This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: oFmzh/ECoNgK9sWjS/dK8yplmUtnyz8srTutkv/lww4= Subject key identifier: 8F:19:9A:07:5A:22:B0:39:C0:70:97:0B:7A:75:9F:6B:4D:27:EA:90 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 5B Signing time: Tue 23 Dec 2025 05:59:23 +0000 Manifest this update: Tue 23 Dec 2025 05:59:23 +0000 Manifest next update: Tue 30 Dec 2025 05:59:23 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: 7M5GpiTAZEFLqllCvxGf1Fb/cMB5TNWug6Rp84OSNnA=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Dec 23 05:59:23 2025 GMT Not After : Dec 30 05:59:23 2025 GMT Subject: CN=694a2fbb-a11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:a0:e6:e1:91:32:4d:eb:8b:54:81:ac:36: 8f:30:7a:4c:c7:75:09:d7:db:0e:03:aa:15:47:91: 59:a3:5b:c0:f6:7a:ea:68:7a:61:31:f0:4b:de:30: 96:f4:95:36:7d:25:8b:19:45:d3:f2:24:ef:b7:65: 42:1a:99:e6:4b:e9:d4:6b:58:52:44:e8:6b:ee:c7: 4d:b1:a6:c0:f0:b9:47:d2:22:e5:ef:3d:c9:0d:89: 28:29:19:dc:5e:d3:83:96:60:37:60:57:ab:03:71: 73:dc:c6:1b:f6:35:4b:49:88:6a:ee:21:2a:d5:e3: 7b:15:d9:8a:63:26:77:82:fb:60:0f:4f:7b:e7:1c: 6b:70:c6:b7:4f:be:1a:db:de:06:4c:96:10:17:e7: e6:b5:e4:a3:b9:4b:e4:c7:87:2f:6b:cc:0c:c7:00: 6d:4d:3d:8f:13:67:72:76:1f:fd:16:b8:c8:d4:e2: 83:d9:34:bf:06:3d:09:fa:aa:2c:f8:42:c2:8d:0f: 70:c0:69:31:b0:33:a6:88:94:17:3d:69:62:bb:7d: 85:c7:c8:c9:32:5d:ab:83:ee:53:21:3e:01:fa:b6: 47:25:94:c2:55:b0:64:d1:ae:58:d4:fa:c4:42:ab: 16:03:f1:45:57:09:5a:44:94:f9:18:d3:c3:ea:29: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:19:9A:07:5A:22:B0:39:C0:70:97:0B:7A:75:9F:6B:4D:27:EA:90 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:50:8e:5d:2c:c4:5b:df:24:41:b1:b2:3d:37:c9:a7:f0:87: bf:b9:3e:bc:7d:9f:7c:ac:db:0f:05:31:a5:53:6f:2f:7e:2b: 92:f2:00:5d:6c:5e:a4:37:44:7c:ee:11:5b:1d:96:73:c9:b9: b8:23:4c:b6:81:13:b6:ee:e8:ef:e0:3b:bd:cc:3f:00:82:47: 6e:32:7a:93:ee:97:aa:82:fa:c4:d6:80:f0:db:cd:b0:a9:b3: 5f:2a:55:65:9e:c2:4f:4e:80:4a:2d:de:4e:be:2f:4e:e6:b7: 89:2a:3e:81:39:78:12:19:f0:5a:f8:65:04:c8:6e:e0:28:00: 24:c9:4f:2a:c6:32:f3:cb:0a:df:5f:1d:4b:ec:7f:b0:c6:bf: 62:e4:52:35:f8:95:88:79:98:f6:d7:bf:ee:35:00:86:f7:6f: 10:a9:0e:60:d1:75:4c:3a:34:c6:47:04:01:64:66:18:e9:92: fb:67:dc:3f:23:98:d7:66:fc:55:fc:e5:9f:c6:a2:d3:9e:bb: 25:16:6c:c2:af:a9:99:85:98:e7:f9:fe:e3:4d:32:5b:cb:16: 0e:6f:31:5c:4a:1c:c6:96:77:96:e2:ba:49:c9:d2:a4:3e:7c: fb:90:5b:ab:52:a2:0d:35:45:d9:63:91:a8:e9:49:f3:15:95: 32:d6:3b:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTEyMjMwNTU5MjNaFw0yNTEyMzAwNTU5MjNaMBgxFjAUBgNV BAMMDTY5NGEyZmJiLWExMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAtqDm4ZEyTeuLVIGsNo8wekzHdQnX2w4DqhVHkVmjW8D2eupoemEx8EveMJb0 lTZ9JYsZRdPyJO+3ZUIameZL6dRrWFJE6Gvux02xpsDwuUfSIuXvPckNiSgpGdxe 04OWYDdgV6sDcXPcxhv2NUtJiGruISrV43sV2YpjJneC+2APT3vnHGtwxrdPvhrb 3gZMlhAX5+a15KO5S+THhy9rzAzHAG1NPY8TZ3J2H/0WuMjU4oPZNL8GPQn6qiz4 QsKND3DAaTGwM6aIlBc9aWK7fYXHyMkyXauD7lMhPgH6tkcllMJVsGTRrljU+sRC qxYD8UVXCVpElPkY08PqKXMRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjxmaB1oi sDnAcJcLenWfa00n6pAwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OTBGL0QzNUFDNjNFNTRBRTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhr dTB3cmw0OWtuMFljNmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBQjl0sxFvfJEGxsj03yafwh7+5Prx9n3ys2w8FMaVTby9+K5LyAF1s XqQ3RHzuEVsdlnPJubgjTLaBE7bu6O/gO73MPwCCR24yepPul6qC+sTWgPDbzbCp s18qVWWewk9OgEot3k6+L07mt4kqPoE5eBIZ8Fr4ZQTIbuAoACTJTyrGMvPLCt9f HUvsf7DGv2LkUjX4lYh5mPbXv+41AIb3bxCpDmDRdUw6NMZHBAFkZhjpkvtn3D8j mNdm/FX85Z/GotOeuyUWbMKvqZmFmOf5/uNNMlvLFg5vMVxKHMaWd5biuknJ0qQ+ fPuQW6tSog01RdljkajpSfMVlTLWO74= -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:08 2025 by rpki-client