This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: kNhFVjRNnP4nANdY+OubN5LEm+34bPEv8hYM/4jcQVA= Subject key identifier: 11:07:D8:58:A6:24:78:5E:DF:20:43:8F:49:CA:1F:4E:70:5B:80:F1 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0585 Signing time: Tue 30 Dec 2025 22:28:48 +0000 Manifest this update: Tue 30 Dec 2025 22:28:48 +0000 Manifest next update: Tue 06 Jan 2026 22:28:48 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: DaK5QCiHU7z702oTSJDDDBZB8PPriO7Fsk3jP5SasKM=) 2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: RyN8TdZ33FgQoqBN1enP2qHNRdbXtugooz5NQ7OTf7g=) 3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: sFxA7zWd1QKxzt33I3bSrxQFMBjh0wvM8Ox270gKZ1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 22:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Dec 30 22:28:48 2025 GMT Not After : Jan 6 22:28:48 2026 GMT Subject: CN=69545220-6dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:b8:ba:8d:10:d1:4f:e3:5d:18:9d:e2:d7: 4b:16:8d:e2:ef:5a:02:1c:d1:7d:02:d4:e2:74:76: 68:d1:05:e3:c8:54:df:94:41:d4:03:43:59:2a:ec: 77:cc:b4:60:0b:0d:e7:48:1f:82:72:15:8e:a8:d9: 9e:6a:c9:d7:54:1c:29:7b:35:eb:d0:a2:e0:8e:b9: 1e:12:43:c0:02:7f:9f:1a:aa:23:fe:f8:6f:10:5a: 59:04:1b:76:78:89:56:89:b9:df:f2:a3:70:24:bb: 4f:7b:e8:c5:ea:d7:e9:71:42:b1:62:b0:f2:2a:15: b1:ef:be:f4:4c:1d:b8:52:6d:d1:c7:d1:e0:e4:49: f1:fc:bf:31:37:64:82:f8:69:f8:b7:f2:f5:5b:db: 97:07:3d:9e:8c:76:5c:f3:52:1e:bc:86:51:f8:68: 5f:29:67:61:ee:ab:f9:65:9b:72:e5:ab:4e:46:f7: 95:44:85:e9:3f:0f:e0:fa:67:0e:36:5c:71:4a:17: 22:de:bd:22:67:28:27:e2:60:ee:4b:f9:9b:0a:99: 36:14:c7:d5:2e:9b:67:2f:5b:0a:2f:f9:04:59:93: 88:c0:18:47:af:40:d0:cb:6b:4c:83:83:07:d7:37: 88:18:9a:75:e5:a4:46:51:fb:f3:92:48:23:fb:de: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:07:D8:58:A6:24:78:5E:DF:20:43:8F:49:CA:1F:4E:70:5B:80:F1 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:16:b6:55:87:6b:4f:02:40:06:f7:73:25:fc:d3:13:86:5e: 46:c8:cf:45:05:72:9e:2d:56:12:d5:18:4a:b7:9f:c8:75:6d: 03:46:e7:50:2c:61:1b:08:4f:7d:ab:33:72:1b:be:9a:fc:c7: 83:37:03:83:fe:b2:1a:a4:4f:39:f5:72:1c:11:47:ec:bd:ba: 6b:77:43:59:58:dc:2a:57:97:c0:4c:36:53:53:7e:bf:ce:27: 00:d0:b0:52:76:38:7a:01:f3:03:9d:f8:4c:d4:df:40:30:31: 30:47:e3:15:74:1c:b9:e7:69:36:d8:dc:dc:5d:4e:08:99:82: 45:9e:11:b9:a5:64:9b:0e:65:fe:69:a4:d2:07:d9:2f:d9:8d: 67:28:70:76:76:16:2b:a2:fc:84:90:7f:30:8c:4c:7c:19:35: 75:b3:3b:04:09:09:00:32:4d:5b:cc:d1:07:4e:55:81:8a:20: 78:b7:ee:40:78:73:01:96:1c:4d:1e:32:6d:48:ca:07:2e:70: ba:cd:a3:d9:13:58:93:40:a0:dd:2a:30:54:a0:dc:c0:1b:b4: 9b:b4:1d:8f:67:72:00:b6:14:e0:84:02:8e:f5:3b:05:30:89: 9d:f9:da:27:e0:ed:13:05:a9:ff:74:25:c1:08:78:16:75:b6: cf:c6:7e:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUxMjMwMjIyODQ4WhcNMjYwMTA2MjIyODQ4WjAYMRYwFAYD VQQDDA02OTU0NTIyMC02ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi2O4uo0Q0U/jXRid4tdLFo3i71oCHNF9AtTidHZo0QXjyFTflEHUA0NZKux3 zLRgCw3nSB+CchWOqNmeasnXVBwpezXr0KLgjrkeEkPAAn+fGqoj/vhvEFpZBBt2 eIlWibnf8qNwJLtPe+jF6tfpcUKxYrDyKhWx7770TB24Um3Rx9Hg5Enx/L8xN2SC +Gn4t/L1W9uXBz2ejHZc81IevIZR+GhfKWdh7qv5ZZty5atORveVRIXpPw/g+mcO NlxxShci3r0iZygn4mDuS/mbCpk2FMfVLptnL1sKL/kEWZOIwBhHr0DQy2tMg4MH 1zeIGJp15aRGUfvzkkgj+94TkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEH2Fim JHhe3yBDj0nKH05wW4DxMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvFrZVh2tPAkAG93Ml/NMThl5GyM9FBXKeLVYS1RhKt5/IdW0DRudQ LGEbCE99qzNyG76a/MeDNwOD/rIapE859XIcEUfsvbprd0NZWNwqV5fATDZTU36/ zicA0LBSdjh6AfMDnfhM1N9AMDEwR+MVdBy552k22NzcXU4ImYJFnhG5pWSbDmX+ aaTSB9kv2Y1nKHB2dhYrovyEkH8wjEx8GTV1szsECQkAMk1bzNEHTlWBiiB4t+5A eHMBlhxNHjJtSMoHLnC6zaPZE1iTQKDdKjBUoNzAG7SbtB2PZ3IAthTghAKO9TsF MImd+don4O0TBan/dCXBCHgWdbbPxn4F -----END CERTIFICATE-----Generated at Wed Dec 31 07:57:40 2025 by rpki-client