This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: qJ5GKcXRel1sW/QMlhYSHtdOeqDPIXug7RV6Y6HRyJQ= Subject key identifier: B0:A5:08:6C:F3:50:96:02:04:E0:D1:CF:F8:BA:84:2B:2D:A2:0A:8F Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 0173 Signing time: Fri 19 Dec 2025 03:04:00 +0000 Manifest this update: Fri 19 Dec 2025 03:04:00 +0000 Manifest next update: Fri 26 Dec 2025 03:04:00 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: f2ZqxdJKRbcvy4ALev0BWXpc4vWr1Kd0nRrjWP2bT90=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: da2ZawdG5alxBTyeAyi7NwDwyDeUsxgI6h/wI95o9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Dec 19 03:04:00 2025 GMT Not After : Dec 26 03:04:00 2025 GMT Subject: CN=6944c0a0-f16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:af:08:db:cd:d3:70:c9:fd:ed:bd:98:b6: c9:df:79:98:40:3a:2d:64:95:53:04:94:57:a7:8d: 27:44:bb:6a:cc:44:2d:f5:8f:85:7d:62:8d:7a:e3: e7:8a:4d:c0:12:c4:da:c0:97:16:1f:bf:c6:16:a2: 27:99:20:0a:13:3f:db:a2:ca:84:55:ff:cb:5b:aa: 51:91:39:5a:c0:19:4f:3b:be:a8:3f:e2:f1:94:17: 9d:e2:11:61:25:01:55:33:67:7c:ae:03:04:01:22: 96:77:3c:a0:9a:e6:50:27:b0:76:d5:3e:52:68:77: df:36:fc:ee:53:7f:7a:7f:b8:71:3a:09:e0:c7:fb: d0:8c:d2:94:f5:56:e1:1f:db:bf:7f:4f:d1:f8:f6: 20:ec:46:2d:3c:83:fe:ea:d8:4e:51:bf:23:eb:37: 82:54:55:ea:de:90:91:5a:1c:bb:c4:25:52:4a:18: 60:d4:ce:d8:a7:5a:35:b0:a0:70:4f:81:47:17:d4: fe:b3:bb:21:35:3f:8e:05:52:d7:6e:b7:6e:8e:50: 2a:10:38:36:41:b7:3e:17:c0:61:5c:f5:d6:7e:9f: d0:91:1e:c2:77:33:f1:b8:df:5c:ec:b3:38:8c:df: 9f:a9:b3:e4:bf:20:e3:b2:b5:3a:b7:56:b7:9e:24: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A5:08:6C:F3:50:96:02:04:E0:D1:CF:F8:BA:84:2B:2D:A2:0A:8F X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:6f:b2:bc:11:cd:3f:7c:9a:b8:3c:de:0f:0c:0f:ca:88: f3:68:fb:59:25:c7:c1:b6:3b:fc:f6:cc:a9:fd:1d:7b:e1:0a: 4e:47:a5:19:4a:23:92:d5:14:ef:52:9a:a8:c5:79:20:fb:dc: 3b:57:d8:c5:7f:c4:db:e2:03:91:a0:72:57:05:cb:d1:6c:0a: e4:3f:dd:9c:82:c4:41:c6:88:3b:6c:7f:9e:51:fe:93:ab:c9: dc:27:60:85:aa:cb:d6:10:9c:e8:bd:11:dc:6c:9c:98:f5:86: 66:6e:94:35:75:af:40:91:51:49:18:26:be:96:3a:35:42:d6: 4f:7d:28:c5:c4:d5:a9:13:60:b6:46:ce:9f:f0:8c:49:10:1f: e1:34:75:6d:19:bc:44:34:16:36:e2:79:2c:2c:0a:53:15:d6: 87:d9:fa:7a:bc:c8:7a:4d:32:ca:1d:3b:0d:40:17:53:51:7a: 2f:6a:9e:ba:ad:8f:04:cf:90:e2:d9:3e:66:be:b8:d4:48:5d: 91:39:fb:24:e7:d3:b7:f9:64:91:ea:25:7e:df:2a:18:0f:d5: 48:63:a5:64:43:3f:a4:2e:e5:17:df:0a:9f:fd:79:ca:bd:54: e5:83:fa:3b:87:d8:e8:ed:3c:d5:ef:42:b6:6c:ec:ba:44:a3: 49:b3:ff:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUxMjE5MDMwNDAwWhcNMjUxMjI2MDMwNDAwWjAYMRYwFAYD VQQDDA02OTQ0YzBhMC1mMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7avCNvN03DJ/e29mLbJ33mYQDotZJVTBJRXp40nRLtqzEQt9Y+FfWKNeuPn ik3AEsTawJcWH7/GFqInmSAKEz/bosqEVf/LW6pRkTlawBlPO76oP+LxlBed4hFh JQFVM2d8rgMEASKWdzygmuZQJ7B21T5SaHffNvzuU396f7hxOgngx/vQjNKU9Vbh H9u/f0/R+PYg7EYtPIP+6thOUb8j6zeCVFXq3pCRWhy7xCVSShhg1M7Yp1o1sKBw T4FHF9T+s7shNT+OBVLXbrdujlAqEDg2Qbc+F8BhXPXWfp/QkR7CdzPxuN9c7LM4 jN+fqbPkvyDjsrU6t1a3niSF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLClCGzz UJYCBODRz/i6hCstogqPMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbQG+yvBHNP3yauDzeDwwPyojzaPtZJcfBtjv89syp/R174QpOR6UZ SiOS1RTvUpqoxXkg+9w7V9jFf8Tb4gORoHJXBcvRbArkP92cgsRBxog7bH+eUf6T q8ncJ2CFqsvWEJzovRHcbJyY9YZmbpQ1da9AkVFJGCa+ljo1QtZPfSjFxNWpE2C2 Rs6f8IxJEB/hNHVtGbxENBY24nksLApTFdaH2fp6vMh6TTLKHTsNQBdTUXovap66 rY8Ez5Di2T5mvrjUSF2ROfsk59O3+WSR6iV+3yoYD9VIY6VkQz+kLuUX3wqf/XnK vVTlg/o7h9jo7TzV70K2bOy6RKNJs//j -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:10 2025 by rpki-client