This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: 8S2purxeLb61aS1B5IqhAfY6IVsow0xOTz7fmDdyHpk= Subject key identifier: 13:F7:DD:28:78:4A:E1:9E:20:3F:D2:3A:D5:1E:72:B6:CE:96:97:4F Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1C38 Signing time: Thu 18 Dec 2025 16:06:42 +0000 Manifest this update: Thu 18 Dec 2025 16:06:41 +0000 Manifest next update: Thu 25 Dec 2025 16:06:41 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: 3RU0NzRhS4IIFq6Ws6ZZPPd13kT8Lv2W7mHqgONyRIE=) 2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) 3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7255 (0x1c57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Dec 18 16:06:41 2025 GMT Not After : Dec 25 16:06:41 2025 GMT Subject: CN=69442692-f966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:08:ef:0c:d4:f5:16:22:ed:98:79:24:aa: 75:01:21:da:21:98:c8:d9:92:69:fa:b0:c1:ae:3a: f9:2b:f5:2a:a7:5d:06:a8:4e:ec:ec:9b:72:99:de: 56:92:5e:ad:e0:0c:84:40:97:c4:39:9b:2c:40:be: 5f:ce:86:3d:49:95:d3:c3:3d:99:0e:de:64:0d:36: eb:dd:a4:76:a0:5e:8f:9a:97:34:21:25:26:ef:c6: 22:83:34:9d:bd:d7:fe:5a:30:2d:b1:af:a5:8a:47: 29:a6:da:45:5f:75:38:4f:64:70:50:ae:08:c2:c3: e1:21:09:71:ab:d8:a5:81:2f:0e:82:27:c0:f3:47: 27:49:fa:00:12:47:df:fe:2c:ed:5a:4a:05:d7:30: 38:fa:0f:f5:71:8c:59:f7:29:92:7e:1e:bd:1f:b8: 49:69:b9:ab:b9:04:7f:da:f5:69:f4:08:a4:d5:7f: 65:48:ee:57:11:7f:cc:3e:37:77:87:9e:a6:78:45: 01:23:b7:ef:83:71:29:fb:36:14:74:4d:bd:9e:22: 93:de:19:1a:b4:50:65:af:d6:d5:e7:21:35:6a:f4: 72:00:e1:ec:0f:0f:e9:50:0a:bf:1c:92:a2:50:40: 2d:30:b7:0c:98:ef:53:00:34:97:ee:47:6d:e6:a3: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F7:DD:28:78:4A:E1:9E:20:3F:D2:3A:D5:1E:72:B6:CE:96:97:4F X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f6:40:ea:98:41:1a:6e:ec:33:7d:a1:29:c4:5c:ea:b4:07: 1a:c1:6e:ab:92:f1:93:cb:a5:e6:38:ec:11:18:e3:6b:58:96: 6f:90:6e:45:b5:5f:85:39:c1:d4:8d:b3:fe:26:ff:03:65:b5: 65:0a:9e:8a:5c:64:b1:e5:be:fa:ab:ef:6c:b6:0d:85:b6:da: 85:62:a3:80:8c:af:a2:a1:fc:eb:6e:4a:74:8c:7c:91:2d:a5: 93:72:21:e2:67:d7:bf:f4:3f:29:f0:a8:5d:d9:c0:b1:df:c6: e6:fd:e2:0a:08:5a:f4:54:09:c1:86:7d:41:f7:15:c3:6a:e6: 3c:55:3d:6c:30:c0:bc:3a:6c:b6:ae:4d:8a:76:35:cb:e7:58: 02:5a:66:21:a7:48:bf:a7:fe:f1:65:43:d2:4a:65:0b:c7:3f: 90:b0:72:78:43:07:85:25:b1:9a:f4:75:b7:93:2f:c7:1f:d3: 55:cf:34:08:e6:a5:93:e4:2b:eb:c7:1c:02:1c:22:51:ae:64: c7:69:b9:cb:65:dd:93:f3:9b:85:be:55:1a:28:0f:37:6a:3a: e3:a5:61:3f:94:24:d4:4f:29:9c:3f:4a:39:d5:70:43:91:b3: 0b:3c:6e:c5:9b:a5:53:97:95:c3:cd:18:e8:f2:86:b7:2a:33: d5:0a:8c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUxMjE4MTYwNjQxWhcNMjUxMjI1MTYwNjQxWjAYMRYwFAYD VQQDDA02OTQ0MjY5Mi1mOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF8I7wzU9RYi7Zh5JKp1ASHaIZjI2ZJp+rDBrjr5K/Uqp10GqE7s7Jtymd5W kl6t4AyEQJfEOZssQL5fzoY9SZXTwz2ZDt5kDTbr3aR2oF6Pmpc0ISUm78YigzSd vdf+WjAtsa+likcpptpFX3U4T2RwUK4IwsPhIQlxq9ilgS8OgifA80cnSfoAEkff /iztWkoF1zA4+g/1cYxZ9ymSfh69H7hJabmruQR/2vVp9Aik1X9lSO5XEX/MPjd3 h56meEUBI7fvg3Ep+zYUdE29niKT3hkatFBlr9bV5yE1avRyAOHsDw/pUAq/HJKi UEAtMLcMmO9TADSX7kdt5qNhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP33Sh4 SuGeID/SOtUecrbOlpdPMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr9kDqmEEabuwzfaEpxFzqtAcawW6rkvGTy6XmOOwRGONrWJZvkG5F tV+FOcHUjbP+Jv8DZbVlCp6KXGSx5b76q+9stg2FttqFYqOAjK+iofzrbkp0jHyR LaWTciHiZ9e/9D8p8Khd2cCx38bm/eIKCFr0VAnBhn1B9xXDauY8VT1sMMC8Omy2 rk2KdjXL51gCWmYhp0i/p/7xZUPSSmULxz+QsHJ4QweFJbGa9HW3ky/HH9NVzzQI 5qWT5CvrxxwCHCJRrmTHabnLZd2T85uFvlUaKA83ajrjpWE/lCTUTymcP0o51XBD kbMLPG7Fm6VTl5XDzRjo8oa3KjPVCozM -----END CERTIFICATE-----Generated at Sat Dec 20 14:15:12 2025 by rpki-client