This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: ZBwKSjZURh+2p3VMdPDaZItLT35D/1HFqlkgoljVEms= Subject key identifier: 1E:06:56:4F:BB:06:9F:0E:8B:35:72:36:7A:2B:B6:05:BD:10:F9:2B Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 1200 Signing time: Thu 18 Dec 2025 19:07:58 +0000 Manifest this update: Thu 18 Dec 2025 19:07:58 +0000 Manifest next update: Thu 25 Dec 2025 19:07:58 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: 1wYqz2zdiHq2uoGLPnq74K9DCQDYRWLQj4Sz1dVqRiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: Dec 18 19:07:58 2025 GMT Not After : Dec 25 19:07:58 2025 GMT Subject: CN=6944510e-2378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:49:e3:ca:dc:ef:82:15:a6:0c:42:b2:89: 25:d3:22:f5:68:1a:91:c0:54:96:8d:13:93:01:b8: ec:ae:10:35:19:56:83:b8:73:dd:dd:1f:1b:ff:46: e2:80:92:ed:f1:d0:c2:cc:05:f4:f3:c6:2a:fd:ea: 36:16:63:b0:89:c5:c9:a4:ac:da:53:16:46:e1:39: 1b:b3:17:88:b2:20:e6:24:8c:31:3e:d1:5d:73:0b: ef:49:ca:3d:76:09:88:a0:b0:35:1a:6b:05:95:5a: a5:cb:36:37:f5:15:d6:25:c0:c7:5a:4e:52:87:2c: ab:5f:59:35:73:db:64:d8:44:a9:13:d2:af:86:82: 04:fd:6c:06:22:51:c6:be:4f:11:cb:d6:4d:a3:71: 79:0b:25:79:2f:8e:d1:b7:7e:6a:e7:3a:e8:c3:5b: 37:91:9b:52:f4:41:de:5e:80:9d:40:bd:13:1d:db: 46:13:d6:48:d9:12:84:bb:3a:f1:6b:cb:b9:cc:16: 84:e6:d3:ba:43:d9:ad:8c:c1:e2:e2:40:69:9d:86: d4:23:4d:95:fe:58:ac:2f:16:a5:11:4e:fb:16:f4: 18:72:07:ba:83:4c:cf:5b:f5:69:79:1e:f3:45:52: bc:b1:4a:b2:f4:45:47:a1:a7:c1:c3:85:18:9d:14: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:56:4F:BB:06:9F:0E:8B:35:72:36:7A:2B:B6:05:BD:10:F9:2B X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:ef:81:8d:ce:b6:c1:15:55:46:7d:29:48:5c:b4:14:e0:91: 28:e4:dc:e0:35:4c:8d:24:f6:dd:aa:b2:9e:0f:7b:ad:a2:6f: 93:72:84:9e:97:49:cb:11:47:e8:d6:77:20:4e:5d:a3:6a:a2: 70:76:88:1c:79:41:22:6f:16:75:a2:ed:30:f2:8a:8a:5f:33: ab:0c:32:74:c6:1f:2c:20:fd:75:4f:a7:4d:3f:66:48:c9:1e: 5c:f7:60:29:3f:58:07:e9:2e:cc:8b:51:cf:7a:cb:e7:a8:00: 97:0d:80:b1:63:0a:49:f3:40:50:10:46:f5:3f:12:7c:84:e6: e5:44:86:24:fd:64:d5:61:b5:9a:eb:eb:b9:63:11:82:6e:a2: 79:01:05:69:44:ad:80:31:e8:45:b4:a8:36:8c:75:d8:da:66: 05:8c:8e:7a:58:79:17:57:ff:f6:cd:2f:b2:09:dc:0e:85:5c: 63:4c:54:35:12:fa:62:14:a6:42:79:88:77:28:6a:c5:50:aa: 66:5b:9b:a9:2b:02:04:db:19:52:f9:35:54:b4:fd:f6:ed:98: da:1f:e2:8a:11:f0:3b:a5:0c:6c:6c:28:6c:0c:88:d6:c9:3e: 78:3b:53:fa:0a:c3:ce:ff:f5:c8:76:ce:90:3e:19:4b:db:53: 13:18:a3:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjUxMjE4MTkwNzU4WhcNMjUxMjI1MTkwNzU4WjAYMRYwFAYD VQQDDA02OTQ0NTEwZS0yMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7VJ48rc74IVpgxCsokl0yL1aBqRwFSWjROTAbjsrhA1GVaDuHPd3R8b/0bi gJLt8dDCzAX088Yq/eo2FmOwicXJpKzaUxZG4TkbsxeIsiDmJIwxPtFdcwvvSco9 dgmIoLA1GmsFlVqlyzY39RXWJcDHWk5ShyyrX1k1c9tk2ESpE9KvhoIE/WwGIlHG vk8Ry9ZNo3F5CyV5L47Rt35q5zrow1s3kZtS9EHeXoCdQL0THdtGE9ZI2RKEuzrx a8u5zBaE5tO6Q9mtjMHi4kBpnYbUI02V/lisLxalEU77FvQYcge6g0zPW/VpeR7z RVK8sUqy9EVHoafBw4UYnRQkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4GVk+7 Bp8OizVyNnortgW9EPkrMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDV74GNzrbBFVVGfSlIXLQU4JEo5NzgNUyNJPbdqrKeD3utom+TcoSe l0nLEUfo1ncgTl2jaqJwdogceUEibxZ1ou0w8oqKXzOrDDJ0xh8sIP11T6dNP2ZI yR5c92ApP1gH6S7Mi1HPesvnqACXDYCxYwpJ80BQEEb1PxJ8hOblRIYk/WTVYbWa 6+u5YxGCbqJ5AQVpRK2AMehFtKg2jHXY2mYFjI56WHkXV//2zS+yCdwOhVxjTFQ1 EvpiFKZCeYh3KGrFUKpmW5upKwIE2xlS+TVUtP327ZjaH+KKEfA7pQxsbChsDIjW yT54O1P6CsPO//XIds6QPhlL21MTGKMq -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:00 2025 by rpki-client