This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: 81REt3Wxr8WI8NjBFDIA3gYpIRDm4jnWtmonJ204M7M= Subject key identifier: 06:57:58:A9:AF:0E:43:70:C1:59:BD:E8:2F:CB:96:7D:1C:17:8F:0E Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 050A Signing time: Thu 04 Dec 2025 22:34:16 +0000 Manifest this update: Thu 04 Dec 2025 22:34:16 +0000 Manifest next update: Thu 11 Dec 2025 22:34:16 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: wYpWwahUba8xfQb98IU3mLJMmbIS5BOSlrsLM9pLTT8=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Dec 4 22:34:16 2025 GMT Not After : Dec 11 22:34:16 2025 GMT Subject: CN=69320c68-0530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:0b:b7:56:f5:8d:cf:17:39:07:9b:0c:c1: ba:0c:b6:3b:47:54:9a:38:e5:46:9c:58:7c:4c:b4: 56:f4:ca:27:0c:b3:bc:59:79:62:f9:64:97:86:4b: e7:ae:d6:54:93:f0:43:b4:ca:04:85:17:e9:72:d4: 1f:74:4e:4b:e4:c6:ad:ed:5a:64:60:2d:fe:3c:c5: db:b9:ba:ed:ec:28:7d:91:f0:50:3c:e5:35:b9:7f: 9d:6e:26:ea:ee:ae:a4:9a:9e:4a:f3:3f:92:dc:28: 82:76:e2:98:52:50:f3:1d:21:26:80:16:0d:8b:cc: 48:9b:f5:22:41:85:c2:34:43:e8:f0:31:1c:d1:8b: f9:4d:03:75:f4:ec:7b:f7:62:30:a7:79:34:3e:36: 8d:a4:c6:42:4c:6d:f2:d7:98:d8:4b:2e:82:e9:2f: 2c:68:8b:de:78:da:91:d1:82:44:1f:2c:37:e9:78: 7e:ba:b8:9c:de:db:52:5f:44:3a:95:00:60:dd:bd: 28:34:6f:08:f8:21:1a:d2:15:98:01:9c:a2:1f:26: a7:6f:f8:97:de:24:30:bf:1c:b2:a5:d6:ad:f1:b2: 09:13:19:5b:a1:76:6d:c5:51:00:2b:6b:cf:1a:41: fa:d8:20:ca:f4:22:5d:74:54:b1:c6:92:01:29:eb: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:57:58:A9:AF:0E:43:70:C1:59:BD:E8:2F:CB:96:7D:1C:17:8F:0E X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b3:df:c7:68:4d:41:c3:04:2f:8f:45:c9:88:49:e1:2f:b5: c9:c8:8e:42:ad:7c:9a:b1:42:64:27:c6:7a:79:b9:e2:09:47: fb:50:47:20:5e:8d:e2:03:8f:ee:76:f2:4b:27:f4:14:26:a5: c8:72:66:14:08:5c:67:ec:b3:f9:c0:1a:ac:fd:cd:26:5b:45: dd:02:df:16:18:7d:c2:f9:bd:c1:6d:a6:84:c9:25:ec:bb:ac: 42:c2:04:b3:03:dd:0b:cd:9b:78:13:f8:f3:ba:b2:32:82:86: 39:86:3d:37:17:26:cb:32:ba:68:39:95:92:dc:a9:3c:6f:5d: 81:70:51:4e:7b:31:19:ba:6c:a7:3a:7e:09:3d:25:75:d2:5c: 72:df:0b:66:6f:46:6e:01:35:28:22:54:f9:c6:d0:93:31:4f: 5a:c4:6a:52:3c:fe:83:82:87:2a:51:76:a0:b9:4b:c5:7c:05: 8e:fb:fc:4d:a8:a7:95:d4:33:a0:5e:7a:95:62:6a:b8:c0:5a: 16:d3:22:e1:86:d6:2a:ab:c5:30:c1:bf:75:3f:83:fa:db:86: 1d:ee:85:43:fe:8c:b1:c0:d4:76:37:40:7c:be:f0:83:35:3e: 4d:c1:49:35:a0:07:71:f4:6b:41:4c:df:9f:49:ab:c8:db:02: 8b:aa:e6:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTEyMDQyMjM0MTZaFw0yNTEyMTEyMjM0MTZaMBgxFjAUBgNV BAMTDTY5MzIwYzY4LTA1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMpgu3VvWNzxc5B5sMwboMtjtHVJo45UacWHxMtFb0yicMs7xZeWL5ZJeGS+eu 1lST8EO0ygSFF+ly1B90Tkvkxq3tWmRgLf48xdu5uu3sKH2R8FA85TW5f51uJuru rqSankrzP5LcKIJ24phSUPMdISaAFg2LzEib9SJBhcI0Q+jwMRzRi/lNA3X07Hv3 YjCneTQ+No2kxkJMbfLXmNhLLoLpLyxoi9542pHRgkQfLDfpeH66uJze21JfRDqV AGDdvSg0bwj4IRrSFZgBnKIfJqdv+JfeJDC/HLKl1q3xsgkTGVuhdm3FUQAra88a QfrYIMr0Il10VLHGkgEp65sDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBldYqa8O Q3DBWb3oL8uWfRwXjw4wHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALCz38doTUHDBC+PRcmISeEvtcnIjkKtfJqxQmQnxnp5ueIJR/tQRyBe jeIDj+528ksn9BQmpchyZhQIXGfss/nAGqz9zSZbRd0C3xYYfcL5vcFtpoTJJey7 rELCBLMD3QvNm3gT+PO6sjKChjmGPTcXJssyumg5lZLcqTxvXYFwUU57MRm6bKc6 fgk9JXXSXHLfC2ZvRm4BNSgiVPnG0JMxT1rEalI8/oOChypRdqC5S8V8BY77/E2o p5XUM6BeepViarjAWhbTIuGG1iqrxTDBv3U/g/rbhh3uhUP+jLHA1HY3QHy+8IM1 Pk3BSTWgB3H0a0FM359Jq8jbAouq5lc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:55:31 2025 by rpki-client