This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft File: NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json) Hash identifier: DmasGolsNMS3u6eNsXg1Y62Oby12JVYlroH4p1MRWQc= Subject key identifier: 67:B1:BE:25:AB:97:3C:8F:5E:D6:C9:F0:28:C5:9E:97:DB:5F:52:A5 Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B Certificate issuer: /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft Manifest number: 03 Signing time: Wed 03 Dec 2025 06:18:25 +0000 Manifest this update: Wed 03 Dec 2025 06:18:24 +0000 Manifest next update: Wed 10 Dec 2025 06:18:24 +0000 Files and hashes: 1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: 9aeeqP31SKp3YRX9imNffJWO3P59oP1wUM7FoMtvJGU=) 2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: 2Lc1FIKsjB7NXZkrDBswLhzcT+KlGRsME98+/KK0zhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Validity Not Before: Dec 3 06:18:24 2025 GMT Not After : Dec 10 06:18:24 2025 GMT Subject: CN=692fd631-9247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:d3:bd:49:5d:8b:70:73:39:da:80:c4:4c: b7:a0:c9:b2:b4:9b:9d:10:ee:52:39:b9:ee:8a:99: 42:ff:9d:95:9c:b3:e8:4e:79:58:a2:b0:21:97:7e: b8:95:aa:c2:4d:11:f5:fe:f7:ac:17:a3:d3:1a:1c: 98:74:a4:1b:3e:c2:dd:7f:2d:84:13:2c:d8:64:6f: c9:93:65:cd:44:24:f1:04:a3:fd:45:6c:f0:87:40: 8f:8b:66:c2:75:6c:7f:6c:dc:d4:b4:eb:53:d3:20: 0f:f2:46:5b:c5:85:ad:4b:cd:b6:78:47:9b:f9:b8: 0a:7e:1c:8a:63:ae:82:0a:4c:2f:13:cb:fe:55:1a: f3:81:86:e8:df:b6:86:25:38:a9:a4:e3:2a:45:ab: 13:da:8f:9f:f8:f6:40:39:9d:7e:cb:11:1e:05:61: 10:f2:f2:43:9d:72:bb:38:39:81:65:ea:05:3e:f2: 5f:b7:d6:50:ec:3b:c8:d8:f0:8d:47:c0:6d:06:4b: a2:f6:28:77:11:b2:b6:d3:b1:12:0b:43:5d:d9:a7: 2e:4b:ef:12:e0:61:06:ac:1a:35:68:5f:f9:d3:20: c3:ff:dc:72:2f:2b:ab:d4:f9:6e:0b:b4:55:df:08: 17:18:2b:a7:f2:96:c2:f0:34:3e:f5:02:c5:82:7f: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:BE:25:AB:97:3C:8F:5E:D6:C9:F0:28:C5:9E:97:DB:5F:52:A5 X509v3 Authority Key Identifier: keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bf:eb:4c:af:49:bb:73:e6:83:8c:da:44:e4:b3:92:4e:ec: d8:c7:ae:18:14:55:df:41:52:52:e8:7f:63:27:0f:e3:44:8e: be:10:68:df:56:3e:81:c6:53:5d:1d:7f:ea:e5:45:19:d7:5a: 60:c4:cc:38:97:bc:a0:e9:cd:aa:ae:a2:9c:9c:47:af:97:38: ba:dc:76:b4:a0:b6:43:09:48:74:ce:f1:c8:49:8f:39:f1:e2: 5d:d7:ad:83:02:a6:56:95:82:23:f0:06:67:c3:f2:66:04:68: a9:47:e2:53:99:1e:23:10:c9:88:68:a6:39:aa:dc:db:7e:38: 59:1e:4d:36:bd:8a:cd:ff:9b:e7:a4:6b:b1:25:9f:90:6f:6b: db:8a:39:25:4b:8d:64:1d:d0:77:2c:ae:9a:99:95:9d:dc:a0: 55:19:dd:e6:ee:9c:73:c9:a4:f9:45:af:91:f7:a0:10:97:b6: c4:ed:5e:9c:c8:21:6a:0e:60:3a:52:f3:14:01:91:d4:5a:da: 4e:e7:ae:34:d7:f8:5a:28:e7:82:ab:4e:61:82:2f:d7:85:45: ac:4a:82:1b:f6:64:b4:91:26:ae:ba:74:9b:db:cf:dd:42:13: 00:b0:cf:51:39:f5:a8:cc:c8:cb:9e:ff:b0:80:96:71:e0:35: f9:41:94:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwMTExMC8GA1UEBRMoMzQ4QjU0Q0ZGNzk5NjVFMjFCMkRCQUI5OUYyMTAxRTMx QTU2MEU5QjAeFw0yNTEyMDMwNjE4MjRaFw0yNTEyMTAwNjE4MjRaMBgxFjAUBgNV BAMTDTY5MmZkNjMxLTkyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7XtO9SV2LcHM52oDETLegybK0m50Q7lI5ue6KmUL/nZWcs+hOeViisCGXfriV qsJNEfX+96wXo9MaHJh0pBs+wt1/LYQTLNhkb8mTZc1EJPEEo/1FbPCHQI+LZsJ1 bH9s3NS061PTIA/yRlvFha1LzbZ4R5v5uAp+HIpjroIKTC8Ty/5VGvOBhujftoYl OKmk4ypFqxPaj5/49kA5nX7LER4FYRDy8kOdcrs4OYFl6gU+8l+31lDsO8jY8I1H wG0GS6L2KHcRsrbTsRILQ13Zpy5L7xLgYQasGjVoX/nTIMP/3HIvK6vU+W4LtFXf CBcYK6fylsLwND71AsWCfxnnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ7G+JauX PI9e1snwKMWel9tfUqUwHwYDVR0jBBgwFoAUNItUz/eZZeIbLbq5nyEB4xpWDpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTAxLzQ2OTI3RjE0Q0Y1 OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJYkxicTVueUVCNHhwV0Rw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkl0VXpfZVpaZUliTGJxNW55RUI0eHBXRHBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 RTAxLzQ2OTI3RjE0Q0Y1OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJ YkxicTVueUVCNHhwV0Rwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6/60yvSbtz5oOM2kTks5JO7NjHrhgUVd9BUlLof2MnD+NEjr4QaN9W PoHGU10df+rlRRnXWmDEzDiXvKDpzaquopycR6+XOLrcdrSgtkMJSHTO8chJjznx 4l3XrYMCplaVgiPwBmfD8mYEaKlH4lOZHiMQyYhopjmq3Nt+OFkeTTa9is3/m+ek a7Eln5Bva9uKOSVLjWQd0HcsrpqZlZ3coFUZ3ebunHPJpPlFr5H3oBCXtsTtXpzI IWoOYDpS8xQBkdRa2k7nrjTX+Foo54KrTmGCL9eFRaxKghv2ZLSRJq66dJvbz91C EwCwz1E59ajMyMue/7CAlnHgNflBlBI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:08 2025 by rpki-client