This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: 8i/L9xYTnijTgRbeWI+vTOzwLyi9I6lvaoRwxIAlZWg= Subject key identifier: 81:44:54:B9:E1:F3:F9:6B:8B:18:E1:3D:6F:35:48:00:27:64:6C:E5 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C83 Signing time: Sat 20 Dec 2025 18:19:41 +0000 Manifest this update: Sat 20 Dec 2025 18:19:41 +0000 Manifest next update: Sat 27 Dec 2025 18:19:41 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: Z5QaNrSrfsmqGXDIYJmQxNhL9eU9/qki/bFWCWYgCHM=) 2: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 4: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) 5: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 6: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 7: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Dec 20 18:19:41 2025 GMT Not After : Dec 27 18:19:41 2025 GMT Subject: CN=6946e8bd-321b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:bd:f6:36:cd:52:68:d5:21:c1:ca:92:a5: e8:ec:26:0f:66:69:69:3b:dd:f8:45:63:0f:ad:1a: 51:a9:c6:a4:f9:5e:6f:16:0d:e6:9d:32:a0:0e:7d: b1:4a:e3:92:ae:91:89:bc:1e:c9:6d:07:f7:ad:40: b5:10:f2:62:d2:4e:34:4e:45:5a:bc:f6:4f:20:92: 63:e9:39:34:3b:0b:43:06:b7:ea:40:a3:b6:e9:c7: ee:3a:f1:8e:d5:89:70:38:49:57:09:8b:70:75:60: ae:3c:0a:fd:30:2a:b1:30:c6:78:4a:c5:45:40:01: 6b:15:34:57:88:51:f6:1e:90:be:a4:73:a2:36:aa: 40:23:d7:0f:cc:74:ba:a3:b2:7a:56:5a:f8:8b:f1: c3:5d:79:e4:5a:dd:0c:a4:0f:f3:58:e8:d8:7c:9f: f4:d6:2b:34:b9:a1:fb:09:ea:a6:4b:f4:07:b4:8d: ef:34:07:d0:49:d4:3b:51:2e:26:7f:ac:c2:28:81: e6:96:c1:fe:87:c3:72:3e:cd:81:32:a1:3d:7c:bf: a0:12:1f:55:e6:08:2c:b5:4d:fe:19:1c:62:a1:c1: 2b:e1:28:d2:bc:98:6a:60:19:06:af:20:68:30:93: f4:49:b4:0c:e6:c7:a1:33:43:74:d8:07:89:bd:db: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:54:B9:E1:F3:F9:6B:8B:18:E1:3D:6F:35:48:00:27:64:6C:E5 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6f:97:6a:7f:c5:b5:0b:bb:45:18:c9:eb:42:81:e5:55:3f: 87:4a:18:2e:4d:4d:00:df:dd:16:7d:e2:4f:85:dd:2b:07:59: 38:30:ce:c7:9c:bf:a8:b3:ab:22:42:34:b8:9d:09:df:c5:39: b3:a0:eb:73:88:7c:81:0a:9d:e2:9a:af:a8:00:37:05:79:03: c4:fe:84:c0:02:b1:a5:3e:7b:29:b0:b7:6e:18:25:01:6c:9f: 82:17:be:e2:59:43:64:4e:f3:5a:05:7a:63:93:2f:b6:70:7b: 02:fe:aa:69:75:b9:3a:f8:30:07:9e:ef:a9:2f:21:57:55:c2: c6:ff:55:a0:2b:88:94:7c:a3:08:c4:f9:f3:88:bf:a8:a5:3b: 6d:bb:76:5e:e3:3f:3b:fc:3a:64:b0:62:58:88:9a:c9:be:93: 4c:66:08:4d:bc:74:4e:c9:dc:c7:1d:df:a9:05:1a:f9:bd:11: 60:6d:14:a5:cf:b8:f0:74:82:12:40:ab:ce:f3:55:28:76:db: 6c:f8:c7:21:77:eb:64:5e:ec:53:2c:a6:bf:a4:72:36:13:8c: a6:ef:2b:5b:e3:17:56:ba:8b:7d:34:12:c4:fd:63:10:46:28: c3:38:d4:5b:17:14:e6:1e:e2:a7:28:fd:c0:e9:1a:c6:10:90: bd:1d:fd:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUxMjIwMTgxOTQxWhcNMjUxMjI3MTgxOTQxWjAYMRYwFAYD VQQDDA02OTQ2ZThiZC0zMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlG99jbNUmjVIcHKkqXo7CYPZmlpO934RWMPrRpRqcak+V5vFg3mnTKgDn2x SuOSrpGJvB7JbQf3rUC1EPJi0k40TkVavPZPIJJj6Tk0OwtDBrfqQKO26cfuOvGO 1YlwOElXCYtwdWCuPAr9MCqxMMZ4SsVFQAFrFTRXiFH2HpC+pHOiNqpAI9cPzHS6 o7J6Vlr4i/HDXXnkWt0MpA/zWOjYfJ/01is0uaH7CeqmS/QHtI3vNAfQSdQ7US4m f6zCKIHmlsH+h8NyPs2BMqE9fL+gEh9V5ggstU3+GRxiocEr4SjSvJhqYBkGryBo MJP0SbQM5sehM0N02AeJvdthkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFEVLnh 8/lrixjhPW81SAAnZGzlMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCb5dqf8W1C7tFGMnrQoHlVT+HShguTU0A390WfeJPhd0rB1k4MM7H nL+os6siQjS4nQnfxTmzoOtziHyBCp3imq+oADcFeQPE/oTAArGlPnspsLduGCUB bJ+CF77iWUNkTvNaBXpjky+2cHsC/qppdbk6+DAHnu+pLyFXVcLG/1WgK4iUfKMI xPnziL+opTttu3Ze4z87/DpksGJYiJrJvpNMZghNvHROydzHHd+pBRr5vRFgbRSl z7jwdIISQKvO81Uodtts+Mchd+tkXuxTLKa/pHI2E4ym7ytb4xdWuot9NBLE/WMQ RijDONRbFxTmHuKnKP3A6RrGEJC9Hf1i -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:34 2025 by rpki-client