This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: 9F+ZG2C9y/aOP8TYS3Y7qM1r/RCqhpBYqFk5dNmLCdU= Subject key identifier: B0:60:84:A6:7E:52:13:BE:76:C2:00:E3:82:21:14:16:65:43:8F:1F Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1E2D Signing time: Thu 18 Dec 2025 16:00:03 +0000 Manifest this update: Thu 18 Dec 2025 16:00:03 +0000 Manifest next update: Thu 25 Dec 2025 16:00:03 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: VnwBRHUVbxdlv1v4vAvC2chLR2S+kv+trcUjMnQ4e4w=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7739 (0x1e3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Dec 18 16:00:03 2025 GMT Not After : Dec 25 16:00:03 2025 GMT Subject: CN=69442503-cf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f7:53:de:37:ea:38:38:14:3d:e6:ec:64:4e: ee:12:5e:d8:bb:a9:ac:83:ce:4d:7c:83:92:b7:46: 60:b1:60:31:b1:4c:22:7c:8f:d0:d7:ad:7f:6e:bf: 3b:85:f4:2b:60:55:7d:dd:8d:76:09:01:88:12:73: 40:d0:e8:f2:e5:89:aa:24:29:11:d8:1c:cb:ca:92: 21:e2:82:cc:1d:c4:85:a4:ed:66:37:cc:49:3f:90: 08:81:86:49:1d:4e:3d:c2:9c:c3:a1:a4:1d:e7:15: c9:85:b6:e6:a6:1c:fb:06:77:a1:91:8b:f7:b5:b9: e7:ea:58:9e:df:81:e6:a0:51:0a:a2:02:de:6d:b6: c1:01:50:6e:9c:97:46:13:fc:26:36:01:34:1d:26: 20:c6:ce:4b:ae:15:09:c8:5b:60:0a:e3:6d:3f:30: e7:6e:35:44:6b:61:1c:4f:7a:c7:2a:cc:4f:a4:50: 5b:a8:8e:aa:1b:b2:00:92:e9:a5:9e:79:49:4b:fd: c7:25:ae:55:31:d4:38:f0:57:19:22:af:fb:8b:1a: c4:b1:fb:d1:18:e9:b9:32:d5:97:64:31:9f:67:93: f8:ad:d6:ec:9b:60:3c:ea:5c:4e:6d:8d:c9:03:2e: 2d:51:b4:6d:2f:d2:cb:bd:ef:aa:21:bd:fb:4c:c3: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:84:A6:7E:52:13:BE:76:C2:00:E3:82:21:14:16:65:43:8F:1F X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:eb:e4:d7:ad:69:8d:d2:a6:59:ff:a6:03:91:f9:b3:99:8f: b1:2e:2e:58:10:e8:1a:38:e1:9a:a9:93:2b:68:3e:56:f6:17: f6:19:9c:f6:c9:d8:a9:c1:95:40:44:c9:d5:54:6f:38:45:9a: 0c:5e:46:3f:98:0a:6a:22:54:27:fc:08:1c:8b:0f:e2:4f:d4: bd:e7:9e:14:e5:78:ae:fa:23:cf:a8:0d:42:e2:ae:db:90:7d: a7:45:bb:db:bc:64:12:db:18:e4:9d:21:35:b7:a1:41:30:be: 4c:b4:b5:ca:0b:98:47:7a:bc:fd:27:05:d3:71:06:fe:1d:8d: 7f:3e:3f:e7:0c:33:71:7e:6e:25:12:58:88:2d:c9:e3:57:5a: 86:0c:8b:b8:a2:8f:3c:af:4d:4d:e5:d8:5d:fd:26:ec:bd:46: f1:43:28:1f:e6:ac:32:a4:75:34:9b:5c:9b:08:5b:76:8d:51: 72:86:31:d2:1a:e9:a0:93:63:df:69:92:65:d0:09:28:50:2c: 4e:b8:30:c0:28:d1:23:c2:99:a1:85:0c:b4:8b:b5:f7:86:51: 0f:21:91:31:f6:d3:f7:87:de:99:2a:ed:ef:31:67:5e:61:cf: 35:80:85:a0:f2:09:0f:d1:5f:37:80:d4:8d:20:fc:e5:69:0d: dc:2b:b9:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUxMjE4MTYwMDAzWhcNMjUxMjI1MTYwMDAzWjAYMRYwFAYD VQQDDA02OTQ0MjUwMy1jZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fdT3jfqODgUPebsZE7uEl7Yu6msg85NfIOSt0ZgsWAxsUwifI/Q161/br87 hfQrYFV93Y12CQGIEnNA0Ojy5YmqJCkR2BzLypIh4oLMHcSFpO1mN8xJP5AIgYZJ HU49wpzDoaQd5xXJhbbmphz7BnehkYv3tbnn6lie34HmoFEKogLebbbBAVBunJdG E/wmNgE0HSYgxs5LrhUJyFtgCuNtPzDnbjVEa2EcT3rHKsxPpFBbqI6qG7IAkuml nnlJS/3HJa5VMdQ48FcZIq/7ixrEsfvRGOm5MtWXZDGfZ5P4rdbsm2A86lxObY3J Ay4tUbRtL9LLve+qIb37TMO+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBghKZ+ UhO+dsIA44IhFBZlQ48fMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg6+TXrWmN0qZZ/6YDkfmzmY+xLi5YEOgaOOGaqZMraD5W9hf2GZz2 ydipwZVARMnVVG84RZoMXkY/mApqIlQn/Agciw/iT9S9554U5Xiu+iPPqA1C4q7b kH2nRbvbvGQS2xjknSE1t6FBML5MtLXKC5hHerz9JwXTcQb+HY1/Pj/nDDNxfm4l EliILcnjV1qGDIu4oo88r01N5dhd/SbsvUbxQygf5qwypHU0m1ybCFt2jVFyhjHS Gumgk2PfaZJl0AkoUCxOuDDAKNEjwpmhhQy0i7X3hlEPIZEx9tP3h96ZKu3vMWde Yc81gIWg8gkP0V83gNSNIPzlaQ3cK7l8 -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:45 2025 by rpki-client