This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: NWjpytpWeVdChF7PjdJKiSii37ZKlYH0h33GcynHuaA= Subject key identifier: 7A:AE:C7:A4:AE:74:38:87:2F:F4:60:B8:1D:29:EE:BA:3D:C1:6F:C0 Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 0130 Signing time: Sun 21 Dec 2025 03:44:30 +0000 Manifest this update: Sun 21 Dec 2025 03:44:30 +0000 Manifest next update: Sun 28 Dec 2025 03:44:30 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: n/T6hG6Cbpc33tZ7AoSeo11uC+pCa5aEnqc1g9+xD84=) 2: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: vyWjtraKy2uNU188bHY1lVeQD/xqPddD3pXN0n/73vU=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: G6b5iOlkKludFCzss6jnAMWJYZcz6E/s4QELN3EDX6c=) 4: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: ppr+f3CQLMrxRnmkUupoZgwnP/LYRvSbiOC7CwxVMhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Dec 21 03:44:30 2025 GMT Not After : Dec 28 03:44:30 2025 GMT Subject: CN=69476d1e-9822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:24:f6:39:d3:1a:85:3b:1a:f2:2b:ed:e2: 15:bb:cd:c2:21:ad:42:15:57:b0:56:1c:aa:6b:01: 8b:d9:4e:3b:0c:0c:e8:cd:60:13:32:ab:28:fa:77: 08:79:c3:89:70:23:4a:73:59:6f:53:fe:a6:d7:4e: ab:54:61:1b:56:6f:63:d9:06:c2:45:4d:50:42:e7: 06:5d:7c:55:02:6c:80:ca:af:a1:92:6a:15:51:5a: b6:ea:db:10:e8:e7:14:50:e8:22:da:85:62:61:7a: ff:c5:60:fb:b4:b7:86:77:27:61:3c:1a:87:68:d9: ac:1e:f7:0f:fa:86:51:25:4b:d9:66:b2:0c:ef:ef: 96:6e:17:49:cc:aa:30:85:f3:50:93:b0:14:02:01: f6:93:56:fc:37:e1:37:c5:4f:ef:70:15:fe:c8:43: 8f:6c:a5:75:97:93:a7:f1:66:6f:cf:f3:85:c8:bc: c2:6e:82:31:9b:3d:cf:20:65:7b:62:4b:38:ac:61: 27:74:3b:13:fc:81:71:e4:50:be:91:45:c2:b5:9a: 86:fd:1c:4d:46:5e:98:ea:7c:fb:a6:fe:05:92:e6: 75:04:21:c0:a0:e4:8a:d8:c4:7b:b7:8f:2f:4f:c8: 0a:07:2d:6e:54:bf:e4:bb:64:fd:e5:ab:31:fd:bb: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AE:C7:A4:AE:74:38:87:2F:F4:60:B8:1D:29:EE:BA:3D:C1:6F:C0 X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:fd:8d:ac:f0:b8:e6:70:dc:69:cf:78:85:6a:e5:89:7f:c7: 87:2f:5c:29:8c:a9:ec:5b:bf:49:2e:e0:ed:21:34:0f:60:07: 28:d8:63:9d:01:45:19:e7:66:d4:02:2c:c1:b5:23:ae:00:9f: 79:ab:7e:d1:53:47:09:ee:05:02:ee:fb:99:4f:33:35:30:18: d9:76:a6:32:66:ee:d1:10:34:12:d9:d7:8b:d8:ad:19:ae:e9: 48:7a:b8:e4:0d:7d:2b:5b:7b:55:19:41:5c:2e:97:02:42:48: ff:1b:3e:4f:dd:5a:a9:27:1d:c7:61:3b:b7:f7:c4:8d:61:b1: d6:7c:be:ff:7a:72:03:cd:ae:7c:62:72:ab:e2:08:1e:b2:bb: 12:a9:2c:1d:66:cb:09:4c:98:50:04:2a:4a:cf:2d:38:86:0d: ed:92:0f:f1:b0:ce:34:ee:4a:64:84:b4:5c:d3:ce:11:29:ef: 38:55:f2:87:b5:f3:df:1f:41:2e:a0:a2:8c:8a:63:c3:20:76: 5d:97:1e:f1:ab:a2:27:cb:6e:6b:b7:9d:f5:c9:a5:cc:35:b7: c2:78:de:6d:ad:9e:b4:c9:bc:7c:64:18:cd:e6:c5:59:58:b7: a1:bc:bb:b6:08:71:92:5e:d0:ae:09:e1:f5:25:3f:11:8f:44: 02:b0:a5:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUxMjIxMDM0NDMwWhcNMjUxMjI4MDM0NDMwWjAYMRYwFAYD VQQDDA02OTQ3NmQxZS05ODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Mk9jnTGoU7GvIr7eIVu83CIa1CFVewVhyqawGL2U47DAzozWATMqso+ncI ecOJcCNKc1lvU/6m106rVGEbVm9j2QbCRU1QQucGXXxVAmyAyq+hkmoVUVq26tsQ 6OcUUOgi2oViYXr/xWD7tLeGdydhPBqHaNmsHvcP+oZRJUvZZrIM7++WbhdJzKow hfNQk7AUAgH2k1b8N+E3xU/vcBX+yEOPbKV1l5On8WZvz/OFyLzCboIxmz3PIGV7 Yks4rGEndDsT/IFx5FC+kUXCtZqG/RxNRl6Y6nz7pv4FkuZ1BCHAoOSK2MR7t48v T8gKBy1uVL/ku2T95asx/burrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqux6Su dDiHL/RguB0p7ro9wW/AMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh/Y2s8LjmcNxpz3iFauWJf8eHL1wpjKnsW79JLuDtITQPYAco2GOd AUUZ52bUAizBtSOuAJ95q37RU0cJ7gUC7vuZTzM1MBjZdqYyZu7REDQS2deL2K0Z rulIerjkDX0rW3tVGUFcLpcCQkj/Gz5P3VqpJx3HYTu398SNYbHWfL7/enIDza58 YnKr4ggesrsSqSwdZssJTJhQBCpKzy04hg3tkg/xsM407kpkhLRc084RKe84VfKH tfPfH0EuoKKMimPDIHZdlx7xq6Iny25rt531yaXMNbfCeN5trZ60ybx8ZBjN5sVZ WLehvLu2CHGSXtCuCeH1JT8Rj0QCsKW7 -----END CERTIFICATE-----Generated at Mon Dec 22 14:32:38 2025 by rpki-client