This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: v1bZLpgqZSk/hVlwzy4MUpggK5Z/pyQEcdQISDzB6Lo= Subject key identifier: 1C:21:C9:84:E6:0D:A8:82:08:52:B0:AD:76:28:02:8D:A8:F8:DB:19 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C7C Signing time: Sat 06 Dec 2025 18:04:09 +0000 Manifest this update: Sat 06 Dec 2025 18:04:08 +0000 Manifest next update: Sat 13 Dec 2025 18:04:08 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: QXi5rFIlrCQoHYPeufgY7psh7EpbxTKiZlFxErCHWAo=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Dec 6 18:04:08 2025 GMT Not After : Dec 13 18:04:08 2025 GMT Subject: CN=69347019-7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:89:b2:7b:c6:3f:ea:91:77:91:8a:b0:32: a0:87:71:6b:8c:5a:88:3a:c6:c3:33:1e:d9:0e:73: e0:74:7a:b2:3d:e9:40:87:d0:24:3a:19:da:8a:43: 1f:72:d8:3e:48:b6:0b:5b:34:c2:b6:a4:8a:f5:4a: 02:61:ae:ff:f8:a6:16:92:58:37:f8:3f:5c:37:e5: 70:14:9c:64:44:9b:84:60:96:a0:c7:fa:2c:d4:1c: 38:b6:b0:1e:86:2d:04:8f:a6:c4:7e:c9:fa:09:ab: d6:95:5e:03:20:28:05:26:f0:98:c3:9d:27:61:8a: b0:fd:7a:60:17:dc:1e:3b:80:fd:bc:27:61:4d:ee: f4:d3:c2:d9:4a:33:e7:ee:61:5c:a8:79:77:52:b5: 42:b2:b9:26:d4:62:1a:43:a0:30:f1:d4:83:b3:1e: 44:58:78:9a:23:91:c2:cf:c8:e9:3b:6d:bb:7a:4c: 0c:39:63:bd:f3:f5:b8:25:bc:69:49:21:d4:e6:91: d0:7e:17:15:d0:81:a4:f1:53:23:03:f4:dc:e5:52: ac:8f:ca:e2:e9:09:70:a5:ca:e8:c1:d4:90:b6:b3: 4e:44:d1:9d:84:33:b7:b8:8e:1e:74:09:4c:cc:78: 50:72:59:51:0f:f7:38:83:c9:ee:ef:6d:28:fc:13: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:C9:84:E6:0D:A8:82:08:52:B0:AD:76:28:02:8D:A8:F8:DB:19 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c8:a4:99:12:6a:16:bd:4c:35:87:2f:bd:9c:84:55:f0:90: 0f:20:f6:b8:9f:8f:76:a1:09:12:1e:d1:b1:5d:d5:75:08:d2: b8:a9:ce:e9:b5:72:4e:94:cd:1e:41:28:67:5e:2c:e3:05:fa: f0:71:2c:bb:88:62:b9:a9:90:8c:37:b4:54:53:70:b8:54:5f: c8:7a:dc:06:79:98:19:37:45:f0:e3:59:43:3a:d1:b3:51:0c: 8a:c7:73:e5:12:5f:f2:f8:41:09:8f:27:10:a4:36:29:5f:4b: 11:e4:5b:33:63:ff:ce:50:e4:23:b9:66:4e:4e:af:05:37:dd: 9d:ed:d8:86:0b:87:82:31:de:59:5a:db:ed:b8:20:3e:d8:38: 8f:8f:f1:1c:40:a3:ef:60:cd:d0:e8:08:42:0e:67:19:69:0c: 2d:33:fc:5f:65:5f:fa:78:52:04:2d:d0:bf:f9:ff:71:01:a8: d1:4f:8a:fb:db:6c:28:90:71:86:82:9b:b1:77:a2:77:c8:a6: 5e:b8:e3:de:8f:5e:6f:12:18:e1:93:a9:c3:24:e1:9f:5d:1d: 72:e5:08:79:70:f6:38:b5:7d:f6:ba:83:17:39:24:18:c7:4f: 8c:ae:0f:df:cd:8e:98:bb:5b:3d:da:95:1a:de:7e:fe:9d:47: 67:04:78:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUxMjA2MTgwNDA4WhcNMjUxMjEzMTgwNDA4WjAYMRYwFAYD VQQDEw02OTM0NzAxOS03MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfmJsnvGP+qRd5GKsDKgh3FrjFqIOsbDMx7ZDnPgdHqyPelAh9AkOhnaikMf ctg+SLYLWzTCtqSK9UoCYa7/+KYWklg3+D9cN+VwFJxkRJuEYJagx/os1Bw4trAe hi0Ej6bEfsn6CavWlV4DICgFJvCYw50nYYqw/XpgF9weO4D9vCdhTe7008LZSjPn 7mFcqHl3UrVCsrkm1GIaQ6Aw8dSDsx5EWHiaI5HCz8jpO227ekwMOWO98/W4Jbxp SSHU5pHQfhcV0IGk8VMjA/Tc5VKsj8ri6QlwpcrowdSQtrNORNGdhDO3uI4edAlM zHhQcllRD/c4g8nu720o/BPjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwhyYTm DaiCCFKwrXYoAo2o+NsZMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMyKSZEmoWvUw1hy+9nIRV8JAPIPa4n492oQkSHtGxXdV1CNK4qc7p tXJOlM0eQShnXizjBfrwcSy7iGK5qZCMN7RUU3C4VF/IetwGeZgZN0Xw41lDOtGz UQyKx3PlEl/y+EEJjycQpDYpX0sR5FszY//OUOQjuWZOTq8FN92d7diGC4eCMd5Z WtvtuCA+2DiPj/EcQKPvYM3Q6AhCDmcZaQwtM/xfZV/6eFIELdC/+f9xAajRT4r7 22wokHGGgpuxd6J3yKZeuOPej15vEhjhk6nDJOGfXR1y5Qh5cPY4tX32uoMXOSQY x0+Mrg/fzY6Yu1s92pUa3n7+nUdnBHiw -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:57 2025 by rpki-client