This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: 0Ft5X0C0hw/b3pgVOBM+zDWVQvuVGD/qPZm8azQUGfk= Subject key identifier: B7:8D:80:88:D1:26:19:14:35:22:D2:64:19:9E:87:DF:D1:43:17:4A Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 198B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B8E Signing time: Sat 06 Dec 2025 15:12:27 +0000 Manifest this update: Sat 06 Dec 2025 15:12:27 +0000 Manifest next update: Sat 13 Dec 2025 15:12:27 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: SCgVj61qxm9EGGVAeK9Zj2+CajnnSdS4vZ3SxT1e4PA=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6539 (0x198b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Dec 6 15:12:27 2025 GMT Not After : Dec 13 15:12:27 2025 GMT Subject: CN=693447db-fc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:25:03:7f:ea:86:d4:69:3b:72:df:3a:2a: 04:d4:e3:21:99:b5:21:24:20:04:70:4b:bc:ed:68: 26:78:0e:3c:14:26:6c:71:53:78:e9:ba:f0:9b:ce: 71:44:fe:62:30:ec:88:aa:0d:78:5e:e3:75:23:e5: e2:a2:2e:f3:3e:40:76:fe:63:88:d8:91:e4:73:fd: d0:c6:09:42:c2:db:ae:0e:2d:01:ae:5b:89:d1:67: a6:94:d8:6b:56:58:11:56:b0:a7:4c:7d:44:38:40: 89:f0:7f:d1:42:e2:98:34:83:99:7d:84:b6:76:e0: 69:98:6c:38:0b:b9:73:bd:e5:b2:08:30:95:ac:bb: 41:ab:f0:24:b0:3a:12:41:f0:5c:98:78:4e:82:b8: 53:15:c4:97:1d:55:c7:2a:d8:dc:37:8e:04:0d:d8: 44:9f:bd:21:bf:92:ee:2e:3b:f0:c4:30:60:89:6e: ee:87:d5:5d:3e:7d:dd:40:40:c1:f5:99:3c:74:39: 45:3a:48:98:a5:88:76:58:f8:ea:e8:05:e8:bf:60: de:19:06:9b:70:76:40:61:b6:b0:c2:a3:c7:34:01: d7:e1:42:5d:1a:cd:d5:7c:b0:32:88:9c:e2:06:51: 4d:8d:b4:00:b1:ed:9f:29:12:d6:08:c4:f3:5c:d2: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8D:80:88:D1:26:19:14:35:22:D2:64:19:9E:87:DF:D1:43:17:4A X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:31:99:6d:6a:19:4a:84:40:6d:8b:b4:67:23:35:3c:53:c1: e5:64:92:a8:55:d4:a5:34:b3:9f:70:0c:e6:34:f8:32:a0:0c: c5:29:fd:ee:a2:65:e2:b2:a6:2d:8a:b8:10:74:82:f5:ed:22: 33:70:6f:7c:c0:3f:76:09:74:6b:27:ff:77:9a:e5:59:24:cd: 2d:c1:cd:78:47:80:3c:59:26:ee:c0:b9:d2:6f:1f:8a:dc:2c: cb:da:51:f3:09:2d:ed:0f:87:0e:0c:dd:c6:a3:9d:a1:21:b8: 10:66:d8:b9:c1:e8:17:ca:a4:7c:4d:cb:f0:7e:36:78:8b:d8: 68:cd:27:8c:17:bc:6e:93:9f:6f:f7:54:4b:94:ea:00:00:87: 94:e8:0c:c2:10:ce:3d:e5:09:82:63:86:a9:ff:12:48:aa:1d: 65:cb:7a:b5:fe:dd:94:e1:c1:1c:a8:99:e8:4d:5e:7e:e6:72: 81:52:2a:55:5d:4a:f5:6f:bf:0f:95:6e:21:5c:ac:ad:6c:76: fd:97:2f:94:c6:fb:ed:1c:c8:7b:6c:01:f7:9c:32:15:03:84: 7d:c0:d0:7e:52:35:db:75:2f:b2:26:c1:03:a2:d8:4f:f6:d0: 00:82:e7:41:dd:63:66:20:e9:ba:bf:ac:68:dc:7f:10:6f:18: 10:02:ce:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUxMjA2MTUxMjI3WhcNMjUxMjEzMTUxMjI3WjAYMRYwFAYD VQQDEw02OTM0NDdkYi1mYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoAlA3/qhtRpO3LfOioE1OMhmbUhJCAEcEu87WgmeA48FCZscVN46brwm85x RP5iMOyIqg14XuN1I+Xioi7zPkB2/mOI2JHkc/3QxglCwtuuDi0BrluJ0WemlNhr VlgRVrCnTH1EOECJ8H/RQuKYNIOZfYS2duBpmGw4C7lzveWyCDCVrLtBq/AksDoS QfBcmHhOgrhTFcSXHVXHKtjcN44EDdhEn70hv5LuLjvwxDBgiW7uh9VdPn3dQEDB 9Zk8dDlFOkiYpYh2WPjq6AXov2DeGQabcHZAYbawwqPHNAHX4UJdGs3VfLAyiJzi BlFNjbQAse2fKRLWCMTzXNLkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeNgIjR JhkUNSLSZBmeh9/RQxdKMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2MZltahlKhEBti7RnIzU8U8HlZJKoVdSlNLOfcAzmNPgyoAzFKf3u omXisqYtirgQdIL17SIzcG98wD92CXRrJ/93muVZJM0twc14R4A8WSbuwLnSbx+K 3CzL2lHzCS3tD4cODN3Go52hIbgQZti5wegXyqR8TcvwfjZ4i9hozSeMF7xuk59v 91RLlOoAAIeU6AzCEM495QmCY4ap/xJIqh1ly3q1/t2U4cEcqJnoTV5+5nKBUipV XUr1b78PlW4hXKytbHb9ly+UxvvtHMh7bAH3nDIVA4R9wNB+UjXbdS+yJsEDothP 9tAAgudB3WNmIOm6v6xo3H8QbxgQAs7F -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:27 2025 by rpki-client