This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: jk6Az0bberw3rBzLxn9SaJZTBzo9Kkb30Uq8q0svWTk= Subject key identifier: CD:96:CA:86:0A:38:CD:EA:59:98:5B:A3:8D:8C:54:ED:71:D6:7A:AD Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1E3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1E2F Signing time: Mon 22 Dec 2025 15:53:38 +0000 Manifest this update: Mon 22 Dec 2025 15:53:38 +0000 Manifest next update: Mon 29 Dec 2025 15:53:38 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: KJgyJXI5MH8g80F4fIdrngoMOlXywqg5LgKY9761X78=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7741 (0x1e3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Dec 22 15:53:38 2025 GMT Not After : Dec 29 15:53:38 2025 GMT Subject: CN=69496982-dda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:c6:68:b1:32:3d:cf:d1:3b:ed:53:69:85: ba:a0:a0:c8:25:07:b5:d6:12:44:20:f5:58:06:6a: 69:bc:42:4e:82:2a:7d:04:21:1d:b4:f9:bd:e9:09: d9:9f:39:e6:04:68:67:39:39:d1:f5:74:74:0d:b1: 7d:ef:7b:db:4b:0e:0b:47:7f:45:f0:86:5b:61:9a: b2:e6:98:19:c5:42:85:0f:82:21:42:70:a9:cd:4d: 9f:68:24:e9:cf:99:26:04:da:2a:33:76:b8:f8:40: ea:2a:96:0d:a6:1f:54:0e:9b:1d:9f:00:18:52:28: 6f:8a:72:48:c5:f9:d2:3a:39:23:90:3e:b8:04:8e: 07:a2:bb:0e:09:7d:8f:5d:0d:5b:a4:eb:7e:23:43: e9:cf:d4:e3:c0:4f:f7:86:84:a5:ee:5e:2d:a4:c5: a5:7e:56:39:ae:fd:37:e1:a4:8a:c5:ce:d2:0e:62: 99:49:d4:24:61:0b:30:e4:e7:2c:58:02:a9:3e:24: 1d:fd:f3:e5:1b:4c:6c:5b:e9:ff:05:9d:4c:e9:aa: 3a:eb:05:fa:1f:0f:00:79:bc:71:72:72:77:fc:35: f0:ea:fa:2e:24:1e:45:4b:82:c4:12:a0:ec:4f:f7: 7e:33:55:64:92:d6:29:25:1b:3f:cc:cf:d2:b9:a6: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:96:CA:86:0A:38:CD:EA:59:98:5B:A3:8D:8C:54:ED:71:D6:7A:AD X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:70:0e:7d:f6:71:f4:3d:24:48:cf:59:97:ac:93:07:5e:64: e4:62:7e:8b:20:0e:bf:32:b6:54:70:26:7b:03:c1:4b:56:6f: 1f:a3:d4:a4:0c:99:4e:a9:8e:bb:1b:b9:a7:87:89:1f:e0:a1: 0a:7d:11:7e:9b:d6:53:72:d2:a0:6c:71:eb:0c:12:85:d7:11: b0:37:39:46:77:2b:97:68:e4:ae:38:70:6a:05:50:c7:cb:1a: 4c:35:b6:7e:1a:e8:81:75:d1:20:3e:f9:54:f1:47:1c:85:b2: 3d:a2:54:8a:18:81:94:f2:6b:d1:13:22:72:46:07:69:c9:40: d6:34:aa:8e:c1:bf:e8:1e:e2:cd:b0:9b:93:4f:91:18:e3:4c: 49:05:19:50:58:c3:74:de:4a:ae:d4:d4:06:e9:e5:18:14:9b: 0a:3c:77:4b:3e:30:2f:7a:6d:8f:47:c0:f4:be:87:2b:8e:0c: 09:30:87:89:b8:95:09:f7:37:19:2a:a3:50:24:b3:2e:9f:9f: a6:7d:5f:15:49:b6:2e:ed:4f:78:ea:b2:7c:df:d7:ac:96:89: f3:46:6e:36:29:9b:d4:43:63:04:b3:cf:56:94:bd:1c:ec:ff: c1:37:db:56:bf:f2:1e:1a:74:48:39:5c:03:48:1a:c7:32:97: f2:1b:fa:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUxMjIyMTU1MzM4WhcNMjUxMjI5MTU1MzM4WjAYMRYwFAYD VQQDDA02OTQ5Njk4Mi1kZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfDGaLEyPc/RO+1TaYW6oKDIJQe11hJEIPVYBmppvEJOgip9BCEdtPm96QnZ nznmBGhnOTnR9XR0DbF973vbSw4LR39F8IZbYZqy5pgZxUKFD4IhQnCpzU2faCTp z5kmBNoqM3a4+EDqKpYNph9UDpsdnwAYUihvinJIxfnSOjkjkD64BI4HorsOCX2P XQ1bpOt+I0Ppz9TjwE/3hoSl7l4tpMWlflY5rv034aSKxc7SDmKZSdQkYQsw5Ocs WAKpPiQd/fPlG0xsW+n/BZ1M6ao66wX6Hw8AebxxcnJ3/DXw6vouJB5FS4LEEqDs T/d+M1VkktYpJRs/zM/SuaY4hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2WyoYK OM3qWZhbo42MVO1x1nqtMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6cA599nH0PSRIz1mXrJMHXmTkYn6LIA6/MrZUcCZ7A8FLVm8fo9Sk DJlOqY67G7mnh4kf4KEKfRF+m9ZTctKgbHHrDBKF1xGwNzlGdyuXaOSuOHBqBVDH yxpMNbZ+GuiBddEgPvlU8UcchbI9olSKGIGU8mvREyJyRgdpyUDWNKqOwb/oHuLN sJuTT5EY40xJBRlQWMN03kqu1NQG6eUYFJsKPHdLPjAvem2PR8D0vocrjgwJMIeJ uJUJ9zcZKqNQJLMun5+mfV8VSbYu7U946rJ839eslonzRm42KZvUQ2MEs89WlL0c 7P/BN9tWv/IeGnRIOVwDSBrHMpfyG/pf -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:24 2025 by rpki-client