This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: 0pC9XiYFMFSmqZrhPFLKbArAufw65uQd/kReL6aLOMU= Subject key identifier: 10:8F:8A:5D:61:FA:99:F4:9C:2A:BE:21:97:64:E4:CE:1E:75:5F:3E Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 059B Signing time: Sat 20 Dec 2025 22:31:33 +0000 Manifest this update: Sat 20 Dec 2025 22:31:32 +0000 Manifest next update: Sat 27 Dec 2025 22:31:32 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: fZ4VNslrj/9ZLJJNCDQogx3qFkL6Xn1NGN+EFITHRu8=) 2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: 68fiXxDRInABMZSnArOz5po2YH5/5mLBsvEHG5ANoNk=) 3: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: bqDWaQrEnfW4Yr6xAJ8NbzXfe/Eoz2cTSijNep764D8=) 4: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: ZIpPhxn3ZcCbFE5Pdx2VemD1MQNZXD0fX/y2N95QY8k=) 5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: ZIQc9K7qsEFy9TotgtpdHjpKJ2lZutFq7FE8iTx18Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: Dec 20 22:31:32 2025 GMT Not After : Dec 27 22:31:32 2025 GMT Subject: CN=694723c5-58f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:5e:b2:9b:44:69:28:f0:1f:db:23:f6:e8: e3:7e:41:b5:68:b3:35:a0:da:36:d4:45:49:4e:24: ab:40:26:f7:92:96:a4:61:8d:ae:33:fc:60:f5:7d: a2:76:c3:06:0f:e5:d2:73:d2:51:27:7d:0e:fc:99: d6:82:6d:23:47:f9:4f:be:fd:47:59:c7:63:78:13: 88:39:4e:98:5c:97:d8:11:3b:d6:a4:01:7b:91:2a: 68:5b:cc:01:4f:48:d7:0d:76:a5:66:51:76:d3:c5: 5f:d3:33:70:f3:d8:f6:25:77:b5:45:1d:92:0e:8b: cb:dd:07:29:1c:44:e2:f1:e6:cd:35:23:e2:f4:3d: 80:4b:fa:ee:57:d3:82:d4:53:d7:0b:2c:a8:3e:bc: 95:13:90:d5:31:d6:d6:b4:e0:f7:7e:f6:d5:47:c1: 66:a1:3c:08:88:0f:bc:70:0d:d8:dd:2f:c9:b6:9d: 14:7e:5c:b2:07:b1:6b:68:a3:45:34:8d:34:a2:e3: 8b:ba:68:99:79:c2:36:85:97:32:e3:b3:ed:e4:bc: 6e:c8:7e:0c:a5:82:d3:4b:fe:15:11:3f:ea:b6:75: 19:5b:30:91:63:84:f2:26:f7:23:96:1c:6b:cd:0c: ee:a8:f7:94:ac:8b:f7:08:17:d2:33:56:d7:12:f1: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:8A:5D:61:FA:99:F4:9C:2A:BE:21:97:64:E4:CE:1E:75:5F:3E X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:86:4e:c8:0c:7a:0b:c8:73:07:48:d4:98:32:b5:75:2a:ba: c5:87:22:bf:e0:b2:b3:b7:86:55:e1:a7:01:12:f9:5a:86:49: 2e:37:8c:29:08:74:ad:66:a1:59:8d:17:5b:6b:11:b9:f2:59: 57:f5:0e:a6:7e:6c:37:a4:ee:e0:07:27:5e:02:b7:d4:94:4e: 72:bc:03:15:ff:52:66:a1:9c:0a:7f:d0:c8:ff:a3:ce:43:32: e6:7d:b2:36:36:4d:f0:ac:3b:78:f9:57:8a:ee:d1:8d:55:b4: 20:b6:74:46:07:36:68:b7:ad:2f:ea:26:1e:4f:9e:00:bc:c2: 33:98:36:00:d6:90:08:43:ff:2b:f0:c2:c8:1a:5e:63:4a:80: c9:94:42:ea:c2:dc:6d:d9:fd:90:32:96:df:7d:b5:3d:de:81: 8e:73:ba:39:03:10:0f:cc:d8:cc:9e:7e:65:cb:d7:3b:d7:cb: 95:c8:2d:ad:43:be:af:73:4a:39:31:d9:65:3c:3b:4e:41:a8: 36:d4:f6:dd:b8:93:44:e2:43:80:4b:65:82:c3:f3:76:40:8e: 77:d1:10:c3:58:3e:ae:57:be:51:47:4d:86:6e:b8:50:b3:ad: e7:53:e7:85:63:f0:2a:92:dc:d2:bb:1a:5d:b6:ae:88:16:5b: 56:61:f9:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjUxMjIwMjIzMTMyWhcNMjUxMjI3MjIzMTMyWjAYMRYwFAYD VQQDDA02OTQ3MjNjNS01OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA101esptEaSjwH9sj9ujjfkG1aLM1oNo21EVJTiSrQCb3kpakYY2uM/xg9X2i dsMGD+XSc9JRJ30O/JnWgm0jR/lPvv1HWcdjeBOIOU6YXJfYETvWpAF7kSpoW8wB T0jXDXalZlF208Vf0zNw89j2JXe1RR2SDovL3QcpHETi8ebNNSPi9D2AS/ruV9OC 1FPXCyyoPryVE5DVMdbWtOD3fvbVR8FmoTwIiA+8cA3Y3S/Jtp0UflyyB7FraKNF NI00ouOLumiZecI2hZcy47Pt5LxuyH4MpYLTS/4VET/qtnUZWzCRY4TyJvcjlhxr zQzuqPeUrIv3CBfSM1bXEvEAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCPil1h +pn0nCq+IZdk5M4edV8+MB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/hk7IDHoLyHMHSNSYMrV1KrrFhyK/4LKzt4ZV4acBEvlahkkuN4wp CHStZqFZjRdbaxG58llX9Q6mfmw3pO7gBydeArfUlE5yvAMV/1JmoZwKf9DI/6PO QzLmfbI2Nk3wrDt4+VeK7tGNVbQgtnRGBzZot60v6iYeT54AvMIzmDYA1pAIQ/8r 8MLIGl5jSoDJlELqwtxt2f2QMpbffbU93oGOc7o5AxAPzNjMnn5ly9c718uVyC2t Q76vc0o5MdllPDtOQag21PbduJNE4kOAS2WCw/N2QI530RDDWD6uV75RR02GbrhQ s63nU+eFY/AqktzSuxpdtq6IFltWYfkI -----END CERTIFICATE-----Generated at Sun Dec 21 06:31:15 2025 by rpki-client