This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: OHL4FHi6w1ZBCRq/GXHQEEd1WCpfeWALljgRzvxIhfM= Subject key identifier: CB:34:91:CE:CD:12:24:80:7A:74:BA:1F:F1:13:CF:78:5F:E6:0D:64 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 02D2 Signing time: Wed 10 Dec 2025 23:44:20 +0000 Manifest this update: Wed 10 Dec 2025 23:44:20 +0000 Manifest next update: Wed 17 Dec 2025 23:44:20 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: XwWWbNkt9sl5CXyNM1Hx8YfLn4MyadSNej/ZXIribKo=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: CEfMKREa1ZAXvKW/qUPDnjrCIBcW6uxSr04LzHPmGnQ=) 3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: IATepVmo1KvC0hGjJmst1dGBkl9Ds09b6R3QzisHd5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 23:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Dec 10 23:44:20 2025 GMT Not After : Dec 17 23:44:20 2025 GMT Subject: CN=693a05d4-e440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:86:1c:ce:2a:4f:f5:43:7f:db:e7:6b:4a: 86:5f:b2:c5:bf:b6:d0:c3:5d:d1:f1:ef:48:74:b9: d3:ff:5e:24:75:2a:66:f3:0a:c5:f1:4c:1d:3d:fb: 11:4b:b6:39:a0:2e:73:35:09:cd:98:f1:5c:a7:77: bc:c7:2b:a8:6f:0e:aa:1c:68:49:19:e9:40:be:1f: bd:fe:31:95:ef:ae:97:ed:eb:6c:da:84:ef:c5:42: 9a:50:06:b8:ca:d0:63:55:4d:7b:13:ff:c2:fe:4f: 27:82:88:92:d0:e2:67:f3:06:d2:c4:fc:07:06:ee: a3:25:01:16:36:0d:f1:d0:4b:25:58:7d:26:73:ff: 24:89:49:6e:e6:2b:c5:00:02:03:88:fd:3d:28:48: 35:c3:57:56:fa:ad:b3:9a:85:49:b1:39:8f:b8:9e: fb:f1:82:98:76:9f:8d:8c:56:20:5e:18:44:56:86: 1e:1a:4b:3b:d9:c8:7c:16:d0:99:20:a4:f8:30:62: f6:de:84:60:f8:79:cb:a4:fd:8b:6c:ac:d6:d6:30: 2e:ce:2f:d2:3c:53:33:b8:50:87:e6:db:70:f3:b9: 37:be:e3:2f:14:38:be:c9:89:d4:50:f0:36:5d:49: da:c2:aa:c6:58:e2:74:4d:0c:76:09:62:49:46:df: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:34:91:CE:CD:12:24:80:7A:74:BA:1F:F1:13:CF:78:5F:E6:0D:64 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:20:45:69:37:2d:d2:50:ac:5d:96:8a:24:3c:d6:da:40:cf: a0:62:e6:f3:28:ec:b2:bc:c8:0c:6b:4b:7c:97:8a:5b:e0:ee: 37:6a:a0:b6:4b:bb:2e:af:58:d7:09:df:6a:ad:d9:fc:9f:54: 19:44:d9:2b:8b:0b:f3:5a:0d:6d:fc:b3:9f:13:9b:3f:90:83: 29:11:f5:c0:de:8f:ed:e5:c6:5b:4f:fa:20:d0:87:fc:fd:c8: 49:c1:20:ca:5d:97:aa:96:46:5d:b6:e9:df:19:f1:af:7c:f1: 38:66:a3:8e:5f:96:e0:e5:01:1b:9f:77:4f:f4:3f:09:2c:5f: 72:70:f1:96:44:0f:6b:82:26:67:fb:87:76:46:e6:ef:89:03: 4b:19:5c:38:c0:b6:0d:67:b9:8c:e3:f5:83:1b:7e:e8:b3:2d: a0:8f:df:58:66:87:38:58:48:80:50:5a:5e:78:71:49:05:99: 4a:28:5f:9e:a9:fe:7b:90:52:29:6e:0e:0c:55:3b:89:3c:f7: 3b:96:a2:7c:4c:fc:c8:50:35:b2:d1:84:e6:94:9a:5d:d7:65: 47:68:e7:2f:e1:0c:bd:db:70:fe:8e:5a:16:ae:b5:44:be:f3: db:9c:09:54:d3:df:70:bd:31:7e:83:aa:d4:7f:77:2f:a6:43: 55:42:fc:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjUxMjEwMjM0NDIwWhcNMjUxMjE3MjM0NDIwWjAYMRYwFAYD VQQDEw02OTNhMDVkNC1lNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYKGHM4qT/VDf9vna0qGX7LFv7bQw13R8e9IdLnT/14kdSpm8wrF8UwdPfsR S7Y5oC5zNQnNmPFcp3e8xyuobw6qHGhJGelAvh+9/jGV766X7ets2oTvxUKaUAa4 ytBjVU17E//C/k8ngoiS0OJn8wbSxPwHBu6jJQEWNg3x0EslWH0mc/8kiUlu5ivF AAIDiP09KEg1w1dW+q2zmoVJsTmPuJ778YKYdp+NjFYgXhhEVoYeGks72ch8FtCZ IKT4MGL23oRg+HnLpP2LbKzW1jAuzi/SPFMzuFCH5ttw87k3vuMvFDi+yYnUUPA2 XUnawqrGWOJ0TQx2CWJJRt+lBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs0kc7N EiSAenS6H/ETz3hf5g1kMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBIEVpNy3SUKxdlookPNbaQM+gYubzKOyyvMgMa0t8l4pb4O43aqC2 S7sur1jXCd9qrdn8n1QZRNkriwvzWg1t/LOfE5s/kIMpEfXA3o/t5cZbT/og0If8 /chJwSDKXZeqlkZdtunfGfGvfPE4ZqOOX5bg5QEbn3dP9D8JLF9ycPGWRA9rgiZn +4d2RubviQNLGVw4wLYNZ7mM4/WDG37osy2gj99YZoc4WEiAUFpeeHFJBZlKKF+e qf57kFIpbg4MVTuJPPc7lqJ8TPzIUDWy0YTmlJpd12VHaOcv4Qy923D+jloWrrVE vvPbnAlU099wvTF+g6rUf3cvpkNVQvwN -----END CERTIFICATE-----Generated at Fri Dec 12 11:26:24 2025 by rpki-client