This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json) Hash identifier: LwXOEQ30tPWDOzETwsGAKyQCIBz6/1yESx29RXcJOyM= Subject key identifier: 17:D4:86:FA:A7:9A:B9:F6:98:0F:FC:1C:B6:B7:6B:83:6A:D8:E7:CE Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft Manifest number: 0745 Signing time: Thu 04 Dec 2025 20:37:50 +0000 Manifest this update: Thu 04 Dec 2025 20:37:50 +0000 Manifest next update: Thu 11 Dec 2025 20:37:50 +0000 Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: LfrcOcK1YfNO7YBEeEJ/9CE1wC6fte5Qrhq59M60Vps=) 2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: ErOTyz5l442f54R4SgwNJSi5aE/r3E7WeodId76rTk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Validity Not Before: Dec 4 20:37:50 2025 GMT Not After : Dec 11 20:37:50 2025 GMT Subject: CN=6931f11e-17a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:9c:ff:91:7e:5f:5c:55:41:cc:bb:4a:02: 77:c1:77:55:1f:34:3f:3e:45:99:0a:09:84:27:7a: 08:6b:1a:0c:28:d0:96:2e:ca:c2:2d:a9:50:63:df: 8e:be:f1:4a:f9:9a:3f:2f:8a:36:f6:85:52:8d:df: 32:c7:10:a4:ce:e5:55:3f:2b:3a:d8:b4:4c:cc:8a: 41:ab:51:6a:ff:97:a6:63:bc:42:33:0d:5d:37:6e: d2:5d:61:24:0b:70:a8:f2:fb:3a:c3:35:de:18:e2: 9f:da:75:ac:0a:8e:4d:91:a8:7f:85:fb:4d:0b:7f: b0:f4:b9:e1:94:a8:67:cc:c7:57:ff:06:c2:7b:d0: 9f:c9:bb:6a:b9:c1:c1:60:ca:b6:ef:68:9c:8e:6f: c5:f9:6d:2a:39:f8:52:b7:bc:f0:3d:d1:f8:91:48: 07:1d:9e:13:19:b4:49:97:28:29:23:fe:b3:54:ce: 43:a4:12:26:d4:db:fe:bb:8c:d0:a6:cb:e4:1b:38: db:45:92:27:c4:dd:63:de:11:6a:e3:71:4a:b4:d3: c5:0f:58:52:1f:b2:88:01:6e:15:e1:42:f4:bb:8b: 12:1f:76:9f:b7:7a:87:ea:c9:06:fc:72:66:4e:78: 1a:e5:70:61:62:44:2d:35:8f:66:2b:be:9d:fe:70: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D4:86:FA:A7:9A:B9:F6:98:0F:FC:1C:B6:B7:6B:83:6A:D8:E7:CE X509v3 Authority Key Identifier: keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c1:d1:cc:f5:91:0b:7a:2f:c3:b9:bd:62:0d:92:dd:36:95: 65:96:48:10:b4:20:10:ee:2f:89:4f:53:bc:75:74:04:db:e1: 2a:6e:80:f9:0a:2b:7a:50:8c:f1:4f:06:30:97:d1:e9:aa:ad: 27:bd:31:aa:bb:4f:52:7c:99:33:47:27:a1:17:2a:2f:05:52: 6f:7f:28:c7:b4:54:5d:9e:ab:03:9e:19:93:a7:d1:b2:75:e0: ea:e0:2c:9c:4e:54:1e:0d:81:34:a3:d8:1d:ea:7b:53:36:08: 38:36:69:54:d9:3e:73:67:c0:21:15:ec:fe:e9:e3:b5:ee:44: bf:06:f3:2f:78:bd:be:84:1e:cb:2c:b5:53:a2:7d:03:83:c2: c1:c7:cd:ca:73:45:e8:7a:fd:df:41:02:5d:b0:fb:a8:38:84: 97:9f:1d:2b:aa:d1:5f:c8:cc:c4:84:d2:bd:8e:54:77:92:86: ef:2b:8e:42:22:54:b5:27:f4:bf:73:87:84:88:45:98:0b:9b: c5:a9:02:9f:ef:8f:94:18:68:58:13:b9:f3:dc:c8:fb:6b:d1: c3:7a:ba:fb:0c:de:20:90:81:be:ee:05:49:f2:77:f2:a8:d7: 85:e7:f5:11:16:38:70:db:71:39:f9:f5:4b:b7:d2:5c:2f:88: 5b:bd:44:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNTMxMTAvBgNVBAUTKDM0OUU1OTdDNzE3ODgxMDRCMDY0OUYwNzNBQkE3MkY2 NUYyODRCOUEwHhcNMjUxMjA0MjAzNzUwWhcNMjUxMjExMjAzNzUwWjAYMRYwFAYD VQQDEw02OTMxZjExZS0xN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPSc/5F+X1xVQcy7SgJ3wXdVHzQ/PkWZCgmEJ3oIaxoMKNCWLsrCLalQY9+O vvFK+Zo/L4o29oVSjd8yxxCkzuVVPys62LRMzIpBq1Fq/5emY7xCMw1dN27SXWEk C3Co8vs6wzXeGOKf2nWsCo5Nkah/hftNC3+w9LnhlKhnzMdX/wbCe9CfybtqucHB YMq272icjm/F+W0qOfhSt7zwPdH4kUgHHZ4TGbRJlygpI/6zVM5DpBIm1Nv+u4zQ psvkGzjbRZInxN1j3hFq43FKtNPFD1hSH7KIAW4V4UL0u4sSH3aft3qH6skG/HJm Tnga5XBhYkQtNY9mK76d/nC5mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfUhvqn mrn2mA/8HLa3a4Nq2OfOMB8GA1UdIwQYMBaAFDSeWXxxeIEEsGSfBzq6cvZfKEua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU1My9BNEE1MTlFQTRF NjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdRU3daSjhIT3JweTlsOG9T NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KNVpmSEY0Z1FTd1pKOEhPcnB5OWw4b1M1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU1My9BNEE1MTlFQTRFNjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdR U3daSjhIT3JweTlsOG9TNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNwdHM9ZELei/Dub1iDZLdNpVllkgQtCAQ7i+JT1O8dXQE2+EqboD5 Cit6UIzxTwYwl9Hpqq0nvTGqu09SfJkzRyehFyovBVJvfyjHtFRdnqsDnhmTp9Gy deDq4CycTlQeDYE0o9gd6ntTNgg4NmlU2T5zZ8AhFez+6eO17kS/BvMveL2+hB7L LLVTon0Dg8LBx83Kc0Xoev3fQQJdsPuoOISXnx0rqtFfyMzEhNK9jlR3kobvK45C IlS1J/S/c4eEiEWYC5vFqQKf74+UGGhYE7nz3Mj7a9HDerr7DN4gkIG+7gVJ8nfy qNeF5/URFjhw23E5+fVLt9JcL4hbvURj -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:21 2025 by rpki-client