This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: KnBAUq2WakYtvn+mttYqJBmKkFtxqqeAi36nNWL/e2s= Subject key identifier: C2:3D:D0:93:AF:80:F8:C5:DD:9C:97:8A:4B:08:71:2B:B0:4E:CC:95 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0CDF Signing time: Sat 06 Dec 2025 17:32:35 +0000 Manifest this update: Sat 06 Dec 2025 17:32:34 +0000 Manifest next update: Sat 13 Dec 2025 17:32:34 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: FEJxFXUXr1wRk/G2BqiOJn8gsW/bjc/4dSqTWGpzIg4=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: Q0U9jLmGlDphifIjeRw5dxgCa78hCZrZGnpWBMtnN1E=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: MfPaEPQ52jdvelQfKc4jbQkppAchA+eVpqN/8W05/oU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Dec 6 17:32:34 2025 GMT Not After : Dec 13 17:32:34 2025 GMT Subject: CN=693468b3-bc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:5a:de:b4:a8:ec:0e:b6:9c:73:be:99:5d: 77:a4:49:35:ae:2b:05:c2:44:12:0e:bf:79:c4:74: 95:39:c7:18:24:b6:fd:b7:23:46:9b:61:77:c1:42: b9:08:93:d7:21:f0:30:2c:a5:12:e2:d3:28:2e:2a: a3:3b:39:e9:7d:aa:43:e7:f5:72:f8:0a:e3:26:f5: e8:0a:1a:9b:d3:44:b2:e3:4a:87:e9:66:54:d4:82: af:69:21:df:f8:de:06:54:fb:3c:f0:97:bf:a3:4d: 57:56:3c:6d:25:96:f5:69:ed:35:8c:ee:f7:15:85: 49:71:69:ad:70:2d:55:bc:72:01:a0:c1:71:3a:5b: b8:7f:a0:35:7e:2a:cb:7b:fe:0d:bf:e9:31:d5:c2: a4:f4:ab:ee:97:83:b4:0b:2a:f4:b9:4a:f1:fa:75: e4:25:c7:59:6d:e3:2e:8a:f3:9b:9d:81:a4:7f:19: b4:b2:ec:83:43:cd:23:4b:d9:04:8f:de:87:dc:3a: 86:b8:be:8c:c5:61:9b:38:57:b8:cc:15:9f:a7:d2: 6d:99:0c:1d:5a:45:76:13:53:71:2c:6b:5f:8c:54: 8a:76:db:62:33:b4:3b:ac:90:fe:77:47:d6:33:39: b2:7f:98:c4:86:bc:98:57:53:aa:13:e1:2f:81:bf: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:D0:93:AF:80:F8:C5:DD:9C:97:8A:4B:08:71:2B:B0:4E:CC:95 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:27:26:f6:86:4a:c3:20:74:02:8b:97:c9:28:00:b0:41: 03:23:73:c5:dd:0b:13:6a:77:a8:b1:27:1e:0e:fc:df:9d:92: bc:26:1a:4f:dd:35:10:d8:c6:3b:c3:35:fd:75:a8:b8:06:2f: b0:60:b8:21:a2:c9:1b:e7:72:0e:39:74:41:39:4f:68:e9:b5: d1:48:4a:90:00:ce:07:8f:a0:cd:a7:4b:7f:b4:a0:ca:b4:0a: d3:f3:c6:af:16:27:37:76:a3:72:d8:d9:f6:40:9f:63:7a:77: 6e:f7:72:22:a9:2a:fb:47:53:76:9b:16:36:e4:b4:ec:66:88: 4b:81:fa:05:67:98:52:63:d9:69:0f:f5:1b:67:c5:67:36:3c: 4f:73:25:bd:8f:84:3b:97:c1:78:36:93:eb:96:ad:53:da:0a: d0:aa:0c:b4:7e:0e:d6:a1:40:4d:56:8f:15:f1:f6:a6:96:75: 15:e0:dc:d7:bc:a3:3c:72:6e:b0:f9:ef:a4:f3:4b:87:b9:a1: af:2f:93:1e:a9:08:78:a5:99:6a:e2:76:75:ed:08:07:9e:f6: 4b:80:01:c0:0b:08:66:30:13:00:3e:38:d3:a8:ed:29:78:e0: f4:e6:6e:89:fb:68:c5:6b:f0:e5:d7:1e:46:6c:56:5f:a8:7c: 18:ef:28:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUxMjA2MTczMjM0WhcNMjUxMjEzMTczMjM0WjAYMRYwFAYD VQQDEw02OTM0NjhiMy1iYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DJa3rSo7A62nHO+mV13pEk1risFwkQSDr95xHSVOccYJLb9tyNGm2F3wUK5 CJPXIfAwLKUS4tMoLiqjOznpfapD5/Vy+ArjJvXoChqb00Sy40qH6WZU1IKvaSHf +N4GVPs88Je/o01XVjxtJZb1ae01jO73FYVJcWmtcC1VvHIBoMFxOlu4f6A1firL e/4Nv+kx1cKk9Kvul4O0Cyr0uUrx+nXkJcdZbeMuivObnYGkfxm0suyDQ80jS9kE j96H3DqGuL6MxWGbOFe4zBWfp9JtmQwdWkV2E1NxLGtfjFSKdttiM7Q7rJD+d0fW Mzmyf5jEhryYV1OqE+Evgb+C+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI90JOv gPjF3ZyXiksIcSuwTsyVMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhYCcm9oZKwyB0AouXySgAsEEDI3PF3QsTaneosSceDvzfnZK8JhpP 3TUQ2MY7wzX9dai4Bi+wYLghoskb53IOOXRBOU9o6bXRSEqQAM4Hj6DNp0t/tKDK tArT88avFic3dqNy2Nn2QJ9jendu93IiqSr7R1N2mxY25LTsZohLgfoFZ5hSY9lp D/UbZ8VnNjxPcyW9j4Q7l8F4NpPrlq1T2grQqgy0fg7WoUBNVo8V8famlnUV4NzX vKM8cm6w+e+k80uHuaGvL5MeqQh4pZlq4nZ17QgHnvZLgAHACwhmMBMAPjjTqO0p eOD05m6J+2jFa/Dl1x5GbFZfqHwY7yg5 -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:32 2025 by rpki-client