This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: tNK2JIILVQu8O8RFf+P6paLAznVYRoiCIKo014z5Bl8= Subject key identifier: E4:4A:B9:31:64:D2:8D:42:CB:D8:F0:CF:4A:DE:FB:15:DA:65:FE:D2 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 0367 Signing time: Fri 19 Dec 2025 00:09:32 +0000 Manifest this update: Fri 19 Dec 2025 00:09:31 +0000 Manifest next update: Fri 26 Dec 2025 00:09:31 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: ZWrfoglPFIpWWoEkmXiljmToBInIetw6rNaVZn+QgFA=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: mRRgwNA+PP2GD4RfPaz1cyaWGNrkL/T4dyult2MIxPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Dec 19 00:09:31 2025 GMT Not After : Dec 26 00:09:31 2025 GMT Subject: CN=694497bc-eb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:53:1d:c2:d5:cc:d5:ce:e6:96:6e:e2:18: 65:5b:6a:e3:7e:ca:af:75:6a:59:61:72:75:03:3e: ce:4a:d3:01:90:c9:a2:a3:bb:1b:e2:b9:d3:11:45: 4b:02:e6:40:e6:a0:f7:76:0e:28:61:32:a2:0b:be: 1f:af:bd:f7:4d:be:ba:db:bd:7c:0f:02:c2:83:05: 6a:c1:32:83:3b:86:0b:8e:6c:bb:b9:c2:a1:32:43: bf:b0:2e:84:92:9a:22:a5:5f:6d:e3:1c:b1:a5:59: e1:7a:b1:b6:8a:31:97:35:6d:e4:9b:77:dc:47:3e: 5e:b7:0c:ec:df:c8:ce:88:7f:2b:7b:c0:ab:0b:43: d9:9d:55:f0:0f:2e:e5:70:cd:cb:27:ef:6a:83:11: 76:5e:ac:fc:18:a1:3d:c6:fe:de:9a:ba:33:dd:e1: d1:fe:9e:73:38:23:48:a8:64:84:87:64:52:72:a8: 07:47:a8:00:ac:e1:6f:ad:bc:6b:3f:32:60:a6:ac: 1e:f5:88:13:1b:8f:a8:5a:fb:24:7a:bf:4b:24:11: c8:e7:20:38:4a:56:57:5a:5a:42:cb:54:2d:43:4f: 5d:fe:17:a2:d5:7e:da:95:eb:80:00:42:2c:ae:ac: bb:b5:1d:d3:d5:d0:1c:cc:38:a2:37:84:bc:e6:ed: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:B9:31:64:D2:8D:42:CB:D8:F0:CF:4A:DE:FB:15:DA:65:FE:D2 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5f:ce:1c:72:9e:93:0b:5f:e4:df:ff:4d:2f:d8:36:f0:53: 56:88:69:61:96:8a:bf:38:62:f2:e8:5e:04:ce:1e:5e:b4:a5: bb:37:1e:7a:86:d1:f1:be:b6:38:af:fc:1b:7d:16:f5:4b:ec: 4f:0b:1c:8a:86:e9:80:79:37:cb:c8:fb:31:34:f6:20:cb:90: 67:6f:fe:86:b1:d1:a8:94:74:31:2d:f3:d7:57:7e:d0:0a:34: 87:3d:88:2f:4d:b8:39:5f:5c:0a:a0:5a:f5:b2:65:84:d8:6c: a4:e2:c4:9b:a8:44:25:56:37:cc:42:39:19:06:67:48:0a:4d: f1:b3:6d:48:8e:38:26:bf:18:ca:2d:f2:fd:82:2f:70:cf:a9: ca:c0:16:c5:b1:00:64:8b:10:09:a7:8f:69:08:dd:30:68:34: fb:6d:c8:f8:52:79:46:90:11:b0:76:bc:a4:b5:3a:74:56:e3: 8a:a7:e2:e7:13:7d:56:c4:87:59:6b:4b:25:d8:81:16:0c:08: 4e:e6:c2:ef:32:3f:9f:8f:02:17:62:67:ee:16:01:38:3a:ed: 3d:0d:f5:e9:b3:a1:6f:0f:db:6d:bf:9b:b7:ee:ea:9c:6f:67: 8e:35:82:d6:60:98:05:4d:18:d7:25:91:48:24:5e:fb:f1:d4: 06:07:13:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUxMjE5MDAwOTMxWhcNMjUxMjI2MDAwOTMxWjAYMRYwFAYD VQQDDA02OTQ0OTdiYy1lYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscBTHcLVzNXO5pZu4hhlW2rjfsqvdWpZYXJ1Az7OStMBkMmio7sb4rnTEUVL AuZA5qD3dg4oYTKiC74fr733Tb662718DwLCgwVqwTKDO4YLjmy7ucKhMkO/sC6E kpoipV9t4xyxpVnherG2ijGXNW3km3fcRz5etwzs38jOiH8re8CrC0PZnVXwDy7l cM3LJ+9qgxF2Xqz8GKE9xv7emroz3eHR/p5zOCNIqGSEh2RScqgHR6gArOFvrbxr PzJgpqwe9YgTG4+oWvsker9LJBHI5yA4SlZXWlpCy1QtQ09d/hei1X7aleuAAEIs rqy7tR3T1dAczDiiN4S85u3TMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORKuTFk 0o1Cy9jwz0re+xXaZf7SMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiX84ccp6TC1/k3/9NL9g28FNWiGlhloq/OGLy6F4Ezh5etKW7Nx56 htHxvrY4r/wbfRb1S+xPCxyKhumAeTfLyPsxNPYgy5Bnb/6GsdGolHQxLfPXV37Q CjSHPYgvTbg5X1wKoFr1smWE2Gyk4sSbqEQlVjfMQjkZBmdICk3xs21IjjgmvxjK LfL9gi9wz6nKwBbFsQBkixAJp49pCN0waDT7bcj4UnlGkBGwdryktTp0VuOKp+Ln E31WxIdZa0sl2IEWDAhO5sLvMj+fjwIXYmfuFgE4Ou09DfXps6FvD9ttv5u37uqc b2eONYLWYJgFTRjXJZFIJF778dQGBxP0 -----END CERTIFICATE-----Generated at Fri Dec 19 21:52:27 2025 by rpki-client