This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: dxXP0g534tvBuBHdWuLIeSMvqi29vBtQJIOXo4YJOjA= Subject key identifier: F6:BC:19:D9:33:D3:EA:FD:5F:36:81:53:05:B4:E7:56:4E:75:68:09 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C7F Signing time: Fri 12 Dec 2025 18:23:21 +0000 Manifest this update: Fri 12 Dec 2025 18:23:20 +0000 Manifest next update: Fri 19 Dec 2025 18:23:20 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: VLV1J5up/4eE0h1uVPCF9zCUSCmmJItwy+51AwHugFo=) 2: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 4: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 5: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 6: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 18:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Dec 12 18:23:20 2025 GMT Not After : Dec 19 18:23:20 2025 GMT Subject: CN=693c5d98-1c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:0e:ad:9a:51:47:2c:f6:7c:4d:13:64:e8: 48:02:f5:f7:79:a2:a0:65:d8:e2:12:ed:ba:99:c9: 67:d1:39:3a:6a:26:68:a0:e0:9b:7e:91:d2:a0:e6: b9:64:b5:42:8b:ad:d9:1f:b9:14:96:71:ff:4a:8a: f8:c1:03:d8:27:3f:13:4d:f4:b2:cd:7b:2d:15:30: 0a:69:1c:39:e4:da:7e:ef:04:f2:4e:7e:a9:2f:6f: 60:94:7c:a8:47:5a:63:1d:e2:9a:2a:df:14:b3:bc: 80:1c:2e:34:49:66:4e:c5:0b:c8:24:3b:27:c8:26: dc:ea:80:d1:37:7f:e4:bd:3f:8a:8a:06:3d:1c:32: 43:08:9b:52:8f:1f:da:4e:4e:bc:64:7d:82:82:33: e6:df:f5:cd:42:13:67:0e:f4:9b:e4:7a:ee:f8:0d: 06:9d:dc:6b:18:fc:ff:de:4e:e7:77:ea:d6:aa:47: bd:7a:0b:01:3c:c5:cb:85:86:77:31:b1:70:c7:6d: 91:fd:28:1a:f2:f6:38:1f:3b:c7:6b:f2:1a:27:6a: b6:76:a5:48:a5:ff:52:7d:fb:74:25:82:8d:fb:70: fb:20:90:ed:b2:3a:d5:09:15:e5:98:ab:b8:1c:b3: 79:d1:7a:ba:67:84:e5:85:35:84:e2:81:a7:a5:0b: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:19:D9:33:D3:EA:FD:5F:36:81:53:05:B4:E7:56:4E:75:68:09 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b7:24:f9:2b:62:06:30:cc:2a:50:d8:59:6e:ea:58:85:ba: 6f:95:cc:07:40:c4:05:a7:ac:49:c0:1d:0f:0f:2e:74:1f:a8: 44:7e:98:bb:9d:c0:a1:0f:ca:61:63:b8:fc:1e:3e:6b:b0:f1: 6a:ab:37:b6:4c:f1:a3:69:99:26:83:97:57:d6:e4:a8:59:14: 1e:62:a5:84:5b:e2:14:34:be:7c:6d:98:0f:99:59:1a:cb:83: d4:3c:dc:25:db:69:6b:06:11:e3:13:86:74:a8:58:44:a7:e9: 3c:38:1f:aa:71:16:c4:86:ed:4d:a1:18:71:22:c5:d2:8e:19: 3e:f9:28:f5:c0:15:49:cc:3f:a0:ee:85:e8:69:3b:a3:9c:97: b7:d5:37:ed:38:57:0a:64:fd:0d:60:d1:41:94:35:a5:67:47: 2b:55:f8:32:06:11:92:20:6b:d3:b6:75:de:2c:87:27:6d:83: 2d:bf:37:78:5f:25:2f:49:f3:c8:0c:0d:b5:3d:5b:3f:a1:20: e8:2e:81:4f:0b:b4:be:31:df:19:3b:38:5b:a6:d8:fd:40:f0: fc:92:ee:b1:52:ca:d1:53:59:aa:bb:3c:16:53:ef:04:48:36: c0:fc:bd:c6:a2:1f:06:af:a8:b9:43:fc:81:85:5b:3e:9b:b7: 97:82:dc:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUxMjEyMTgyMzIwWhcNMjUxMjE5MTgyMzIwWjAYMRYwFAYD VQQDDA02OTNjNWQ5OC0xYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkScOrZpRRyz2fE0TZOhIAvX3eaKgZdjiEu26mcln0Tk6aiZooOCbfpHSoOa5 ZLVCi63ZH7kUlnH/Sor4wQPYJz8TTfSyzXstFTAKaRw55Np+7wTyTn6pL29glHyo R1pjHeKaKt8Us7yAHC40SWZOxQvIJDsnyCbc6oDRN3/kvT+KigY9HDJDCJtSjx/a Tk68ZH2CgjPm3/XNQhNnDvSb5Hru+A0GndxrGPz/3k7nd+rWqke9egsBPMXLhYZ3 MbFwx22R/Sga8vY4HzvHa/IaJ2q2dqVIpf9Sfft0JYKN+3D7IJDtsjrVCRXlmKu4 HLN50Xq6Z4TlhTWE4oGnpQvHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa8Gdkz 0+r9XzaBUwW051ZOdWgJMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgtyT5K2IGMMwqUNhZbupYhbpvlcwHQMQFp6xJwB0PDy50H6hEfpi7 ncChD8phY7j8Hj5rsPFqqze2TPGjaZkmg5dX1uSoWRQeYqWEW+IUNL58bZgPmVka y4PUPNwl22lrBhHjE4Z0qFhEp+k8OB+qcRbEhu1NoRhxIsXSjhk++Sj1wBVJzD+g 7oXoaTujnJe31TftOFcKZP0NYNFBlDWlZ0crVfgyBhGSIGvTtnXeLIcnbYMtvzd4 XyUvSfPIDA21PVs/oSDoLoFPC7S+Md8ZOzhbptj9QPD8ku6xUsrRU1mquzwWU+8E SDbA/L3Goh8Gr6i5Q/yBhVs+m7eXgty9 -----END CERTIFICATE-----Generated at Fri Dec 12 23:34:01 2025 by rpki-client