This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json) Hash identifier: PTR5ZNgK0hcqts/2eDo7R1/2bLV5foj9XOoyBE3x+Bo= Subject key identifier: BE:E4:8B:8E:40:C2:75:EB:B5:BD:AD:56:84:FE:5A:D2:8E:77:87:E1 Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft Manifest number: 19 Signing time: Fri 05 Dec 2025 05:40:34 +0000 Manifest this update: Fri 05 Dec 2025 05:40:33 +0000 Manifest next update: Fri 12 Dec 2025 05:40:33 +0000 Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: c3JWH0+Yb3XFpak7mWLD83jxML7s0kZSvy07Fn6adA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Validity Not Before: Dec 5 05:40:33 2025 GMT Not After : Dec 12 05:40:33 2025 GMT Subject: CN=69327052-dc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:c2:c3:4c:6f:c4:1f:91:48:5b:71:b1:58: e6:5c:a9:72:82:b4:fa:c2:30:a2:7d:0b:2d:9d:2c: 76:e0:a0:ab:37:30:b9:79:fe:00:15:78:73:91:c0: 22:e6:85:c4:ae:70:16:21:57:64:55:7e:9f:73:99: b5:c9:5f:7c:ac:53:e2:4a:cd:9b:c9:be:62:ef:38: 5a:ad:90:de:8d:24:32:be:d7:25:b5:25:d8:09:ba: 7f:4d:14:74:21:d1:c9:e3:58:a8:b3:17:5a:c3:da: 3a:bf:72:55:d4:fd:36:7d:83:cf:55:90:8b:ee:d9: f2:e3:ec:52:c2:bb:48:de:97:94:2b:c6:cf:58:a8: 19:7f:2b:96:ab:a9:ec:15:ef:31:99:d6:9d:5c:1f: 2d:e6:04:5d:b0:da:34:86:18:af:bc:7c:7d:cd:2a: 8a:2e:6e:ae:38:f2:1d:05:d2:db:4c:a4:77:ff:06: 24:a2:92:6d:2f:2d:7b:00:2e:14:ca:5d:81:0f:43: bf:74:58:bc:c0:60:64:db:d0:05:02:61:ce:24:2c: 93:72:fa:42:a0:c6:d5:67:25:13:ff:86:20:5e:f9: 72:1b:9f:62:18:de:e9:fc:13:4d:93:8c:18:fc:33: 0c:6f:5d:09:45:38:ae:fb:e9:53:14:06:2c:1a:6a: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E4:8B:8E:40:C2:75:EB:B5:BD:AD:56:84:FE:5A:D2:8E:77:87:E1 X509v3 Authority Key Identifier: keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a1:d7:fc:67:3a:f0:73:7d:26:58:7b:f2:76:2c:e0:70:ea: 60:31:b3:dd:e9:6d:e2:e1:bc:1d:fc:65:ab:d9:1c:f5:81:80: e5:04:09:47:b4:a8:d5:dd:b6:fc:17:9e:63:af:f4:40:f9:4e: 87:8b:20:09:76:a2:04:23:0a:6c:47:96:3f:ff:5b:b1:5e:74: 12:56:c3:1d:b6:91:dd:c4:38:9b:f2:9f:3f:75:2c:42:bb:c2: db:dd:f9:3c:de:53:82:81:6e:3e:58:4c:e2:12:20:1b:20:c7: f8:06:6a:d6:96:2b:91:69:fa:0d:b8:e3:2d:8e:3a:bb:19:6c: de:3b:41:6d:2d:0a:b7:08:ad:7e:75:a8:37:10:ed:f5:9c:18: 33:a5:e8:21:f4:08:2c:bf:0f:e8:36:56:8a:97:19:2f:df:7b: df:a4:2a:45:58:0f:62:cb:18:65:62:c8:92:4d:c0:db:93:d5: f3:35:11:6a:a2:cc:49:32:1a:29:92:64:9b:18:e4:0b:8b:a6: 7f:3b:60:f4:1d:b6:1b:b8:fb:b1:f2:37:77:fc:52:e9:55:39: c1:93:0f:f3:29:cc:32:f3:cd:fd:5b:60:42:cc:cb:3c:76:30: 00:dd:35:50:0e:99:b6:8f:54:65:5a:91:aa:4c:75:15:fb:7d: 06:3e:2c:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDRFMjExMC8GA1UEBRMoMzZENUFENkUxMjZDRDVCMThFQzE0NUJDNzcyRjQ5MDBG OTRDQTZCQzAeFw0yNTEyMDUwNTQwMzNaFw0yNTEyMTIwNTQwMzNaMBgxFjAUBgNV BAMTDTY5MzI3MDUyLWRjNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVo8LDTG/EH5FIW3GxWOZcqXKCtPrCMKJ9Cy2dLHbgoKs3MLl5/gAVeHORwCLm hcSucBYhV2RVfp9zmbXJX3ysU+JKzZvJvmLvOFqtkN6NJDK+1yW1JdgJun9NFHQh 0cnjWKizF1rD2jq/clXU/TZ9g89VkIvu2fLj7FLCu0jel5Qrxs9YqBl/K5arqewV 7zGZ1p1cHy3mBF2w2jSGGK+8fH3NKooubq448h0F0ttMpHf/BiSikm0vLXsALhTK XYEPQ790WLzAYGTb0AUCYc4kLJNy+kKgxtVnJRP/hiBe+XIbn2IY3un8E02TjBj8 MwxvXQlFOK776VMUBiwaauh9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvuSLjkDC deu1va1WhP5a0o53h+EwHwYDVR0jBBgwFoAUNtWtbhJs1bGOwUW8dy9JAPlMprww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzFGREIwRjNFQUVE QTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJHT3dVVzhkeTlKQVBsTXBy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnRXdGJoSnMxYkdPd1VXOGR5OUpBUGxNcHJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NEUyLzFGREIwRjNFQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJH T3dVVzhkeTlKQVBsTXBydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeh1/xnOvBzfSZYe/J2LOBw6mAxs93pbeLhvB38ZavZHPWBgOUECUe0 qNXdtvwXnmOv9ED5ToeLIAl2ogQjCmxHlj//W7FedBJWwx22kd3EOJvynz91LEK7 wtvd+TzeU4KBbj5YTOISIBsgx/gGataWK5Fp+g244y2OOrsZbN47QW0tCrcIrX51 qDcQ7fWcGDOl6CH0CCy/D+g2VoqXGS/fe9+kKkVYD2LLGGViyJJNwNuT1fM1EWqi zEkyGimSZJsY5AuLpn87YPQdthu4+7HyN3f8UulVOcGTD/MpzDLzzf1bYELMyzx2 MADdNVAOmbaPVGVakapMdRX7fQY+LP0= -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:08 2025 by rpki-client