This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: zNIJhJejEg/R4qmpIIWrzR9tSFleBEIr/rpPkURTQWg= Subject key identifier: 15:B7:EA:16:51:58:13:89:AD:C3:4E:30:65:D5:DA:B0:70:E1:CE:53 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 0544 Signing time: Sat 20 Dec 2025 22:51:30 +0000 Manifest this update: Sat 20 Dec 2025 22:51:29 +0000 Manifest next update: Sat 27 Dec 2025 22:51:29 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: qmLML7nznzLzGUWvaYyF/rCsw1+swZxzKyPCM7tK+nI=) 2: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=) 3: 058EA22EDB0A11F080DEC20382D3641D.roa (hash: IqDiDqFtVjIRopdlZHPBabUajsPyIoKHoBOGPIyEc5w=) 4: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=) 5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Dec 20 22:51:29 2025 GMT Not After : Dec 27 22:51:29 2025 GMT Subject: CN=69472872-3afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:22:30:1c:fd:81:17:47:92:2c:25:d6:81: ef:62:16:10:c3:1d:5b:b4:03:c5:c0:dd:e7:90:5e: 20:6f:51:f9:46:1e:14:3c:7d:85:d1:05:a1:1b:4c: 04:fd:1c:65:9a:f8:e4:55:35:5c:5c:c7:b8:52:7e: e2:f2:15:9c:63:23:b2:08:fc:ab:dc:49:20:e5:ab: 35:2c:1a:0b:9f:3e:4d:31:88:1f:b2:cb:ea:54:22: 2f:c5:53:57:7a:ec:cf:4a:e3:91:60:0a:56:86:83: c0:56:d7:ca:4d:78:20:ec:73:4c:e0:a6:6c:f8:3f: 58:f5:3c:e5:f6:6e:b4:96:a4:90:4e:f6:fb:67:35: d3:d1:58:6f:12:c1:59:5c:7c:45:f5:ee:9d:d9:7a: cf:09:10:f6:da:fc:6e:87:91:64:7f:7a:88:c4:32: eb:79:7f:5f:8d:3b:6a:7e:5a:5e:85:b6:f9:09:32: 99:1d:07:c2:b8:a8:8c:f0:c6:2c:59:1d:0e:60:ce: cc:cc:ca:60:1d:16:d7:6e:0a:2e:93:ad:30:e9:a0: b4:c6:46:1e:70:fa:50:e7:43:02:c9:2d:77:d9:8e: 83:87:ef:6e:18:6e:be:23:b3:2f:1a:21:f6:89:ba: 16:82:2e:f9:dd:1e:67:6c:ae:bd:13:ed:43:5c:d9: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B7:EA:16:51:58:13:89:AD:C3:4E:30:65:D5:DA:B0:70:E1:CE:53 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2a:10:27:12:66:77:4a:cf:db:2b:df:2b:41:7e:51:fd:fb: d6:47:46:83:d6:d5:08:19:c3:17:2e:4d:79:bc:4d:3b:da:cd: 14:eb:c2:1c:23:e8:48:2e:23:21:fa:26:e1:88:e2:f6:c1:d5: e7:c5:bd:d5:ef:b1:86:c2:52:82:5a:ad:2c:74:b4:60:15:51: 62:53:d7:d4:58:f6:2f:6d:f4:d0:3d:e6:2d:26:f1:5e:01:36: 2c:d1:e8:d7:bc:a0:76:5f:b6:1b:48:a2:7e:49:59:1d:22:f0: 42:dc:3a:72:66:6e:47:a9:20:8b:90:cb:5d:7f:4a:49:09:46: 15:5a:6e:46:ba:b0:ba:a4:3d:9d:81:9a:2a:3a:e4:08:95:d9: 8e:4a:66:24:5d:72:f5:5e:76:1f:25:ef:f7:d4:2b:92:ee:bc: ee:1d:82:b5:cf:bb:cf:0f:7b:3a:97:f3:c5:94:9e:68:c2:08: 1a:9c:3c:e0:03:a3:89:25:92:22:03:7b:0b:23:f9:0d:2e:16: 2e:b3:db:5f:fe:05:ad:7e:0e:ca:19:f9:70:86:a0:a7:43:83: 1b:2f:82:9b:db:b2:29:fc:83:2a:cc:17:f8:20:db:25:88:fb: c8:08:6c:3f:e1:61:a8:09:b6:a3:d8:51:72:d1:f5:d3:5b:5f: 22:ed:1a:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUxMjIwMjI1MTI5WhcNMjUxMjI3MjI1MTI5WjAYMRYwFAYD VQQDDA02OTQ3Mjg3Mi0zYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujEiMBz9gRdHkiwl1oHvYhYQwx1btAPFwN3nkF4gb1H5Rh4UPH2F0QWhG0wE /RxlmvjkVTVcXMe4Un7i8hWcYyOyCPyr3Ekg5as1LBoLnz5NMYgfssvqVCIvxVNX euzPSuORYApWhoPAVtfKTXgg7HNM4KZs+D9Y9Tzl9m60lqSQTvb7ZzXT0VhvEsFZ XHxF9e6d2XrPCRD22vxuh5Fkf3qIxDLreX9fjTtqflpehbb5CTKZHQfCuKiM8MYs WR0OYM7MzMpgHRbXbgouk60w6aC0xkYecPpQ50MCyS132Y6Dh+9uGG6+I7MvGiH2 iboWgi753R5nbK69E+1DXNmHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBW36hZR WBOJrcNOMGXV2rBw4c5TMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9KhAnEmZ3Ss/bK98rQX5R/fvWR0aD1tUIGcMXLk15vE072s0U68Ic I+hILiMh+ibhiOL2wdXnxb3V77GGwlKCWq0sdLRgFVFiU9fUWPYvbfTQPeYtJvFe ATYs0ejXvKB2X7YbSKJ+SVkdIvBC3DpyZm5HqSCLkMtdf0pJCUYVWm5GurC6pD2d gZoqOuQIldmOSmYkXXL1XnYfJe/31CuS7rzuHYK1z7vPD3s6l/PFlJ5owgganDzg A6OJJZIiA3sLI/kNLhYus9tf/gWtfg7KGflwhqCnQ4MbL4Kb27Ip/IMqzBf4INsl iPvICGw/4WGoCbaj2FFy0fXTW18i7Rrc -----END CERTIFICATE-----Generated at Sun Dec 21 02:23:26 2025 by rpki-client