This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: UultDVQFRBKu2NU0wvJG3GOmDbLTJHYF4RUkbaznTVI= Subject key identifier: B2:FC:40:89:48:91:AA:E8:E3:10:3D:15:2D:A8:42:54:A6:3D:F4:8D Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0D0F Signing time: Sat 20 Dec 2025 17:49:21 +0000 Manifest this update: Sat 20 Dec 2025 17:49:20 +0000 Manifest next update: Sat 27 Dec 2025 17:49:20 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: gYSBCym7QcvMSOORzCy8VY5nJqQDiWtn5l5LllhMp3k=) 2: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=) 3: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: jBmeI5y0SVJB4aMWbKmtmiFdyrbiBVSMzrKP/rJrmhI=) 4: 13D5D992979E11F08E996475C4F9AE02.roa (hash: uqXdul36EDPRkEmn7F3Pi5w/fW3yUykVpbjNAjajNRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Dec 20 17:49:20 2025 GMT Not After : Dec 27 17:49:20 2025 GMT Subject: CN=6946e1a0-5963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:4a:e0:1e:fb:bc:1e:de:25:71:15:18:d1: 36:83:3f:6c:d1:f1:51:2b:c4:0c:2e:86:55:b0:4f: 43:b1:0a:66:d0:18:c6:7a:6b:b5:c8:70:f8:74:36: c3:97:2f:08:b6:8b:09:a4:7e:51:9e:c0:2c:77:b2: b8:e8:6a:8a:d6:9f:66:5d:9d:99:f3:c9:fc:57:54: 61:07:e5:4f:0f:91:4a:58:2d:2e:e0:6b:84:99:5f: 95:31:9b:73:7e:62:d5:1b:04:fc:6c:4a:ac:b4:48: 01:ee:8e:97:6d:bd:71:9a:4f:3e:55:14:f5:24:96: 19:bc:38:b9:11:86:25:3a:72:45:70:46:69:07:45: 7b:15:9a:24:89:e6:b2:4a:87:27:46:c4:f8:23:1e: 09:64:71:84:ab:81:de:41:8c:e4:8b:14:0f:aa:9a: 53:47:e5:74:c1:d5:db:07:73:26:b2:0a:6e:e6:1d: c5:79:05:2f:a8:f8:15:23:21:47:3a:0f:db:4a:ba: 20:65:28:2a:f0:90:30:26:e5:a8:da:6d:a6:5c:71: 5c:ee:9a:4c:e2:ed:fa:be:6b:83:e2:dc:94:ee:2f: b3:5a:78:63:29:ef:a7:10:3f:d9:1b:76:9e:09:b0: 53:55:e1:8e:fd:38:77:30:99:87:3b:e4:32:e7:f2: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FC:40:89:48:91:AA:E8:E3:10:3D:15:2D:A8:42:54:A6:3D:F4:8D X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:58:2e:41:e3:f6:f6:41:f9:30:9a:37:fc:85:0e:c6:5e:83: 50:f5:29:c0:d8:e5:91:78:31:cf:2e:38:9f:9d:90:45:b6:ed: 90:cf:27:b5:f2:d3:a4:14:ae:d7:28:33:26:6d:d9:a3:74:ef: 8f:cf:e8:15:47:ab:e1:b4:a7:cb:15:08:a0:47:06:ee:b9:96: 20:ba:3e:24:57:46:bd:df:a6:53:63:03:88:61:3d:ec:06:ae: 0d:ee:91:03:ae:d6:f5:c2:f7:8a:e0:48:ae:08:2d:41:cf:74: 7d:91:e3:43:e5:a3:b8:df:4b:de:ad:5d:1e:b2:17:ed:50:38: 93:f6:7a:b6:42:c2:8e:7c:d4:87:e4:e9:a2:d9:f9:75:68:45: 29:0f:b1:57:ef:83:20:de:73:1c:fe:b9:db:a9:32:73:a3:4d: fb:59:65:bd:b4:b9:45:08:70:45:d0:f9:af:68:9f:45:c1:b3: 46:30:57:40:8f:87:ac:ca:70:84:20:f9:01:f2:19:4d:36:5d: 4a:f1:72:c9:fb:d3:c3:18:18:73:ea:e2:52:1a:23:bc:e7:4c: 1d:75:ba:3a:3f:8b:1a:cc:78:48:c6:99:65:c4:82:da:64:d1: 23:cb:03:0b:f7:fd:3b:a1:0b:5a:3c:18:f4:16:1d:5c:56:68: 93:53:09:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUxMjIwMTc0OTIwWhcNMjUxMjI3MTc0OTIwWjAYMRYwFAYD VQQDDA02OTQ2ZTFhMC01OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eVK4B77vB7eJXEVGNE2gz9s0fFRK8QMLoZVsE9DsQpm0BjGemu1yHD4dDbD ly8ItosJpH5RnsAsd7K46GqK1p9mXZ2Z88n8V1RhB+VPD5FKWC0u4GuEmV+VMZtz fmLVGwT8bEqstEgB7o6Xbb1xmk8+VRT1JJYZvDi5EYYlOnJFcEZpB0V7FZokieay SocnRsT4Ix4JZHGEq4HeQYzkixQPqppTR+V0wdXbB3Mmsgpu5h3FeQUvqPgVIyFH Og/bSrogZSgq8JAwJuWo2m2mXHFc7ppM4u36vmuD4tyU7i+zWnhjKe+nED/ZG3ae CbBTVeGO/Th3MJmHO+Qy5/IzvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL8QIlI karo4xA9FS2oQlSmPfSNMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2WC5B4/b2Qfkwmjf8hQ7GXoNQ9SnA2OWReDHPLjifnZBFtu2Qzye1 8tOkFK7XKDMmbdmjdO+Pz+gVR6vhtKfLFQigRwbuuZYguj4kV0a936ZTYwOIYT3s Bq4N7pEDrtb1wveK4EiuCC1Bz3R9keND5aO430verV0eshftUDiT9nq2QsKOfNSH 5Omi2fl1aEUpD7FX74Mg3nMc/rnbqTJzo037WWW9tLlFCHBF0PmvaJ9FwbNGMFdA j4esynCEIPkB8hlNNl1K8XLJ+9PDGBhz6uJSGiO850wddbo6P4sazHhIxpllxILa ZNEjywML9/07oQtaPBj0Fh1cVmiTUwnS -----END CERTIFICATE-----Generated at Sun Dec 21 18:07:45 2025 by rpki-client