This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: Y9QZ/EFXU1MKoG0ZsndWO2SRsYLRuS3CgbwLCOz6VzE= Subject key identifier: B6:88:F8:87:5A:7F:47:55:8F:AD:3D:69:AD:16:3A:44:18:E5:BE:5F Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 0437 Signing time: Sat 06 Dec 2025 22:58:23 +0000 Manifest this update: Sat 06 Dec 2025 22:58:22 +0000 Manifest next update: Sat 13 Dec 2025 22:58:22 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: B2OAM6cTjv+MF6neivbJiL/6AsNumXEgRnxOJFaT1sA=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: 0gOlRThj6WU6Oiu1Uasxby2bhwXyhTicR9aQwl0b5JY=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: q+X83YZL335SyLXeBoGpFgAzoByn2XCMGLkD6Ic10YI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Dec 6 22:58:22 2025 GMT Not After : Dec 13 22:58:22 2025 GMT Subject: CN=6934b50f-a82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:34:94:cf:9f:d7:2c:20:08:23:cb:94:96: 70:40:75:1c:67:da:0f:dc:2e:06:d6:b1:07:c1:ff: bf:04:4f:9f:8e:73:4e:91:5a:dc:8b:ad:df:3e:02: 2b:1f:10:4d:4b:a7:10:16:4d:d4:aa:10:af:60:1f: c1:ad:43:6d:57:82:2b:1c:91:89:1a:53:ee:fd:6e: 9c:53:9a:fa:7f:d1:cf:c9:52:01:4a:d7:d8:97:cb: 40:16:61:ab:83:22:28:4a:1b:53:a2:57:89:10:3a: 80:a9:f7:a1:aa:36:49:86:17:62:95:b8:65:75:72: 24:6f:33:b1:ca:47:79:e0:db:2b:a3:66:87:d2:89: 57:ae:46:0b:5c:c4:15:55:4d:9e:7f:c9:a1:84:ce: ba:d0:53:c3:78:87:c6:01:1a:61:45:d3:57:5f:8f: ea:10:ae:51:d5:77:9f:bf:62:d6:40:62:40:41:ac: f7:23:c6:75:5b:29:a7:f7:03:52:7d:25:9c:60:e7: e4:2c:f4:1a:41:19:82:89:3f:6e:93:49:8a:3e:eb: c4:8e:1a:ec:92:0b:64:7d:ab:0b:b0:50:d8:fa:90: e9:bb:1a:36:54:03:8d:c7:e6:20:4c:d3:ca:2d:ee: f5:8f:07:7f:af:a2:e3:78:92:13:bd:a3:51:5c:85: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:88:F8:87:5A:7F:47:55:8F:AD:3D:69:AD:16:3A:44:18:E5:BE:5F X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:99:23:d7:62:59:a5:9f:4b:a4:a2:9d:a6:de:a3:cd:27:39: c8:f8:b5:ff:dc:93:b9:bd:5a:ae:4e:46:44:a0:0b:32:05:80: 79:6c:72:a3:46:d4:d7:2b:9e:9f:bb:04:72:13:e4:12:e3:df: e3:35:03:64:5f:5f:1e:f7:b7:e1:cd:ae:90:11:17:f7:3d:aa: 80:9a:12:22:7b:69:38:e1:1f:a5:eb:b7:fb:b6:7e:4a:4d:cc: 01:48:66:49:c8:35:f0:64:81:5d:18:e8:2c:7c:6d:b9:9e:4b: 55:23:19:0d:13:67:ef:82:24:6b:f2:17:d4:4e:f7:74:80:17: a8:70:a4:5e:c1:a7:c5:75:70:01:6c:84:02:78:af:2a:01:79: 59:bb:2e:63:18:3c:26:30:d9:7f:4d:ed:ff:25:e9:d8:50:62: 76:c7:c9:71:c5:74:91:00:65:d3:ad:24:c2:c9:bf:7c:3d:d3: cc:4a:c7:cb:8f:d1:83:05:71:f7:f1:be:df:e1:30:a5:09:e2: 68:65:67:c9:bc:59:c0:6b:34:57:76:5c:e7:b6:dc:47:2c:a0: 19:dd:6a:96:7b:53:d9:36:7b:d1:50:2f:f6:78:4a:28:f5:4e: f7:4f:16:44:6e:04:8d:33:1c:3f:48:22:dd:db:47:ad:c1:c9: 73:8e:63:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUxMjA2MjI1ODIyWhcNMjUxMjEzMjI1ODIyWjAYMRYwFAYD VQQDEw02OTM0YjUwZi1hODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuII0lM+f1ywgCCPLlJZwQHUcZ9oP3C4G1rEHwf+/BE+fjnNOkVrci63fPgIr HxBNS6cQFk3UqhCvYB/BrUNtV4IrHJGJGlPu/W6cU5r6f9HPyVIBStfYl8tAFmGr gyIoShtToleJEDqAqfehqjZJhhdilbhldXIkbzOxykd54Nsro2aH0olXrkYLXMQV VU2ef8mhhM660FPDeIfGARphRdNXX4/qEK5R1Xefv2LWQGJAQaz3I8Z1Wymn9wNS fSWcYOfkLPQaQRmCiT9uk0mKPuvEjhrskgtkfasLsFDY+pDpuxo2VAONx+YgTNPK Le71jwd/r6LjeJITvaNRXIV02QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaI+Ida f0dVj609aa0WOkQY5b5fMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+mSPXYlmln0ukop2m3qPNJznI+LX/3JO5vVquTkZEoAsyBYB5bHKj RtTXK56fuwRyE+QS49/jNQNkX18e97fhza6QERf3PaqAmhIie2k44R+l67f7tn5K TcwBSGZJyDXwZIFdGOgsfG25nktVIxkNE2fvgiRr8hfUTvd0gBeocKRewafFdXAB bIQCeK8qAXlZuy5jGDwmMNl/Te3/JenYUGJ2x8lxxXSRAGXTrSTCyb98PdPMSsfL j9GDBXH38b7f4TClCeJoZWfJvFnAazRXdlznttxHLKAZ3WqWe1PZNnvRUC/2eEoo 9U73TxZEbgSNMxw/SCLd20etwclzjmMh -----END CERTIFICATE-----Generated at Sun Dec 7 03:46:52 2025 by rpki-client