This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json) Hash identifier: rb3gJW4SuMkMzGLCxrSHg/G0R9wDeYovrzvdsRsEKjY= Subject key identifier: 30:9C:70:DE:1D:35:88:02:08:45:23:FE:54:8E:3E:21:EF:3F:F2:29 Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft Manifest number: 04E6 Signing time: Thu 18 Dec 2025 23:03:25 +0000 Manifest this update: Thu 18 Dec 2025 23:03:25 +0000 Manifest next update: Thu 25 Dec 2025 23:03:25 +0000 Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: RwXHgYiNf3CJIKBozy+hL9dWo7q4xj5eSib9em3mkow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Validity Not Before: Dec 18 23:03:25 2025 GMT Not After : Dec 25 23:03:25 2025 GMT Subject: CN=6944883d-5142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:6b:8a:66:0c:91:01:9c:ba:9f:6e:cd:aa: aa:b5:15:8b:11:03:af:3f:c4:03:fa:30:62:f5:e6: 1e:80:f4:d4:4f:c8:4e:e7:15:7f:3a:43:45:e7:24: 39:f1:3f:a3:d0:7a:c7:32:a7:ff:47:a5:dc:cc:d7: 38:46:d8:a9:e6:84:61:6a:a6:6a:82:10:fc:3e:bc: b6:71:f5:23:54:b3:c5:02:54:94:5e:01:ac:2f:fa: 8e:71:05:a3:6e:34:e0:d8:63:c6:37:44:ec:00:fa: 11:a2:a1:58:9a:f0:2a:38:d8:f0:f6:72:b0:6c:cf: 54:fb:84:a8:f9:80:4e:83:ca:ba:30:f4:c7:00:23: cf:48:b1:11:c4:ae:28:eb:2e:4b:b8:1e:af:22:1c: e1:8e:7a:11:e4:38:06:7f:1d:cc:c0:0d:a7:39:7c: 53:38:8f:40:6a:25:66:5c:75:3f:74:b5:a2:80:36: 66:25:dd:84:1d:1c:ea:44:f2:ac:d1:a4:14:74:4b: 4a:a2:29:a0:f9:5b:7c:cb:0a:75:76:a6:15:00:bd: 9f:a5:bc:1e:75:24:33:04:c6:78:17:77:9e:00:90: e4:37:2e:bd:e6:a1:3b:7d:e2:e8:54:5e:5a:f9:53: d9:65:d9:e6:7e:84:37:08:c1:a3:1c:56:6c:0d:dd: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:70:DE:1D:35:88:02:08:45:23:FE:54:8E:3E:21:EF:3F:F2:29 X509v3 Authority Key Identifier: keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:bd:23:05:e5:d8:30:3b:19:2b:cb:14:e4:68:9f:22:25: dd:ee:a7:2e:91:6c:80:55:f5:8d:38:fb:3e:84:ad:98:5a:90: fb:9a:4a:d9:81:d1:ed:65:18:ad:76:28:ae:53:72:66:f3:06: 27:ee:b2:45:7c:d2:e6:16:7c:aa:64:c1:f6:78:fa:f5:75:bf: 6a:e8:31:7d:d7:b2:ab:13:fe:d4:07:6f:02:bd:f6:50:aa:b7: f7:37:bc:d8:e2:65:9b:67:c7:7d:0a:31:92:f8:3c:0b:4c:01: 8b:82:f0:59:90:cc:4b:64:a8:c3:3a:37:47:97:41:b9:be:e7: 51:5d:4d:92:90:d3:ad:f5:c7:03:5c:9d:95:d6:33:1f:b0:36: 7c:a5:e1:3a:ac:bd:8e:4e:13:76:9b:77:e4:be:69:27:a1:7b: 8a:39:9c:32:a2:b9:a8:bf:af:11:92:b1:95:6e:61:e1:74:f4: d0:32:8e:43:7b:e7:46:0e:1f:25:38:3f:63:1b:ca:d5:27:d2: 3c:95:4d:d1:38:2d:17:52:5b:9f:8d:60:db:3c:ff:de:54:bb: c2:5d:d6:dc:34:e6:8d:b5:fc:4b:86:87:2b:6c:33:f8:75:ff: 16:3e:df:b5:e2:5c:f0:9b:6f:4d:65:2d:15:b6:4d:d0:e7:a7: 6d:f8:d7:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC QUNFQTU4NDEwHhcNMjUxMjE4MjMwMzI1WhcNMjUxMjI1MjMwMzI1WjAYMRYwFAYD VQQDDA02OTQ0ODgzZC01MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBdrimYMkQGcup9uzaqqtRWLEQOvP8QD+jBi9eYegPTUT8hO5xV/OkNF5yQ5 8T+j0HrHMqf/R6XczNc4Rtip5oRhaqZqghD8Pry2cfUjVLPFAlSUXgGsL/qOcQWj bjTg2GPGN0TsAPoRoqFYmvAqONjw9nKwbM9U+4So+YBOg8q6MPTHACPPSLERxK4o 6y5LuB6vIhzhjnoR5DgGfx3MwA2nOXxTOI9AaiVmXHU/dLWigDZmJd2EHRzqRPKs 0aQUdEtKoimg+Vt8ywp1dqYVAL2fpbwedSQzBMZ4F3eeAJDkNy695qE7feLoVF5a +VPZZdnmfoQ3CMGjHFZsDd1KvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCccN4d NYgCCEUj/lSOPiHvP/IpMB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX QXp3TzhBWWp6RXU2enFXRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2IL0jBeXYMDsZK8sU5GifIiXd7qcukWyAVfWNOPs+hK2YWpD7mkrZ gdHtZRitdiiuU3Jm8wYn7rJFfNLmFnyqZMH2ePr1db9q6DF917KrE/7UB28CvfZQ qrf3N7zY4mWbZ8d9CjGS+DwLTAGLgvBZkMxLZKjDOjdHl0G5vudRXU2SkNOt9ccD XJ2V1jMfsDZ8peE6rL2OThN2m3fkvmknoXuKOZwyormov68RkrGVbmHhdPTQMo5D e+dGDh8lOD9jG8rVJ9I8lU3ROC0XUlufjWDbPP/eVLvCXdbcNOaNtfxLhocrbDP4 df8WPt+14lzwm29NZS0Vtk3Q56dt+Ndn -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:41 2025 by rpki-client