This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json) Hash identifier: cKANNnIQ9ik9iBdj0aAS6OdvBa1AoaBZ5xytazFovVo= Subject key identifier: 07:F1:E5:E0:A6:BD:0D:D1:11:88:0C:50:E7:8A:C7:6A:C3:28:23:89 Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft Manifest number: CA Signing time: Fri 05 Dec 2025 03:48:28 +0000 Manifest this update: Fri 05 Dec 2025 03:48:28 +0000 Manifest next update: Fri 12 Dec 2025 03:48:28 +0000 Files and hashes: 1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: BnUTLLzJIkn33k4EUrYeb+DZSW9gMX7hMtlMljHggsE=) 2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: infNaeFUpt7ZVJZuuma10b3BFY+LYlYBDyCCtFckYlo=) 3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: pdBOEKUd0Ve3BctGKHlPRTaAQVJ6dX2gUTHIFm2FG7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Dec 5 03:48:28 2025 GMT Not After : Dec 12 03:48:28 2025 GMT Subject: CN=6932560c-baf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:a5:25:89:f8:57:bb:f4:ee:25:ce:31:36: 8b:0e:04:11:de:64:b9:c7:e8:7d:84:f6:f7:e5:7e: 1e:69:e1:e3:7e:05:2a:e0:7e:9e:70:43:e7:b3:ee: a1:32:f2:9c:ca:b3:fc:72:8c:68:a8:e9:c0:7d:b8: 4f:6f:70:7a:bb:49:97:c7:6c:4e:05:f3:bd:0a:2f: 15:d0:c8:5b:7c:d8:1f:fe:11:3a:01:7c:91:6b:77: bc:3a:4e:5d:20:c8:cd:12:26:72:23:7d:4c:4f:96: 5f:d8:e6:0e:86:b7:a9:dd:54:f9:42:10:ca:7f:55: 23:61:12:10:61:4b:29:76:a4:50:44:c6:82:7e:4f: ef:ba:37:0c:8a:53:48:6a:84:09:de:f7:f7:f1:bb: 55:e2:e2:02:b9:06:5b:19:a4:3d:03:9a:f3:38:7f: de:54:bc:00:29:66:3a:39:08:93:b0:a6:30:a5:18: 47:0e:36:82:b2:64:db:f2:27:de:76:e0:0a:df:20: 92:83:e8:8a:52:1c:fa:ed:4d:de:ed:f2:53:0d:4f: 30:64:ca:0e:61:3b:0f:d2:7b:4e:6f:87:d5:85:05: 9e:a0:4c:f4:75:07:fe:08:a0:3f:01:09:cd:74:45: c3:ea:22:68:c2:e9:7b:b8:14:1b:4d:58:4a:21:11: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F1:E5:E0:A6:BD:0D:D1:11:88:0C:50:E7:8A:C7:6A:C3:28:23:89 X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:50:aa:82:00:76:81:42:a0:8a:fa:c1:c6:9e:e0:ca:56:c1: 6a:b1:c4:45:85:c2:62:5d:3f:d1:8d:83:bf:74:b7:c1:41:30: 63:6c:9b:9e:b2:4d:45:ae:79:93:67:6d:87:10:98:04:57:a9: e3:87:0b:69:7e:2c:7a:9d:81:78:48:21:d8:d9:ee:a3:e2:76: c5:c0:ac:02:23:9f:2d:5e:d2:47:a5:29:7f:f7:1b:1e:ed:3f: 30:f2:04:4a:42:4e:3d:dd:27:39:f1:9c:fe:eb:a9:19:1e:55: 60:11:e3:5e:70:34:fc:15:9a:ba:28:a3:70:d2:02:f3:62:cc: 59:6a:5a:7c:54:69:a6:fa:b9:80:5d:f3:6b:b8:ca:7d:3a:84: ff:33:ce:62:1a:2b:5b:e7:6d:0b:67:86:a7:eb:73:d5:89:83: 81:ed:d6:70:cd:ad:8c:53:b2:35:eb:8f:94:40:64:a8:f0:1a: 65:36:b4:e8:a6:f2:d5:38:f6:7b:b4:9e:aa:7b:af:e7:29:fc: e8:b2:3f:da:d5:51:3a:9b:bb:85:e8:fd:36:c5:21:ac:ed:aa: 36:ae:4b:14:ce:5e:cf:d9:f0:e3:fc:9b:52:ef:f2:9f:82:b0: 8b:e7:6b:66:1c:99:5c:d0:26:12:6a:e9:e9:3d:91:e8:af:d8: 03:12:22:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF RkI3RjRENjIwHhcNMjUxMjA1MDM0ODI4WhcNMjUxMjEyMDM0ODI4WjAYMRYwFAYD VQQDEw02OTMyNTYwYy1iYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5elJYn4V7v07iXOMTaLDgQR3mS5x+h9hPb35X4eaeHjfgUq4H6ecEPns+6h MvKcyrP8coxoqOnAfbhPb3B6u0mXx2xOBfO9Ci8V0MhbfNgf/hE6AXyRa3e8Ok5d IMjNEiZyI31MT5Zf2OYOhrep3VT5QhDKf1UjYRIQYUspdqRQRMaCfk/vujcMilNI aoQJ3vf38btV4uICuQZbGaQ9A5rzOH/eVLwAKWY6OQiTsKYwpRhHDjaCsmTb8ife duAK3yCSg+iKUhz67U3e7fJTDU8wZMoOYTsP0ntOb4fVhQWeoEz0dQf+CKA/AQnN dEXD6iJowul7uBQbTVhKIRH+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfx5eCm vQ3REYgMUOeKx2rDKCOJMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDg0MC8zNDJGODBEMDlGQzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNB aXh0VUw2azZmQkR2dF9UV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGUKqCAHaBQqCK+sHGnuDKVsFqscRFhcJiXT/RjYO/dLfBQTBjbJue sk1FrnmTZ22HEJgEV6njhwtpfix6nYF4SCHY2e6j4nbFwKwCI58tXtJHpSl/9xse 7T8w8gRKQk493Sc58Zz+66kZHlVgEeNecDT8FZq6KKNw0gLzYsxZalp8VGmm+rmA XfNruMp9OoT/M85iGitb520LZ4an63PViYOB7dZwza2MU7I164+UQGSo8BplNrTo pvLVOPZ7tJ6qe6/nKfzosj/a1VE6m7uF6P02xSGs7ao2rksUzl7P2fDj/JtS7/Kf grCL52tmHJlc0CYSaunpPZHor9gDEiJp -----END CERTIFICATE-----Generated at Sun Dec 7 01:15:18 2025 by rpki-client