This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: 7aFuwKsFbGB1qZEATLxZUngDgDN/ne7kkkm5XWgRPv4= Subject key identifier: A6:E2:B6:D5:F8:95:2A:B1:9E:8F:E2:1F:87:1A:05:E2:CF:0A:F2:31 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B93 Signing time: Sat 20 Dec 2025 18:34:39 +0000 Manifest this update: Sat 20 Dec 2025 18:34:39 +0000 Manifest next update: Sat 27 Dec 2025 18:34:39 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: dkX1vtjNi6bJuvUNMTv6gRdM31f4T/x+WGbW5jgKi6c=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: HQ+n/zvxBXsyHktY7VZtlLogGsEgUPieMT07w6OWlaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Dec 20 18:34:39 2025 GMT Not After : Dec 27 18:34:39 2025 GMT Subject: CN=6946ec3f-4121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:1d:24:cd:a7:f3:c3:c7:bb:f9:eb:b9:3b: 46:d3:d5:4e:c1:c6:8e:fa:37:62:a4:41:82:ee:48: f6:29:ac:a3:32:b5:2a:e9:3f:1f:91:39:1a:cc:40: 32:48:81:8d:3e:72:70:91:69:25:12:45:74:ef:05: 00:63:6f:ee:16:96:94:8c:76:fa:2c:99:ce:67:ed: 87:22:bd:14:48:d7:30:bd:47:c1:19:ab:6f:a1:a1: 48:06:5e:fe:18:01:cc:9f:3b:9b:f9:5f:6e:cc:df: 65:ef:db:81:7a:05:3d:ee:0a:e1:34:1f:0f:49:f9: 00:dc:13:a4:0a:a0:e5:57:33:b8:cf:0c:8e:9f:4e: 75:93:3c:d8:9a:07:9e:83:fd:d0:22:6b:ea:6f:83: 14:e0:dc:50:ef:16:bf:05:62:f5:c0:93:2e:a4:5f: c7:58:a8:21:1c:3c:85:20:43:d1:2d:12:74:7c:75: 5b:1b:45:c6:00:3e:57:bb:39:f5:69:63:56:f1:a7: 1e:c6:f6:96:30:03:f2:90:36:b7:cb:e0:b7:1f:27: 5a:02:67:f2:5b:77:3b:ea:95:e2:70:46:eb:2b:2f: 49:20:ec:4d:56:ce:25:a4:00:19:f3:79:c5:3c:01: 96:85:1d:a0:35:9a:01:19:a6:62:56:2b:3a:d4:1b: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E2:B6:D5:F8:95:2A:B1:9E:8F:E2:1F:87:1A:05:E2:CF:0A:F2:31 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:39:84:35:ab:be:32:7d:f7:04:cc:0e:b3:2d:63:c0:17: a5:7d:52:76:60:d9:3b:da:35:f4:26:f7:65:de:d1:30:81:3e: 7c:e4:05:1f:e1:02:0f:8c:d1:85:7d:41:4d:57:0c:3c:23:90: 16:95:ea:12:49:89:c2:03:a3:f8:13:0d:e9:fe:6f:bd:de:6c: 2a:58:84:cb:43:4d:ae:f8:e0:27:0e:a6:62:a0:c3:10:e1:ec: 03:9f:74:bd:23:77:29:78:e3:f8:56:04:95:e1:53:a3:56:8a: 47:fd:c7:6f:42:77:b0:91:80:af:f8:48:40:e3:68:4a:9e:a7: 85:6c:5d:48:64:d1:63:2a:db:69:f1:5b:4d:81:75:f8:bd:d7: 25:06:c0:55:8c:be:68:70:48:22:72:d4:5e:96:c1:b9:bc:06: a1:b3:74:28:88:31:0a:42:1b:3f:38:8f:2e:81:61:52:af:1e: 67:47:43:8f:1e:e3:2a:3e:fa:4f:05:46:ce:e0:fe:9e:3f:f8: 8a:90:79:5a:0d:fd:08:26:bc:3f:77:a8:31:a6:6d:21:54:1c: 42:2d:c0:f6:56:75:fb:27:00:dc:fb:e7:0e:4c:38:d7:ed:4e: 4d:32:d2:dc:62:35:b1:02:b9:9f:62:8b:72:5d:89:ec:6c:3a: 3a:58:fb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUxMjIwMTgzNDM5WhcNMjUxMjI3MTgzNDM5WjAYMRYwFAYD VQQDDA02OTQ2ZWMzZi00MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lIdJM2n88PHu/nruTtG09VOwcaO+jdipEGC7kj2KayjMrUq6T8fkTkazEAy SIGNPnJwkWklEkV07wUAY2/uFpaUjHb6LJnOZ+2HIr0USNcwvUfBGatvoaFIBl7+ GAHMnzub+V9uzN9l79uBegU97grhNB8PSfkA3BOkCqDlVzO4zwyOn051kzzYmgee g/3QImvqb4MU4NxQ7xa/BWL1wJMupF/HWKghHDyFIEPRLRJ0fHVbG0XGAD5Xuzn1 aWNW8acexvaWMAPykDa3y+C3HydaAmfyW3c76pXicEbrKy9JIOxNVs4lpAAZ83nF PAGWhR2gNZoBGaZiVis61BtG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbittX4 lSqxno/iH4caBeLPCvIxMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBLjmENau+Mn33BMwOsy1jwBelfVJ2YNk72jX0Jvdl3tEwgT585AUf 4QIPjNGFfUFNVww8I5AWleoSSYnCA6P4Ew3p/m+93mwqWITLQ02u+OAnDqZioMMQ 4ewDn3S9I3cpeOP4VgSV4VOjVopH/cdvQnewkYCv+EhA42hKnqeFbF1IZNFjKttp 8VtNgXX4vdclBsBVjL5ocEgictRelsG5vAahs3QoiDEKQhs/OI8ugWFSrx5nR0OP HuMqPvpPBUbO4P6eP/iKkHlaDf0IJrw/d6gxpm0hVBxCLcD2VnX7JwDc++cOTDjX 7U5NMtLcYjWxArmfYotyXYnsbDo6WPuW -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:29 2025 by rpki-client