This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: tM9BMRxB2Azjg5T2coQ5BWHLXyBtHccKfn2JedCO7+8= Subject key identifier: 24:D1:A9:CE:4B:07:4B:82:76:51:EC:09:07:CE:79:1B:B5:E9:BF:24 Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0E6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0E65 Signing time: Tue 16 Dec 2025 17:35:28 +0000 Manifest this update: Tue 16 Dec 2025 17:35:28 +0000 Manifest next update: Tue 23 Dec 2025 17:35:28 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: VswsDK+bknQu+B+sb9ecj/zJn2ApucoHY9F3zxlfCjc=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: 6nYEOZbY+riA9hipBBLAA8A7cOGQEYjhf5EbPaoNkaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3695 (0xe6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: Dec 16 17:35:28 2025 GMT Not After : Dec 23 17:35:28 2025 GMT Subject: CN=69419860-c8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:4d:af:e2:9d:ea:c0:a8:54:cc:09:7b:8f: 7a:42:fb:d2:8c:b0:e9:28:3e:0e:79:72:e0:d2:fd: a9:01:3f:8d:77:3d:8e:27:d3:99:72:cd:4b:f4:e4: d8:d0:bc:0e:91:13:ed:02:74:0e:23:dd:92:58:dc: 86:8f:fb:85:b5:23:65:bd:a9:6e:f6:4d:82:c9:70: 47:3a:1b:5d:64:f6:7b:ed:98:e6:c7:15:df:35:aa: 07:9c:de:33:23:65:5c:df:81:47:e7:5f:9d:8b:02: 0d:5b:da:c3:49:42:8c:1a:30:ed:83:4b:54:82:e3: 3a:cf:19:00:32:5d:1c:d2:c2:0b:e0:32:e0:4c:f9: bf:46:63:d9:f1:1f:49:f2:28:f8:8b:cd:17:55:57: 0e:49:99:a6:92:af:ea:8f:7e:ff:c8:e3:8d:fd:8e: 18:4e:ea:8e:84:2f:8b:d2:97:b5:b8:13:7b:a2:9c: 49:82:4c:01:73:70:d5:7f:db:7c:f5:0a:d1:8f:7b: 80:0a:72:43:80:0f:a1:a8:0c:fd:9f:6b:02:b5:4d: 37:9b:3f:02:a2:aa:bf:16:b9:53:46:7a:7f:26:1e: c2:05:cb:0c:b6:eb:80:3b:41:66:60:51:7c:e7:9c: c8:dc:14:2f:1c:fc:16:d8:c7:c5:a8:67:8f:61:93: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D1:A9:CE:4B:07:4B:82:76:51:EC:09:07:CE:79:1B:B5:E9:BF:24 X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:74:0d:b6:be:9a:18:ec:9b:5c:80:50:f7:e7:dc:01:02:77: ab:80:c9:66:87:fa:13:b1:36:0c:27:fb:fb:2e:da:7d:71:40: 4c:d2:6e:b5:d9:b0:b8:d2:61:3f:e4:73:03:88:14:47:63:53: a9:16:3a:3e:77:a4:c7:58:81:26:b0:af:6e:aa:b3:2e:a6:22: bd:90:a2:13:0d:d1:2b:61:b5:1a:5b:18:15:1d:08:14:f6:6f: d6:07:93:c4:46:8b:fc:14:ed:0b:ea:fb:9b:f3:8e:20:54:47: 30:d3:ff:2f:0e:c4:c7:04:4d:80:a5:8e:fe:a7:77:c7:09:31: 91:72:63:4e:bf:7a:a2:6f:b4:0f:4a:55:77:6e:33:71:ee:b2: 28:70:56:58:ed:8b:0d:1a:89:f7:6e:bd:ad:18:7e:9d:e4:8a: 3f:92:66:f9:27:e6:59:8c:26:3d:89:68:63:50:3c:c1:69:bd: dc:e3:a0:81:0b:1a:e4:b7:12:9c:5a:45:1f:fa:a2:1c:37:d0: d2:7c:ef:62:85:86:de:8a:0e:15:3b:74:13:2b:bf:72:fc:97: cb:34:80:fc:76:9b:2e:14:7c:b0:fe:97:f1:a8:01:8d:9a:39: f0:30:b3:49:e5:cb:4e:47:44:ed:00:04:ff:21:6a:99:7f:63: bb:37:f5:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjUxMjE2MTczNTI4WhcNMjUxMjIzMTczNTI4WjAYMRYwFAYD VQQDDA02OTQxOTg2MC1jOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP1Nr+Kd6sCoVMwJe496QvvSjLDpKD4OeXLg0v2pAT+Ndz2OJ9OZcs1L9OTY 0LwOkRPtAnQOI92SWNyGj/uFtSNlvalu9k2CyXBHOhtdZPZ77ZjmxxXfNaoHnN4z I2Vc34FH51+diwINW9rDSUKMGjDtg0tUguM6zxkAMl0c0sIL4DLgTPm/RmPZ8R9J 8ij4i80XVVcOSZmmkq/qj37/yOON/Y4YTuqOhC+L0pe1uBN7opxJgkwBc3DVf9t8 9QrRj3uACnJDgA+hqAz9n2sCtU03mz8Coqq/FrlTRnp/Jh7CBcsMtuuAO0FmYFF8 55zI3BQvHPwW2MfFqGePYZM13wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTRqc5L B0uCdlHsCQfOeRu16b8kMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUdA22vpoY7JtcgFD359wBAnergMlmh/oTsTYMJ/v7Ltp9cUBM0m61 2bC40mE/5HMDiBRHY1OpFjo+d6THWIEmsK9uqrMupiK9kKITDdErYbUaWxgVHQgU 9m/WB5PERov8FO0L6vub844gVEcw0/8vDsTHBE2ApY7+p3fHCTGRcmNOv3qib7QP SlV3bjNx7rIocFZY7YsNGon3br2tGH6d5Io/kmb5J+ZZjCY9iWhjUDzBab3c46CB CxrktxKcWkUf+qIcN9DSfO9ihYbeig4VO3QTK79y/JfLNID8dpsuFHyw/pfxqAGN mjnwMLNJ5ctOR0TtAAT/IWqZf2O7N/UD -----END CERTIFICATE-----Generated at Tue Dec 16 19:50:37 2025 by rpki-client