This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: HTxVlQtzIoUwqMB47YTxAdjNob15L9+WwyoVY4cU4Xs= Subject key identifier: 09:6B:D1:A6:FF:EF:AC:9A:B4:FD:AB:44:43:99:DE:10:28:BD:1B:0E Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0CB7 Signing time: Mon 22 Dec 2025 17:59:18 +0000 Manifest this update: Mon 22 Dec 2025 17:59:17 +0000 Manifest next update: Mon 29 Dec 2025 17:59:17 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: kJCA1bkH9+Oup+ICiw+hXEUyns22tMLBm64p1E3F/YY=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: d6//197VwKUEGCCi57OGEoYRH4hCYPE3ASRgotgi1ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Dec 22 17:59:17 2025 GMT Not After : Dec 29 17:59:17 2025 GMT Subject: CN=694986f6-f6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:ff:d3:01:7b:fa:49:6f:c6:c3:06:0a:13: 77:4a:4f:cc:4d:05:5c:5e:a8:25:f5:de:7c:db:cd: ca:ec:fa:bd:fb:62:9c:df:46:83:e9:ac:b0:d1:f0: 1c:18:82:b8:00:4f:3f:df:7a:b7:4e:68:09:b7:c7: b7:d9:4e:52:47:54:cf:43:17:6f:6f:d4:c4:bf:89: 21:cb:47:03:5e:4a:04:17:fe:91:c4:63:39:9d:16: 64:7c:24:27:f7:da:ff:5c:a1:bf:b6:84:8a:e6:b0: 78:d9:9e:16:37:6e:cf:1c:e4:04:54:8d:88:53:94: 75:d1:3f:32:03:87:77:71:b1:d3:aa:b0:c3:d7:62: f7:b2:22:25:4d:3d:ef:cb:bf:f3:ce:1b:d1:c2:26: 2e:f3:ce:4e:32:1d:29:58:69:25:b8:ff:9e:95:c9: a0:e7:8b:12:e3:67:12:8c:33:82:e1:25:18:67:4b: 71:01:9d:98:6c:68:3d:eb:cd:f6:f8:8c:95:86:75: a1:37:4a:90:48:16:8e:41:c2:cf:60:12:da:95:f5: cb:eb:41:ec:cc:0e:13:91:5c:d7:ef:6c:e3:7a:c3: e9:18:a5:ac:94:07:71:84:5b:35:9e:90:17:e0:c8: 95:75:2a:0b:63:6b:64:20:63:3b:24:eb:c1:27:3b: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6B:D1:A6:FF:EF:AC:9A:B4:FD:AB:44:43:99:DE:10:28:BD:1B:0E X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d6:24:8d:39:0c:1f:c2:31:db:a3:42:ed:eb:0c:a7:13:04: cd:45:a2:fb:91:01:1a:60:6b:9c:e0:92:6c:55:98:eb:15:5d: 08:b3:62:f1:12:5c:c4:12:5a:23:c3:c7:5f:90:9a:00:6a:94: 08:1a:27:7d:fb:44:c4:4c:c1:02:89:b8:23:6f:73:d3:c7:63: 26:f6:bf:6d:ea:9f:70:c5:91:3f:86:db:fe:e5:e2:1b:f4:2a: e6:18:ac:88:1a:e5:92:20:6e:bf:c2:c7:eb:d9:60:c8:99:e0: c2:2b:12:73:45:b6:00:c1:f2:ac:4d:96:99:6c:cd:b7:4b:56: f8:76:10:15:ad:83:15:9e:d2:07:ff:c4:c6:db:29:07:c5:92: 5c:d3:5d:f5:8d:a2:6e:17:28:61:68:47:18:70:32:17:cc:8f: a6:93:50:20:5d:2a:e2:5a:9c:e2:bd:3d:8c:d9:f8:f8:4f:73: 18:7b:33:90:6b:50:be:df:bd:8f:9f:b6:5b:d0:50:7c:fa:20: ed:4d:28:ea:13:63:32:39:f8:4b:29:d2:a6:b2:89:7f:4f:7c: a0:58:66:49:57:08:eb:af:81:82:f0:3f:be:c2:ec:65:1d:77: e5:3d:49:40:64:0f:b2:60:fb:13:86:9d:16:4b:a5:82:03:9d: ee:98:fa:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUxMjIyMTc1OTE3WhcNMjUxMjI5MTc1OTE3WjAYMRYwFAYD VQQDDA02OTQ5ODZmNi1mNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15f/0wF7+klvxsMGChN3Sk/MTQVcXqgl9d58283K7Pq9+2Kc30aD6ayw0fAc GIK4AE8/33q3TmgJt8e32U5SR1TPQxdvb9TEv4khy0cDXkoEF/6RxGM5nRZkfCQn 99r/XKG/toSK5rB42Z4WN27PHOQEVI2IU5R10T8yA4d3cbHTqrDD12L3siIlTT3v y7/zzhvRwiYu885OMh0pWGkluP+elcmg54sS42cSjDOC4SUYZ0txAZ2YbGg96832 +IyVhnWhN0qQSBaOQcLPYBLalfXL60HszA4TkVzX72zjesPpGKWslAdxhFs1npAX 4MiVdSoLY2tkIGM7JOvBJzvffQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlr0ab/ 76yatP2rREOZ3hAovRsOMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl1iSNOQwfwjHbo0Lt6wynEwTNRaL7kQEaYGuc4JJsVZjrFV0Is2Lx ElzEElojw8dfkJoAapQIGid9+0TETMECibgjb3PTx2Mm9r9t6p9wxZE/htv+5eIb 9CrmGKyIGuWSIG6/wsfr2WDImeDCKxJzRbYAwfKsTZaZbM23S1b4dhAVrYMVntIH /8TG2ykHxZJc0131jaJuFyhhaEcYcDIXzI+mk1AgXSriWpzivT2M2fj4T3MYezOQ a1C+372Pn7Zb0FB8+iDtTSjqE2MyOfhLKdKmsol/T3ygWGZJVwjrr4GC8D++wuxl HXflPUlAZA+yYPsThp0WS6WCA53umPp5 -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:43 2025 by rpki-client