This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: g/rKElDkTZu+kJ3TZ5LFLv0KdlqQ7d/MVHJ/LSHgkgE= Subject key identifier: 74:7B:D1:F4:C8:EA:2A:5E:B7:A3:B2:B7:D6:88:E5:A7:BB:24:D0:88 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C69 Signing time: Mon 22 Dec 2025 18:08:27 +0000 Manifest this update: Mon 22 Dec 2025 18:08:27 +0000 Manifest next update: Mon 29 Dec 2025 18:08:27 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: Nttf61mTumeZYix6Mv2l2HixnekkavgYLAXDA1pKrvE=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Dec 22 18:08:27 2025 GMT Not After : Dec 29 18:08:27 2025 GMT Subject: CN=6949891b-5d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:3f:d8:aa:21:47:19:63:25:f0:bd:97:11: fd:2e:61:ad:1c:99:5c:fd:dc:45:a1:af:b1:db:91: 48:9f:09:d9:fc:cf:3a:60:22:c1:90:0f:a0:1b:bf: c0:f1:5b:ba:b7:84:e9:1e:d2:75:2a:ee:1b:2a:98: db:35:7e:a1:48:f0:71:bf:cf:27:01:a4:91:e9:2c: cb:f8:62:ba:15:ba:9a:c1:0d:c1:de:9b:67:64:ad: aa:96:0c:ee:c7:8d:6d:51:8b:45:40:c5:e8:60:25: 5a:6c:aa:f8:36:c8:be:63:3f:f3:11:bb:ce:8b:a5: 24:ea:d2:fc:a3:db:51:e1:5a:d9:51:e9:af:78:45: 42:73:1a:7c:6b:70:83:0e:8f:eb:14:82:71:4f:ac: 1d:1a:ab:12:fe:90:86:19:d7:49:48:e6:39:32:c0: cd:64:12:d1:d9:c2:d8:cf:75:9c:fe:c3:57:ed:3e: 90:85:4a:7d:b9:9f:99:66:43:09:d5:31:7e:d1:98: b0:79:ce:83:11:3e:66:aa:f8:1c:8d:62:ca:07:fe: d4:29:b5:e0:65:95:1a:d9:21:76:11:53:48:18:a4: c2:d5:c4:d3:61:dd:b8:94:0c:b1:b1:ec:df:f9:99: 43:ee:93:98:ea:ba:3c:94:37:67:40:ef:7f:87:7c: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7B:D1:F4:C8:EA:2A:5E:B7:A3:B2:B7:D6:88:E5:A7:BB:24:D0:88 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e9:5c:99:d7:45:c1:0f:4c:38:3f:3e:31:57:f3:b0:a6:e2: 36:f1:77:95:9b:a2:20:ab:3b:33:f4:2b:f7:04:fe:5d:c4:9f: 10:ea:e2:c1:69:fb:9c:cb:f4:3b:c7:a4:5f:8c:ee:c0:7b:c2: 53:aa:84:df:ec:0d:4c:92:84:1c:db:c5:ce:8c:6b:8e:64:79: 20:6e:65:47:0a:c1:00:17:d3:e5:f4:56:2c:9d:c9:25:e1:dc: 90:f5:e9:ad:ce:01:3c:eb:e8:e3:25:cf:ff:62:c4:e9:fb:6b: 5a:0a:bb:85:38:54:c4:b2:43:f8:5f:64:6d:26:a9:6f:c1:ff: 06:f9:f3:bf:19:83:8c:0b:fc:a4:4c:60:79:7c:be:35:76:fb: f8:c4:8f:87:f9:dd:fb:ef:af:d6:5d:26:7e:15:dd:00:e5:99: 88:eb:53:3d:28:81:b6:ea:b2:24:43:76:ea:55:ea:29:63:92: 61:f9:28:c0:3d:08:de:09:c8:8b:72:db:e8:d0:dd:44:39:2a: 03:39:6c:36:39:fd:4c:ef:b0:24:32:99:29:db:b0:04:5c:5f: 2e:ce:27:64:6d:b6:1a:1c:00:1a:a6:b9:6d:15:a0:a6:28:9e: ab:30:04:a8:3e:f2:d0:7a:09:4c:b0:c3:ef:52:eb:9d:a7:d9: f5:44:50:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUxMjIyMTgwODI3WhcNMjUxMjI5MTgwODI3WjAYMRYwFAYD VQQDDA02OTQ5ODkxYi01ZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApws/2KohRxljJfC9lxH9LmGtHJlc/dxFoa+x25FInwnZ/M86YCLBkA+gG7/A 8Vu6t4TpHtJ1Ku4bKpjbNX6hSPBxv88nAaSR6SzL+GK6FbqawQ3B3ptnZK2qlgzu x41tUYtFQMXoYCVabKr4Nsi+Yz/zEbvOi6Uk6tL8o9tR4VrZUemveEVCcxp8a3CD Do/rFIJxT6wdGqsS/pCGGddJSOY5MsDNZBLR2cLYz3Wc/sNX7T6QhUp9uZ+ZZkMJ 1TF+0Ziwec6DET5mqvgcjWLKB/7UKbXgZZUa2SF2EVNIGKTC1cTTYd24lAyxsezf +ZlD7pOY6ro8lDdnQO9/h3wpAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR70fTI 6ipet6Oyt9aI5ae7JNCIMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU6VyZ10XBD0w4Pz4xV/OwpuI28XeVm6Igqzsz9Cv3BP5dxJ8Q6uLB afucy/Q7x6RfjO7Ae8JTqoTf7A1MkoQc28XOjGuOZHkgbmVHCsEAF9Pl9FYsnckl 4dyQ9emtzgE86+jjJc//YsTp+2taCruFOFTEskP4X2RtJqlvwf8G+fO/GYOMC/yk TGB5fL41dvv4xI+H+d3776/WXSZ+Fd0A5ZmI61M9KIG26rIkQ3bqVeopY5Jh+SjA PQjeCciLctvo0N1EOSoDOWw2Of1M77AkMpkp27AEXF8uzidkbbYaHAAaprltFaCm KJ6rMASoPvLQeglMsMPvUuudp9n1RFDP -----END CERTIFICATE-----Generated at Tue Dec 23 20:51:28 2025 by rpki-client