This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json) Hash identifier: U0QiF72ILORjS5cPBfsmhsnjPHOqc99s1wcrDUK3Y+8= Subject key identifier: 51:27:31:A7:2D:DB:49:9E:B7:61:6E:D5:05:07:B1:28:37:D4:2D:C0 Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Certificate serial: 01 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft Manifest number: 01 Signing time: Fri 19 Dec 2025 04:28:42 +0000 Manifest this update: Fri 19 Dec 2025 04:28:42 +0000 Manifest next update: Fri 26 Dec 2025 04:28:42 +0000 Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: zKKSIsjrtYZGROD8zjqfmpY+2b0AUQoWsjFEptPQa04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Validity Not Before: Dec 19 04:28:42 2025 GMT Not After : Dec 26 04:28:42 2025 GMT Subject: CN=6944d47a-7bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:e4:c9:5d:c9:b2:0b:9c:12:8d:94:9a:31: f5:f1:3e:ad:2b:b8:40:26:b1:c6:00:51:3f:12:e8: 06:e6:5e:4a:70:d2:7f:54:fc:47:1a:eb:60:01:2f: 60:62:5d:bf:59:f4:b5:7f:64:c3:65:a3:61:fa:97: 6f:3a:6c:52:41:8a:08:fa:29:41:dc:29:fc:76:9d: 38:22:05:d7:8d:88:38:7c:8c:f9:3d:ae:b8:67:4f: 4b:ae:86:5a:e4:61:bc:48:dc:66:15:db:d5:42:b5: 29:8d:f7:ad:af:6f:82:96:d4:d4:79:38:9d:63:be: c9:ea:9e:e3:76:a6:9b:d6:08:96:9d:47:fe:61:fd: bc:5c:45:4f:8e:ac:ff:12:86:06:f8:09:40:86:a8: 4d:2b:24:66:5c:bf:7d:14:5f:92:8d:a5:46:fe:56: 96:dd:3d:d0:56:0a:b4:14:96:2b:12:29:53:b7:ee: d7:7b:a9:63:85:7e:cb:ba:da:4d:a8:b6:3c:b1:1b: 5a:63:6a:b6:0d:44:37:c7:c9:87:fc:1e:bb:ef:7b: d0:b8:ec:56:e7:af:97:95:40:54:f9:1b:26:e4:ad: 0d:51:ba:b9:02:7c:9a:ee:a8:8d:b2:aa:fd:cc:bf: 21:c4:b5:9e:eb:89:27:a8:38:55:7b:04:2c:a4:a1: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:31:A7:2D:DB:49:9E:B7:61:6E:D5:05:07:B1:28:37:D4:2D:C0 X509v3 Authority Key Identifier: keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e9:c8:a5:0d:a5:97:9b:7c:0c:45:43:f3:4c:0c:65:fa:d3: 68:22:4d:42:a9:9b:9b:94:9e:22:8b:ba:94:5c:f7:f7:ae:03: 71:4f:0e:3c:23:9a:a0:f7:08:4a:1e:20:91:df:ca:d2:dc:16: 6d:96:89:e0:f9:37:7d:5d:a5:6b:56:84:7e:06:ba:09:97:34: b2:cb:79:3a:9e:2c:4a:d1:83:52:ad:d9:6a:7c:33:86:19:89: f4:92:65:b1:f2:b1:92:c9:2f:b4:c2:ce:33:75:4c:e8:26:71: f7:20:8d:48:3c:da:05:3b:d9:06:bb:f6:88:ed:79:d1:1c:d8: 8f:7b:6b:13:b1:4c:56:79:b0:70:1c:a6:ea:58:ff:a4:f0:ef: 8c:c6:d6:a0:22:74:29:b4:fb:08:4c:b3:31:fd:a9:2e:02:10: 51:40:20:a3:90:20:5f:b5:5b:59:46:0a:05:e0:94:37:a5:fe: 78:c7:d6:39:65:a2:49:8f:cc:76:4e:89:0d:32:7e:0f:5d:52: 66:25:2b:60:49:d0:3f:d2:f0:ee:ef:51:66:68:8d:06:09:f3: e6:f1:2e:90:27:94:70:ef:3c:c3:a0:36:d8:89:22:2a:0e:bd: da:0f:92:07:ce:0c:44:b6:5e:89:f4:eb:cf:4e:dc:16:36:cb: 49:76:e2:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBATANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE1 MTkzMjExMC8GA1UEBRMoMzYzOERGQTNCOTg1NkExNUFEOUQ1NDMwNkI1QkY3MDYz MEY2MzY0NjAeFw0yNTEyMTkwNDI4NDJaFw0yNTEyMjYwNDI4NDJaMBgxFjAUBgNV BAMMDTY5NDRkNDdhLTdiYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+JOTJXcmyC5wSjZSaMfXxPq0ruEAmscYAUT8S6AbmXkpw0n9U/Eca62ABL2Bi Xb9Z9LV/ZMNlo2H6l286bFJBigj6KUHcKfx2nTgiBdeNiDh8jPk9rrhnT0uuhlrk YbxI3GYV29VCtSmN962vb4KW1NR5OJ1jvsnqnuN2ppvWCJadR/5h/bxcRU+OrP8S hgb4CUCGqE0rJGZcv30UX5KNpUb+VpbdPdBWCrQUlisSKVO37td7qWOFfsu62k2o tjyxG1pjarYNRDfHyYf8Hrvve9C47Fbnr5eVQFT5GybkrQ1RurkCfJruqI2yqv3M vyHEtZ7riSeoOFV7BCykodjrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUScxpy3b SZ63YW7VBQexKDfULcAwHwYDVR0jBBgwFoAUNjjfo7mFahWtnVQwa1v3BjD2NkYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzJBNUU4QjAyREM5 MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21GYWhXdG5WUXdhMXYzQmpEMk5r WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmpqZm83bUZhaFd0blZRd2ExdjNCakQyTmtZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzJBNUU4QjAyREM5MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21GYWhX dG5WUXdhMXYzQmpEMk5rWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjpyKUNpZebfAxFQ/NMDGX602giTUKpm5uUniKLupRc9/euA3FPDjwj mqD3CEoeIJHfytLcFm2WieD5N31dpWtWhH4GugmXNLLLeTqeLErRg1Kt2Wp8M4YZ ifSSZbHysZLJL7TCzjN1TOgmcfcgjUg82gU72Qa79ojtedEc2I97axOxTFZ5sHAc pupY/6Tw74zG1qAidCm0+whMszH9qS4CEFFAIKOQIF+1W1lGCgXglDel/njH1jll okmPzHZOiQ0yfg9dUmYlK2BJ0D/S8O7vUWZojQYJ8+bxLpAnlHDvPMOgNtiJIioO vdoPkgfODES2Xon0689O3BY2y0l24ig= -----END CERTIFICATE-----Generated at Sat Dec 20 21:03:27 2025 by rpki-client