This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: KVh4f84eD8I0BJt6f+b8aSMeDotqzG5h3htjKZAfQRo= Subject key identifier: AF:66:6F:7A:D9:A6:43:5E:6E:28:13:7A:E9:2E:25:7E:BE:76:64:BC Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 0913 Signing time: Mon 08 Dec 2025 19:31:08 +0000 Manifest this update: Mon 08 Dec 2025 19:31:08 +0000 Manifest next update: Mon 15 Dec 2025 19:31:08 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: MdL9ZENELSCER4xNfIOlDD8bul1Olz44oQplKE2xZV4=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: UE5+ErJEcnaRAzrTj0O4uJaAR4eaT67kWYQs9QGi9rM=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: LDyZCEh4lHkU/m1TvJhILb1LRL3feZ7tdaVfK9q/FJE=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: d9vZgZrOvFQ4TRJSBIsKc/8yFGao6z4V3n1WpvXvkS8=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: UMY2SMXz/mJaifHHi29M/g1LYVd8AUhMyEaWSsVqYYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: Dec 8 19:31:08 2025 GMT Not After : Dec 15 19:31:08 2025 GMT Subject: CN=6937277c-5ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:cf:37:85:0f:36:45:b6:c8:01:ed:4d:c6: cf:44:fc:8b:6c:83:71:66:a5:8e:65:a1:67:42:b6: 9c:47:75:fa:0c:51:d0:32:a7:c4:6d:40:35:29:93: 46:71:ec:f3:dd:26:63:5b:20:31:61:7c:57:74:e4: 2b:cd:80:ab:6a:fe:f8:84:80:64:39:42:bb:a8:fd: cd:3d:35:fe:3e:11:32:ae:a7:b3:4d:eb:d1:94:bf: 76:89:be:87:2a:bb:de:48:12:36:21:f2:fb:55:c5: cc:be:50:b5:7a:81:8a:b8:a8:0c:b3:cc:a3:c2:e2: 72:6f:60:c9:6b:2b:52:d6:7b:8f:33:b7:6d:fe:15: 12:33:18:99:0c:ce:0e:8a:eb:1f:e7:67:1e:0f:b1: 71:23:de:95:ac:b8:8d:4c:8e:c6:44:73:40:71:49: 22:94:8f:70:da:9f:cc:b5:00:ca:0e:4d:73:96:cc: 59:aa:4d:d4:1f:ce:7b:7d:f5:4c:f7:93:ce:6a:01: ec:bb:7a:ec:55:59:3f:b5:33:ca:5f:13:7a:e3:5a: 9e:4e:ac:50:aa:fe:8d:e9:f4:c2:6e:3e:6c:1a:29: 53:69:5f:b9:d6:26:01:48:34:d6:d0:f5:01:18:4e: 31:58:35:2b:e9:fb:02:79:1b:78:e0:30:2e:65:cf: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:66:6F:7A:D9:A6:43:5E:6E:28:13:7A:E9:2E:25:7E:BE:76:64:BC X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:92:21:bd:d9:88:7b:a9:11:4a:e4:d0:f3:ef:07:ec:4d:e9: be:77:fd:09:e8:3b:64:0c:66:31:ca:3f:97:f7:f8:22:90:75: ad:9a:3a:b3:dd:e2:02:ec:ef:f5:c4:c3:ca:2a:cc:f7:26:5f: b2:d2:22:d8:29:73:ae:6b:2e:2e:72:7f:c1:d4:f9:10:e6:fe: 14:6d:85:7a:73:54:be:74:9f:3a:55:1e:b1:09:ed:a0:46:a9: 01:84:e6:c0:ed:b0:0d:c2:24:ce:de:38:ae:00:63:62:c7:5c: 3b:0c:82:24:de:9d:55:50:c3:62:4d:e7:25:ba:37:28:23:03: 5f:c9:86:39:15:fb:9f:3b:77:36:4a:00:54:4f:97:67:b4:49: dd:5c:1a:e7:d6:45:c8:48:07:62:88:f6:3d:8a:c1:eb:33:f9: 75:80:bf:2c:e6:f8:32:de:9e:69:b8:bb:8a:51:2c:c9:95:23: 65:9a:22:36:27:ed:c9:ce:6f:4d:86:a0:13:f5:bb:58:08:4c: cc:1b:0c:4d:a3:68:58:e0:64:be:00:bd:00:5f:45:1e:21:fd: 41:c7:8b:b3:51:08:d9:e7:50:c2:64:26:60:dc:92:ee:ea:f4: 09:ad:47:74:f6:4c:60:12:c3:d0:8b:21:48:62:c3:aa:71:98: ca:8b:03:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUxMjA4MTkzMTA4WhcNMjUxMjE1MTkzMTA4WjAYMRYwFAYD VQQDEw02OTM3Mjc3Yy01YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6HPN4UPNkW2yAHtTcbPRPyLbINxZqWOZaFnQracR3X6DFHQMqfEbUA1KZNG cezz3SZjWyAxYXxXdOQrzYCrav74hIBkOUK7qP3NPTX+PhEyrqezTevRlL92ib6H KrveSBI2IfL7VcXMvlC1eoGKuKgMs8yjwuJyb2DJaytS1nuPM7dt/hUSMxiZDM4O iusf52ceD7FxI96VrLiNTI7GRHNAcUkilI9w2p/MtQDKDk1zlsxZqk3UH857ffVM 95POagHsu3rsVVk/tTPKXxN641qeTqxQqv6N6fTCbj5sGilTaV+51iYBSDTW0PUB GE4xWDUr6fsCeRt44DAuZc+XmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9mb3rZ pkNebigTeukuJX6+dmS8MB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVkiG92Yh7qRFK5NDz7wfsTem+d/0J6DtkDGYxyj+X9/gikHWtmjqz 3eIC7O/1xMPKKsz3Jl+y0iLYKXOuay4ucn/B1PkQ5v4UbYV6c1S+dJ86VR6xCe2g RqkBhObA7bANwiTO3jiuAGNix1w7DIIk3p1VUMNiTeclujcoIwNfyYY5FfufO3c2 SgBUT5dntEndXBrn1kXISAdiiPY9isHrM/l1gL8s5vgy3p5puLuKUSzJlSNlmiI2 J+3Jzm9NhqAT9btYCEzMGwxNo2hY4GS+AL0AX0UeIf1Bx4uzUQjZ51DCZCZg3JLu 6vQJrUd09kxgEsPQiyFIYsOqcZjKiwMQ -----END CERTIFICATE-----Generated at Wed Dec 10 04:58:43 2025 by rpki-client