDiqq3k DoJp0x1GRilq/9DWnD3frg6UYLBRT/emMsOHRxO7GspqlHYupnvp+VMt5Z8WGLVb Gk5bBuQgiGQ8Irflia/BvJd6sdJ7O5EVtoDFfXM+cJf19/K3VwsffPT+tQfurNYU +/cIs2MYdjd2OCEN6EHu+aFWrMiP1uQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:25:10 2025 by rpki-client