This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json) Hash identifier: 0Vs/nQP6DehQbjuirzWW/Hm9pp/MFKIdolcz4DCbC5Q= Subject key identifier: 8E:C6:D4:A4:FA:14:23:E1:3A:E1:13:44:47:D0:EC:B1:67:C8:D4:44 Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft Manifest number: 49 Signing time: Fri 05 Dec 2025 05:12:53 +0000 Manifest this update: Fri 05 Dec 2025 05:12:52 +0000 Manifest next update: Fri 12 Dec 2025 05:12:52 +0000 Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: 9cY5V18DRvExnjYO3ZplMwQU+7AoXmsHAyPIP/p9q5I=) 2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: YXoQ9r4tej6CnG1FdK26UeZMqNkqakqvZSbUkeab5Z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Validity Not Before: Dec 5 05:12:52 2025 GMT Not After : Dec 12 05:12:52 2025 GMT Subject: CN=693269d4-d378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:ef:da:e8:b5:0a:ea:16:fb:4f:23:2c:90: 42:18:41:b8:2a:aa:ab:f7:81:ec:bd:e7:09:c5:73: 88:bd:fd:22:ab:97:79:99:8f:3e:a9:63:de:fe:7f: 44:8c:04:14:05:90:b5:ef:37:4e:68:4c:dd:76:3a: a0:0a:30:7b:23:95:3f:2f:c7:6d:ef:90:80:70:e2: a2:6c:66:1b:5e:94:86:67:8e:9e:ca:e0:fb:39:24: 1d:89:ec:20:a0:00:1c:0d:c8:90:fb:e5:be:f5:94: fe:fe:4e:fd:3c:90:48:89:65:04:14:2d:8d:b2:04: 45:0d:24:71:36:de:ce:9b:31:4b:a1:6c:6a:62:88: 10:e3:f3:7c:1f:c0:44:9a:8b:fb:37:bb:c1:22:e5: 06:d9:97:94:51:bc:a1:92:c3:10:a3:17:57:69:bf: e2:4c:b3:af:70:be:39:d1:01:1e:c5:0b:6d:fe:21: 06:ee:1e:a0:62:a4:a9:ac:d2:7e:fa:25:df:ea:99: 97:66:16:67:18:96:b7:df:13:2c:6f:b0:21:69:a2: 52:4f:b7:ca:b1:1b:5a:04:87:de:02:fc:3b:e4:86: f0:8f:df:79:ae:69:d5:dd:94:37:f3:96:50:dd:cb: a4:d6:9f:c8:70:74:ed:fa:ee:b4:cb:13:79:19:d6: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C6:D4:A4:FA:14:23:E1:3A:E1:13:44:47:D0:EC:B1:67:C8:D4:44 X509v3 Authority Key Identifier: keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c9:48:ba:c8:78:53:3e:f0:d4:d7:21:02:11:ce:5c:b2:5b: cd:85:fd:96:13:43:55:b0:7f:96:07:ea:70:09:e1:d1:39:11: 53:35:a3:d6:d2:2c:83:3c:28:fc:c1:0c:31:1c:0a:9a:c6:d7: 5e:db:cb:3d:4c:7d:d2:ff:f1:fc:59:c3:9f:05:5f:61:a9:5b: 32:17:90:ff:49:9d:ae:07:76:d1:8b:b7:e6:71:c3:3d:d5:f5: 49:37:57:37:45:49:17:d8:a3:40:3d:3f:b5:02:f3:8e:6b:96: 9c:91:9c:9b:4e:ad:00:a3:f2:4e:16:47:b1:7b:a3:fe:87:e4: 34:65:62:4c:e3:e9:c4:8f:fd:63:94:bb:ed:64:7e:2b:15:2a: ab:0a:de:65:ae:ef:7a:e6:6e:39:27:f4:57:6d:e1:e0:9e:60: 94:cb:cf:92:ea:70:72:57:ba:74:02:d9:b4:a5:d7:ed:86:2a: 54:fb:ff:59:eb:23:7d:84:b9:e1:e4:f1:6b:a3:6a:7a:ea:b7: b2:e5:73:26:87:10:33:9b:00:8f:28:9e:b5:33:21:f5:b7:7b: a3:05:60:16:6e:2a:aa:00:9f:8f:e2:9b:13:9e:2b:32:73:a4: b3:35:59:9f:26:53:5d:29:09:4e:5d:29:15:b7:8b:3a:fa:4a: 9b:68:f7:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMzY2MjJGOTkwMEI0NkFBREZDRDA1NDY0RjEwRDQyQjEz MDYyNTE3NjAeFw0yNTEyMDUwNTEyNTJaFw0yNTEyMTIwNTEyNTJaMBgxFjAUBgNV BAMTDTY5MzI2OWQ0LWQzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKbe/a6LUK6hb7TyMskEIYQbgqqqv3gey95wnFc4i9/SKrl3mZjz6pY97+f0SM BBQFkLXvN05oTN12OqAKMHsjlT8vx23vkIBw4qJsZhtelIZnjp7K4Ps5JB2J7CCg ABwNyJD75b71lP7+Tv08kEiJZQQULY2yBEUNJHE23s6bMUuhbGpiiBDj83wfwESa i/s3u8Ei5QbZl5RRvKGSwxCjF1dpv+JMs69wvjnRAR7FC23+IQbuHqBipKms0n76 Jd/qmZdmFmcYlrffEyxvsCFpolJPt8qxG1oEh94C/DvkhvCP33muadXdlDfzllDd y6TWn8hwdO367rTLE3kZ1repAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjsbUpPoU I+E64RNER9DssWfI1EQwHwYDVR0jBBgwFoAUNmIvmQC0aq380FRk8Q1CsTBiUXYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0I1NDhEQkUyNjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEzODBGUms4UTFDc1RCaVVY WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTm1Jdm1RQzBhcTM4MEZSazhRMUNzVEJpVVhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0I1NDhEQkUyNjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEz ODBGUms4UTFDc1RCaVVYWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDJSLrIeFM+8NTXIQIRzlyyW82F/ZYTQ1Wwf5YH6nAJ4dE5EVM1o9bS LIM8KPzBDDEcCprG117byz1MfdL/8fxZw58FX2GpWzIXkP9Jna4HdtGLt+Zxwz3V 9Uk3VzdFSRfYo0A9P7UC845rlpyRnJtOrQCj8k4WR7F7o/6H5DRlYkzj6cSP/WOU u+1kfisVKqsK3mWu73rmbjkn9Fdt4eCeYJTLz5LqcHJXunQC2bSl1+2GKlT7/1nr I32EueHk8Wujanrqt7LlcyaHEDObAI8onrUzIfW3e6MFYBZuKqoAn4/imxOeKzJz pLM1WZ8mU10pCU5dKRW3izr6Spto9zY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:31 2025 by rpki-client