This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: 5YMqJWZsbP3PIOdb0NUw6cjD8L3VF4sCHV31KgA5Dxk= Subject key identifier: 0D:FE:1A:05:27:88:C8:31:80:B2:7E:08:BE:20:AF:AF:96:F3:76:1F Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 0360 Signing time: Thu 04 Dec 2025 23:20:13 +0000 Manifest this update: Thu 04 Dec 2025 23:20:12 +0000 Manifest next update: Thu 11 Dec 2025 23:20:12 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: Z8tsH2pcBijw+3na3P9C7fp5rSHgvmkWlSrAgicw/jU=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: mRRgwNA+PP2GD4RfPaz1cyaWGNrkL/T4dyult2MIxPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Dec 4 23:20:12 2025 GMT Not After : Dec 11 23:20:12 2025 GMT Subject: CN=6932172c-25bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:55:03:a9:89:72:5c:45:13:40:eb:a7:69:74: 9e:c4:00:8b:04:6b:c6:4d:20:9f:cb:67:d2:90:95: ef:91:82:dc:93:96:9f:42:fe:9e:66:9a:08:52:22: 89:d8:a5:a9:00:92:5e:4a:a4:dd:ca:76:08:44:e3: 9b:59:d1:88:c9:76:f2:16:5c:90:54:49:c3:9b:2d: 95:95:70:10:7a:9b:66:de:96:8e:cc:89:99:19:17: 70:ee:a5:74:60:75:0c:44:3a:02:cb:53:56:18:76: 8d:43:ba:7e:fe:1b:bd:1e:12:e8:0c:fa:8e:85:3a: 67:d9:14:9d:e7:94:ee:57:8a:72:5f:1c:8c:6d:ca: 42:d2:76:27:17:e2:03:b7:43:ef:bb:79:d8:c5:67: ec:74:85:19:09:cb:4c:e4:40:6b:cb:8a:85:ea:94: 04:d8:a8:ad:4a:a6:1e:48:2e:47:55:89:23:0c:a9: 8a:db:50:cf:66:7b:32:74:86:66:cc:36:e6:65:13: d8:77:43:ee:0a:a5:ff:b1:62:54:70:e4:4f:c9:f8: 29:0c:7c:20:b0:2d:94:1e:b8:95:8a:51:c1:4b:f8: c0:94:1c:c2:f2:08:6c:4b:21:77:1b:7f:b0:e5:1c: a0:3a:d7:3f:8d:b0:bc:06:8c:95:39:34:e9:70:c0: 8c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FE:1A:05:27:88:C8:31:80:B2:7E:08:BE:20:AF:AF:96:F3:76:1F X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:16:eb:9a:b9:a9:da:aa:14:c6:6d:22:10:f0:4c:58:e3: 3a:54:65:98:39:ee:32:9d:e6:76:9c:4e:2f:75:3a:6b:8d:72: 86:ff:90:d2:3f:e1:e4:9b:0f:a3:d3:ec:96:7d:22:28:a9:f3: 4b:fe:eb:e1:8f:55:39:22:e4:92:cb:e0:9d:32:cd:fc:7b:95: bb:4c:25:26:73:f0:0e:32:a3:c6:d2:ed:9e:d9:38:26:27:ca: 65:37:2d:09:79:2a:9d:a8:18:b1:e8:0e:ed:3a:f9:c3:75:1d: fc:01:52:e6:1c:b1:e5:be:bf:0f:cd:af:73:93:90:78:b3:13: 47:2e:29:e8:3e:48:3b:27:27:43:57:58:4e:fd:f7:17:02:54: 67:2d:b3:bb:30:bd:19:5c:ae:73:37:58:ba:b3:c9:01:b3:48: 31:40:56:e4:d2:4f:60:20:d9:e7:5f:af:d7:77:e4:ce:15:5c: 94:ad:89:57:b3:e9:71:e8:59:da:93:94:1a:e5:f5:71:99:fa: a0:dc:ba:e5:cf:80:cf:57:18:5c:ff:8f:61:0d:3e:8d:ea:45: d5:2d:6f:11:10:53:05:8c:5a:9e:1d:54:ff:c1:8d:28:d3:df: 25:43:63:9c:21:fe:67:2b:e3:7e:d9:48:f5:f2:b7:3b:10:3f: 4c:11:69:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUxMjA0MjMyMDEyWhcNMjUxMjExMjMyMDEyWjAYMRYwFAYD VQQDEw02OTMyMTcyYy0yNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81UDqYlyXEUTQOunaXSexACLBGvGTSCfy2fSkJXvkYLck5afQv6eZpoIUiKJ 2KWpAJJeSqTdynYIROObWdGIyXbyFlyQVEnDmy2VlXAQeptm3paOzImZGRdw7qV0 YHUMRDoCy1NWGHaNQ7p+/hu9HhLoDPqOhTpn2RSd55TuV4pyXxyMbcpC0nYnF+ID t0Pvu3nYxWfsdIUZCctM5EBry4qF6pQE2KitSqYeSC5HVYkjDKmK21DPZnsydIZm zDbmZRPYd0PuCqX/sWJUcORPyfgpDHwgsC2UHriVilHBS/jAlBzC8ghsSyF3G3+w 5RygOtc/jbC8BoyVOTTpcMCMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3+GgUn iMgxgLJ+CL4gr6+W83YfMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKSxbrmrmp2qoUxm0iEPBMWOM6VGWYOe4yneZ2nE4vdTprjXKG/5DS P+Hkmw+j0+yWfSIoqfNL/uvhj1U5IuSSy+CdMs38e5W7TCUmc/AOMqPG0u2e2Tgm J8plNy0JeSqdqBix6A7tOvnDdR38AVLmHLHlvr8Pza9zk5B4sxNHLinoPkg7JydD V1hO/fcXAlRnLbO7ML0ZXK5zN1i6s8kBs0gxQFbk0k9gINnnX6/Xd+TOFVyUrYlX s+lx6Fnak5Qa5fVxmfqg3Lrlz4DPVxhc/49hDT6N6kXVLW8REFMFjFqeHVT/wY0o 098lQ2OcIf5nK+N+2Uj18rc7ED9MEWms -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:45 2025 by rpki-client