This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: gyrLb8qp8cXLZqEUEiXKIjf7HTRA0zfk3I37dJzQF/g= Subject key identifier: 98:D1:81:CA:F0:3C:8B:54:41:4E:6C:24:19:7F:BA:1E:2D:41:77:E1 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 045B Signing time: Thu 18 Dec 2025 23:31:31 +0000 Manifest this update: Thu 18 Dec 2025 23:31:31 +0000 Manifest next update: Thu 25 Dec 2025 23:31:31 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: RJ1P/UAO7CofeaK8bmz9ekx9pHZgfKcDoDhyCTW556M=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Dec 18 23:31:31 2025 GMT Not After : Dec 25 23:31:31 2025 GMT Subject: CN=69448ed3-7231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:e8:60:ab:78:ab:14:90:26:91:ec:a6:13: ec:8f:f1:3f:73:4a:85:19:49:27:1a:9c:ff:a1:b1: d2:91:d1:ba:6a:49:e8:b6:de:a1:a2:03:26:e0:78: 42:91:06:4c:b9:81:f6:1c:d6:a9:a0:6f:d5:4f:00: 5b:f8:8d:c5:62:d0:af:61:e7:de:50:a4:68:ca:c7: 1c:31:89:d8:82:81:88:89:2e:85:c5:3d:b6:63:f3: f2:e2:50:5e:38:fe:5c:e8:28:2a:cf:d7:d9:82:28: 9f:5a:77:47:7d:52:ce:95:12:d3:3a:af:c0:ce:f2: 88:d9:cd:93:ab:9f:86:3b:9d:81:f2:bc:7e:bc:56: c2:bb:8f:4b:3b:cf:03:e8:5b:68:79:a2:2b:b6:b4: f4:a4:3b:85:48:16:8e:97:61:3d:3a:d4:24:bb:34: b9:75:51:19:95:73:f6:65:3f:77:48:fc:00:9e:f1: ba:31:63:fa:53:06:a3:c0:4f:31:25:29:8a:85:c7: c2:07:2a:b3:b4:73:4c:a4:1e:67:1a:d3:60:9f:8a: 49:50:03:d6:e9:dd:e7:1d:d9:23:82:c2:13:f6:a7: ee:dd:81:e0:99:bf:63:29:55:37:e3:67:90:96:91: a5:df:3f:3f:fc:70:03:c9:b4:87:ca:cd:f7:83:1f: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:81:CA:F0:3C:8B:54:41:4E:6C:24:19:7F:BA:1E:2D:41:77:E1 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c2:83:5b:83:2d:e0:3c:0d:a6:d7:94:cc:e4:44:eb:45:9e: 4d:c9:dc:93:34:08:3c:d0:33:4a:f8:d0:ef:4c:ea:81:ce:71: 0b:0a:27:2f:fc:4e:71:6c:b5:85:a0:83:56:d4:62:cc:e7:28: 3b:8f:31:00:5c:71:c2:11:62:28:85:58:55:c3:a6:ec:46:fd: 00:7a:9a:91:87:46:99:20:8d:c2:2f:4b:5f:ec:bf:45:1d:72: 74:47:46:65:36:17:8e:bd:78:f8:fb:c5:de:d6:1c:39:01:b0: bd:6d:ea:ed:c4:f5:a4:61:44:a2:f1:66:26:85:9b:2c:46:74: 54:b1:a3:a0:80:15:2c:70:3e:33:07:63:c3:75:8d:c0:36:5b: 2f:9f:0f:a0:bb:b3:96:5f:a1:ef:da:bd:8f:e4:0e:26:a3:ce: c9:7a:15:57:8c:e2:26:5f:1f:e5:7e:5a:4e:91:a6:10:a0:69: 83:94:33:57:85:b0:90:e2:70:7f:9e:7f:5e:1d:13:56:5f:9c: 60:e8:d9:f1:db:99:0e:ed:e0:37:54:07:4e:e7:cb:ff:86:48: e3:81:e6:df:33:08:e1:b2:46:12:46:47:93:db:de:2f:e3:eb: c6:0a:f1:52:f3:b2:8e:70:ce:7a:2d:91:68:68:f0:d6:7c:1e: 93:22:96:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUxMjE4MjMzMTMxWhcNMjUxMjI1MjMzMTMxWjAYMRYwFAYD VQQDDA02OTQ0OGVkMy03MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAki3oYKt4qxSQJpHsphPsj/E/c0qFGUknGpz/obHSkdG6aknott6hogMm4HhC kQZMuYH2HNapoG/VTwBb+I3FYtCvYefeUKRoysccMYnYgoGIiS6FxT22Y/Py4lBe OP5c6Cgqz9fZgiifWndHfVLOlRLTOq/AzvKI2c2Tq5+GO52B8rx+vFbCu49LO88D 6FtoeaIrtrT0pDuFSBaOl2E9OtQkuzS5dVEZlXP2ZT93SPwAnvG6MWP6UwajwE8x JSmKhcfCByqztHNMpB5nGtNgn4pJUAPW6d3nHdkjgsIT9qfu3YHgmb9jKVU342eQ lpGl3z8//HADybSHys33gx936QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjRgcrw PItUQU5sJBl/uh4tQXfhMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvwoNbgy3gPA2m15TM5ETrRZ5NydyTNAg80DNK+NDvTOqBznELCicv /E5xbLWFoINW1GLM5yg7jzEAXHHCEWIohVhVw6bsRv0AepqRh0aZII3CL0tf7L9F HXJ0R0ZlNheOvXj4+8Xe1hw5AbC9bertxPWkYUSi8WYmhZssRnRUsaOggBUscD4z B2PDdY3ANlsvnw+gu7OWX6Hv2r2P5A4mo87JehVXjOImXx/lflpOkaYQoGmDlDNX hbCQ4nB/nn9eHRNWX5xg6Nnx25kO7eA3VAdO58v/hkjjgebfMwjhskYSRkeT294v 4+vGCvFS87KOcM56LZFoaPDWfB6TIpaB -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:43 2025 by rpki-client