This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: guYuPRJzgbVri5PXOKzep6HDKyUfNF0UhoeQxijtc6k= Subject key identifier: ED:AA:09:A3:E7:3C:E1:03:18:60:F6:5D:5D:85:18:27:8E:A4:C3:23 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 019A Signing time: Tue 09 Dec 2025 01:59:39 +0000 Manifest this update: Tue 09 Dec 2025 01:59:39 +0000 Manifest next update: Tue 16 Dec 2025 01:59:39 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: c9N/qy5ZVTRZlAaujAJsB3jaMy7ZHkXDtgWBdS+m+Fw=) 2: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: KOUKQ6BoYe+OZvts9QDaZtXw/6SYWRIeerxskHjMAvw=) 3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: ZO+BY1B+XgvoW0KKoO0apsMteX7veM0k8UtwvOCudts=) 4: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: g1HOTpLTf3sk5gSzo54dPs52/QkaTA4XgGi9Wow0trs=) 6: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 7: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 8: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 01:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Dec 9 01:59:39 2025 GMT Not After : Dec 16 01:59:39 2025 GMT Subject: CN=6937828b-3719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:d2:0a:c2:90:cd:d2:88:ad:c9:49:26:12: c7:2c:7f:1b:59:99:27:4f:78:cb:10:f9:1e:4d:25: 4e:73:c4:b4:ea:59:dd:fc:a0:60:e0:3e:0b:2f:fa: ee:b1:4e:b2:b9:94:54:a0:a4:38:ef:ad:71:21:bf: cb:cc:99:b9:dd:09:0d:f1:13:a9:df:f0:0b:d3:15: 46:ef:25:e0:8c:16:28:cb:2e:24:b8:5d:fa:ed:b7: 61:2c:f3:eb:bf:51:66:a6:41:52:45:d7:83:68:37: a6:9b:b0:ee:15:09:dd:bc:8f:5e:1e:e5:73:5b:37: 4b:08:2b:6c:10:73:3f:16:50:89:ad:a1:ca:e0:ed: 57:fd:15:de:ce:ae:46:b6:47:36:88:f1:66:bc:2c: 74:9a:8d:98:9a:e6:6b:aa:b1:f7:59:3e:b4:ed:0f: e0:d1:0f:f4:d1:f7:8b:45:26:ec:7b:59:07:6f:01: c5:b7:06:1e:81:be:f3:05:2f:5d:85:4f:11:48:a3: 26:6a:51:64:c7:d8:92:68:c2:d1:5e:6a:85:80:9d: 46:07:d0:f0:73:83:86:ac:3a:9b:4b:3f:11:60:e7: 55:79:05:44:a3:68:dc:b2:65:2f:39:a8:da:52:82: c5:66:56:e9:f9:5f:a1:7b:ca:25:34:ad:6f:fc:8f: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AA:09:A3:E7:3C:E1:03:18:60:F6:5D:5D:85:18:27:8E:A4:C3:23 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0e:93:0a:06:b8:80:f0:f4:5a:7c:3f:57:47:e8:09:2e:b4: d1:b5:ba:37:72:d6:9d:cf:1e:c3:97:25:e5:dc:af:e6:28:39: d0:bf:73:8f:bf:75:7c:c0:c2:55:3a:df:fd:09:d8:48:22:a6: 08:d7:11:b3:60:21:af:74:74:8e:b6:81:0c:09:c7:90:0c:62: 6e:46:88:f0:69:79:21:38:43:51:90:5b:f9:4a:dc:75:5c:57: f0:1c:d0:d1:e7:b9:e6:ef:07:9e:d8:b7:f4:a5:ac:88:e7:6a: 4f:c5:5a:52:4f:a0:2a:98:c0:23:cf:3c:3a:a3:c1:33:2f:73: 72:2d:87:eb:bc:49:f2:51:66:7e:ea:bb:6f:34:9c:ba:0e:54: 84:2f:e9:3f:06:cb:6a:f6:c6:fb:54:11:26:8e:08:96:4a:75: 64:38:57:12:56:5c:88:c2:a4:b1:58:57:b2:b1:c0:74:b3:2b: ff:15:ab:dd:1b:72:6c:cb:03:43:1b:46:b9:01:88:eb:9f:d8: 02:61:d9:d4:ec:e3:dd:6c:13:19:86:25:a0:38:3e:cd:c2:55: b3:4c:a3:15:88:3a:aa:06:ab:c6:46:73:9e:77:b2:66:90:49: 68:ea:e9:86:c4:6c:4b:14:b3:78:71:ec:b1:b4:22:4e:23:3d: 6a:94:6a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUxMjA5MDE1OTM5WhcNMjUxMjE2MDE1OTM5WjAYMRYwFAYD VQQDEw02OTM3ODI4Yi0zNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwjSCsKQzdKIrclJJhLHLH8bWZknT3jLEPkeTSVOc8S06lnd/KBg4D4LL/ru sU6yuZRUoKQ4761xIb/LzJm53QkN8ROp3/AL0xVG7yXgjBYoyy4kuF367bdhLPPr v1FmpkFSRdeDaDemm7DuFQndvI9eHuVzWzdLCCtsEHM/FlCJraHK4O1X/RXezq5G tkc2iPFmvCx0mo2YmuZrqrH3WT607Q/g0Q/00feLRSbse1kHbwHFtwYegb7zBS9d hU8RSKMmalFkx9iSaMLRXmqFgJ1GB9Dwc4OGrDqbSz8RYOdVeQVEo2jcsmUvOaja UoLFZlbp+V+he8olNK1v/I/qCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2qCaPn POEDGGD2XV2FGCeOpMMjMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfDpMKBriA8PRafD9XR+gJLrTRtbo3ctadzx7DlyXl3K/mKDnQv3OP v3V8wMJVOt/9CdhIIqYI1xGzYCGvdHSOtoEMCceQDGJuRojwaXkhOENRkFv5Stx1 XFfwHNDR57nm7wee2Lf0payI52pPxVpST6AqmMAjzzw6o8EzL3NyLYfrvEnyUWZ+ 6rtvNJy6DlSEL+k/Bstq9sb7VBEmjgiWSnVkOFcSVlyIwqSxWFeyscB0syv/Favd G3JsywNDG0a5AYjrn9gCYdnU7OPdbBMZhiWgOD7NwlWzTKMViDqqBqvGRnOed7Jm kElo6umGxGxLFLN4ceyxtCJOIz1qlGrn -----END CERTIFICATE-----Generated at Thu Dec 11 19:42:02 2025 by rpki-client