This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: WHlbUdTUpGfJo7FGQM5S5Edv1o1dcDBPe83YN9+AtHA= Subject key identifier: 25:C7:88:EC:60:45:3D:DB:BF:4A:ED:A6:B2:73:D0:91:87:F1:92:A2 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 057F Signing time: Thu 18 Dec 2025 22:38:09 +0000 Manifest this update: Thu 18 Dec 2025 22:38:09 +0000 Manifest next update: Thu 25 Dec 2025 22:38:09 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: AmxdtATlS6XTuoDKYX+2eLvCxiFeRA96HiFlEZjIkm8=) 2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: RyN8TdZ33FgQoqBN1enP2qHNRdbXtugooz5NQ7OTf7g=) 3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: sFxA7zWd1QKxzt33I3bSrxQFMBjh0wvM8Ox270gKZ1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Dec 18 22:38:09 2025 GMT Not After : Dec 25 22:38:09 2025 GMT Subject: CN=69448251-4f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:2e:03:7b:58:7a:5e:a6:24:17:45:b5:a7: 36:87:21:d0:60:3b:e7:e6:2e:c9:a9:63:0c:02:d0: 8a:54:f4:2e:c3:e9:a9:93:73:b9:f3:78:f3:3f:17: a0:4e:24:8a:0e:bb:61:e2:8f:12:a3:13:33:2f:e6: 9d:75:aa:6b:74:bf:7c:e7:9f:fb:b7:c7:38:59:cf: 2b:3a:c9:9c:fe:ec:0f:40:41:cb:a9:bd:26:1c:51: 24:fa:63:9d:52:66:31:d2:3c:0e:9a:58:00:e0:82: 83:5f:95:14:91:df:38:be:d3:29:28:84:95:45:51: 88:e6:a0:a6:70:98:4a:46:9d:71:65:12:19:85:fe: bf:31:1c:e3:97:41:fa:be:5f:66:c9:86:59:9a:a9: a8:fb:61:15:cf:bd:24:65:44:66:b3:e6:50:36:c3: 9c:05:53:e5:94:dd:f3:f4:24:51:37:16:50:0c:bb: f4:56:7b:9a:06:df:03:5b:75:a8:68:09:b1:a0:4c: 19:7f:eb:73:3d:f2:5d:a8:23:69:c7:80:95:4c:58: 78:1a:6a:2a:b1:bb:59:76:d8:a4:73:46:21:b5:f6: 1f:16:9d:bc:83:1e:e5:5a:c8:fb:94:ef:1f:05:20: 54:ab:ed:e8:52:86:9a:a4:fa:07:53:13:8a:4f:cf: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C7:88:EC:60:45:3D:DB:BF:4A:ED:A6:B2:73:D0:91:87:F1:92:A2 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:64:a3:26:87:8e:f3:b5:67:98:23:39:1d:c3:19:7e:c8:89: e2:f6:99:cd:c9:7c:11:a7:b8:45:0f:7a:82:af:06:72:1f:02: 74:4a:2b:ee:5b:11:1b:60:13:c2:86:86:f8:e6:48:59:81:4a: 9b:f6:e1:70:54:1b:d1:92:64:a0:60:b7:7d:a2:77:0a:48:35: ab:38:80:7e:49:6c:e4:5a:f1:6a:96:d4:f4:c5:87:c5:e6:b4: f9:ae:39:44:10:0b:79:43:c6:7a:c8:87:bf:73:4f:58:5c:73: b7:49:48:71:3c:77:1b:c8:0a:86:39:00:fc:cf:e9:2e:ba:24: e7:7d:91:76:ca:7e:6a:ba:4a:0a:08:07:d3:97:5a:d3:46:ec: cf:07:92:6b:f8:85:93:0e:42:3c:65:b2:0d:84:8f:94:bc:2f: e0:83:e6:12:f6:62:fa:d7:cd:c7:ee:9b:02:ab:b7:cf:c6:6e: 0b:03:3e:b3:58:46:67:29:1b:9b:3a:2a:c6:15:cc:77:1e:09: 5d:1c:36:06:e7:0f:72:e7:5a:7f:3f:6c:c4:0b:85:9d:53:7a: da:a8:55:86:f1:af:3b:74:c7:89:50:6c:4b:98:b9:27:a9:a1: 1a:fb:4a:f0:c1:1d:48:7e:e7:f2:b5:08:ee:21:b4:42:79:40: ea:ec:a0:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUxMjE4MjIzODA5WhcNMjUxMjI1MjIzODA5WjAYMRYwFAYD VQQDDA02OTQ0ODI1MS00ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMguA3tYel6mJBdFtac2hyHQYDvn5i7JqWMMAtCKVPQuw+mpk3O583jzPxeg TiSKDrth4o8SoxMzL+addaprdL9855/7t8c4Wc8rOsmc/uwPQEHLqb0mHFEk+mOd UmYx0jwOmlgA4IKDX5UUkd84vtMpKISVRVGI5qCmcJhKRp1xZRIZhf6/MRzjl0H6 vl9myYZZmqmo+2EVz70kZURms+ZQNsOcBVPllN3z9CRRNxZQDLv0VnuaBt8DW3Wo aAmxoEwZf+tzPfJdqCNpx4CVTFh4GmoqsbtZdtikc0YhtfYfFp28gx7lWsj7lO8f BSBUq+3oUoaapPoHUxOKT8//5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXHiOxg RT3bv0rtprJz0JGH8ZKiMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZZKMmh47ztWeYIzkdwxl+yIni9pnNyXwRp7hFD3qCrwZyHwJ0Sivu WxEbYBPChob45khZgUqb9uFwVBvRkmSgYLd9oncKSDWrOIB+SWzkWvFqltT0xYfF 5rT5rjlEEAt5Q8Z6yIe/c09YXHO3SUhxPHcbyAqGOQD8z+kuuiTnfZF2yn5qukoK CAfTl1rTRuzPB5Jr+IWTDkI8ZbINhI+UvC/gg+YS9mL6183H7psCq7fPxm4LAz6z WEZnKRubOirGFcx3HgldHDYG5w9y51p/P2zEC4WdU3raqFWG8a87dMeJUGxLmLkn qaEa+0rwwR1IfufytQjuIbRCeUDq7KB/ -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:59 2025 by rpki-client