This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: 14EXhybTN4fRr7OpfqRo/UKODlc964Zqe+BGmmc+sPk= Subject key identifier: FE:CC:91:6A:3E:6D:B8:91:07:53:22:BB:15:6B:F8:63:6B:C3:6F:0A Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1CB7 Signing time: Sun 28 Dec 2025 15:58:23 +0000 Manifest this update: Sun 28 Dec 2025 15:58:22 +0000 Manifest next update: Sun 04 Jan 2026 15:58:22 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: gI57v6Fu9JaZQahd6+FOUenkHWbbxnTew34wFmEhcqc=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: fMJYRNYu9EHrc5oKc1TxPlzepBubKFgRR2gCF/JM5ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 15:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7376 (0x1cd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: Dec 28 15:58:22 2025 GMT Not After : Jan 4 15:58:22 2026 GMT Subject: CN=6951539e-236e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:b3:5e:7e:71:86:b0:49:6f:39:cd:72:8e: 1d:15:63:cf:e4:f5:f4:47:c2:1c:45:2d:d6:27:db: 42:2e:7b:44:11:bb:10:17:8b:5c:8c:1b:76:9e:2e: ee:5c:d6:07:2d:75:2a:13:a6:28:d5:2d:01:79:52: 30:d2:22:06:1b:20:46:d0:ea:72:f6:9a:06:fe:8e: 51:e0:85:13:d1:5e:61:b9:54:21:4e:31:53:11:57: 66:f8:73:4a:65:1d:87:81:47:02:6d:59:dc:05:b0: 43:76:88:59:2f:be:31:b3:c3:e6:16:38:96:b5:d6: 07:ea:2a:66:45:fe:87:dc:38:da:b4:ff:1a:a2:b0: 16:ce:10:d4:a5:6c:04:38:c7:ae:6e:3c:71:85:2f: 62:15:36:45:ff:6e:4a:45:c3:37:2d:8e:1f:18:c9: 58:4e:1c:10:2b:9b:39:2d:c0:29:ca:3c:37:ed:60: c0:be:05:24:27:dc:d7:00:2e:fe:a9:e2:5c:f4:9a: 0e:79:86:17:75:16:98:99:7d:27:cd:15:7b:01:f9: 67:23:a6:66:8d:bf:8a:3e:7c:b6:05:e8:26:5e:52: 6e:25:f8:a6:20:81:e9:db:cf:c1:b0:00:44:51:e8: cb:5a:bb:28:83:e5:5e:27:94:a2:d6:00:3b:75:7e: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:91:6A:3E:6D:B8:91:07:53:22:BB:15:6B:F8:63:6B:C3:6F:0A X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a8:91:03:7e:fb:a6:4f:6d:d5:d3:c2:7c:b1:06:33:f6:1b: ad:1a:fa:df:bf:19:7a:4e:1e:1c:54:59:f6:14:13:a1:4e:2a: 90:23:cc:89:f2:d7:ce:fa:fa:96:18:d1:0e:f8:b3:f2:10:8e: aa:5a:7c:48:36:bb:b0:3f:79:9b:3c:ab:15:5f:4f:12:0b:2d: f4:cc:10:bd:f5:97:c8:af:ac:a6:33:ae:e5:1c:7f:43:63:8a: 30:33:53:d6:e7:38:5b:c2:ec:86:d3:f1:5d:d8:6a:c3:24:8a: 1f:9e:d1:2d:bd:20:0a:9f:2f:c7:64:51:b2:22:dc:b3:bf:d5: ab:53:53:53:42:db:a8:0d:0a:51:ec:49:a4:00:0a:5b:e4:f4: 3a:b3:6f:57:70:f1:7b:9f:5f:95:e1:eb:c1:5a:c3:2b:37:d6: c7:94:04:66:57:7d:dc:a2:29:9e:6f:0b:2e:53:80:f9:d0:d6: e4:8c:1f:e6:15:8a:15:63:38:01:6e:87:21:24:46:98:0a:18: c6:e0:87:6f:63:1d:00:b7:23:85:d6:71:9b:ec:c2:67:c2:a1: c8:77:37:82:50:74:3e:64:b8:4d:4e:d4:35:bb:53:38:90:fd: 97:48:bf:d2:13:f6:b4:ca:a7:fa:d3:8e:df:87:e0:1d:94:56: 71:6e:4f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjUxMjI4MTU1ODIyWhcNMjYwMTA0MTU1ODIyWjAYMRYwFAYD VQQDDA02OTUxNTM5ZS0yMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJGzXn5xhrBJbznNco4dFWPP5PX0R8IcRS3WJ9tCLntEEbsQF4tcjBt2ni7u XNYHLXUqE6Yo1S0BeVIw0iIGGyBG0Opy9poG/o5R4IUT0V5huVQhTjFTEVdm+HNK ZR2HgUcCbVncBbBDdohZL74xs8PmFjiWtdYH6ipmRf6H3DjatP8aorAWzhDUpWwE OMeubjxxhS9iFTZF/25KRcM3LY4fGMlYThwQK5s5LcApyjw37WDAvgUkJ9zXAC7+ qeJc9JoOeYYXdRaYmX0nzRV7AflnI6Zmjb+KPny2BegmXlJuJfimIIHp28/BsABE UejLWrsog+VeJ5Si1gA7dX4Y6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7MkWo+ bbiRB1MiuxVr+GNrw28KMB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlqJEDfvumT23V08J8sQYz9hutGvrfvxl6Th4cVFn2FBOhTiqQI8yJ 8tfO+vqWGNEO+LPyEI6qWnxINruwP3mbPKsVX08SCy30zBC99ZfIr6ymM67lHH9D Y4owM1PW5zhbwuyG0/Fd2GrDJIofntEtvSAKny/HZFGyItyzv9WrU1NTQtuoDQpR 7EmkAApb5PQ6s29XcPF7n1+V4evBWsMrN9bHlARmV33coimebwsuU4D50NbkjB/m FYoVYzgBbochJEaYChjG4IdvYx0AtyOF1nGb7MJnwqHIdzeCUHQ+ZLhNTtQ1u1M4 kP2XSL/SE/a0yqf6047fh+AdlFZxbk/A -----END CERTIFICATE-----Generated at Tue Dec 30 11:33:14 2025 by rpki-client