This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: lURYoHLR8uyvDJ4BnSoV7xWDVxxnX/5ZZ7StoOg/Feg= Subject key identifier: EB:D1:51:14:A6:C3:8C:EC:F6:45:9F:AF:FB:6C:0E:AD:6B:62:82:65 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 2018 Signing time: Thu 18 Dec 2025 15:58:11 +0000 Manifest this update: Thu 18 Dec 2025 15:58:10 +0000 Manifest next update: Thu 25 Dec 2025 15:58:10 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: vBu59TevSnI9H8Dvb6TuHIOk+lWuS/HgU8KeKF0igHk=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: aFxmstcvEMQ/qqQO/m7uR2Alk5KmIeuyGi0FUw+S+g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Dec 18 15:58:10 2025 GMT Not After : Dec 25 15:58:10 2025 GMT Subject: CN=69442492-32b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:80:35:03:bb:17:43:c4:aa:6e:a8:5d:b1: c8:81:ea:70:2e:94:6e:00:4d:97:76:1a:e1:cd:a4: e3:12:8e:b4:7b:0d:81:0c:86:82:60:4e:b5:3f:67: 33:62:d9:35:bd:53:9f:91:2c:3a:e1:37:0c:0d:bb: f1:71:3e:be:87:fb:b4:bb:a3:9d:03:12:91:f2:8d: f1:1d:99:59:cb:7f:7e:cd:13:67:b4:85:c3:d9:ba: 69:79:d9:ba:29:5b:f6:8e:e8:7c:30:ad:95:e8:14: c0:27:0a:81:df:bf:ca:7c:70:ba:d1:da:bf:fa:76: 45:08:07:5a:e8:2d:a1:40:0a:a9:ce:1f:81:5b:bd: c9:f6:46:6e:42:d8:ea:03:90:8a:b0:81:03:bb:ae: 21:5d:16:ee:36:fd:c8:40:11:5d:d4:03:c0:6d:4e: f7:ec:61:89:31:db:3a:cf:00:5d:34:2f:20:58:d3: a1:3e:7b:54:c1:64:7b:2f:65:c3:24:0c:94:7b:d3: a3:6a:cd:97:ca:9f:29:a2:36:bd:58:7d:99:86:c4: 2a:f5:da:2d:e3:2c:bd:e2:75:bd:52:10:9f:8d:a3: 3d:47:30:58:94:81:63:b1:cc:51:b9:5f:68:fc:4d: db:cd:66:0d:49:90:62:76:ca:78:9b:05:b0:85:73: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:51:14:A6:C3:8C:EC:F6:45:9F:AF:FB:6C:0E:AD:6B:62:82:65 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e2:a9:41:d7:b9:d7:eb:93:6a:16:74:84:27:41:b8:d3:e4: 1d:97:6b:77:35:88:92:86:17:89:f9:bb:8b:b8:e0:ea:7c:50: 58:26:1a:a0:c9:0b:22:0d:bf:62:be:76:7c:61:6e:96:cc:2a: 7a:da:8f:df:fe:a3:2f:92:94:3c:99:be:16:0a:c7:92:2d:b6: 45:f4:7a:6f:b0:32:b7:05:13:fc:10:33:43:8b:ff:74:28:bc: ae:28:7a:8c:60:c9:31:56:51:7e:5f:e7:e0:45:55:27:fc:80: 2b:68:47:e9:08:bb:e0:f4:ca:74:2a:93:78:29:fa:2f:33:d5: 1b:75:15:fc:50:fa:4b:6c:60:40:5a:eb:fe:fa:58:c0:e4:8f: 24:3a:7a:4b:c9:f7:b9:74:c1:7c:ad:83:da:be:b2:da:8b:a6: b7:31:a8:b5:c6:0b:94:98:e2:c3:09:f5:65:a8:15:75:03:82: b0:87:ff:53:20:80:49:21:cc:2e:fd:bc:cc:1d:60:af:1c:c5: b1:0b:77:cf:eb:47:dc:c0:3b:43:b8:9a:6a:89:b5:ce:82:80: c0:74:f7:51:d4:22:29:34:0c:a4:dc:1a:4d:6b:df:02:5d:c4: 26:27:03:44:46:8a:f4:18:03:81:29:22:5e:a5:a9:4b:20:9c: 31:f4:1e:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUxMjE4MTU1ODEwWhcNMjUxMjI1MTU1ODEwWjAYMRYwFAYD VQQDDA02OTQ0MjQ5Mi0zMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MKANQO7F0PEqm6oXbHIgepwLpRuAE2XdhrhzaTjEo60ew2BDIaCYE61P2cz Ytk1vVOfkSw64TcMDbvxcT6+h/u0u6OdAxKR8o3xHZlZy39+zRNntIXD2bppedm6 KVv2juh8MK2V6BTAJwqB37/KfHC60dq/+nZFCAda6C2hQAqpzh+BW73J9kZuQtjq A5CKsIEDu64hXRbuNv3IQBFd1APAbU737GGJMds6zwBdNC8gWNOhPntUwWR7L2XD JAyUe9Ojas2Xyp8poja9WH2ZhsQq9dot4yy94nW9UhCfjaM9RzBYlIFjscxRuV9o /E3bzWYNSZBidsp4mwWwhXNIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvRURSm w4zs9kWfr/tsDq1rYoJlMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA4qlB17nX65NqFnSEJ0G40+Qdl2t3NYiShheJ+buLuODqfFBYJhqg yQsiDb9ivnZ8YW6WzCp62o/f/qMvkpQ8mb4WCseSLbZF9HpvsDK3BRP8EDNDi/90 KLyuKHqMYMkxVlF+X+fgRVUn/IAraEfpCLvg9Mp0KpN4KfovM9UbdRX8UPpLbGBA Wuv++ljA5I8kOnpLyfe5dMF8rYPavrLai6a3Mai1xguUmOLDCfVlqBV1A4Kwh/9T IIBJIcwu/bzMHWCvHMWxC3fP60fcwDtDuJpqibXOgoDAdPdR1CIpNAyk3BpNa98C XcQmJwNERor0GAOBKSJepalLIJwx9B7/ -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:38 2025 by rpki-client