This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json) Hash identifier: jYRoPzsT9aHzO6/px5A+MRq5LsqYTmI9tuLmffH5hdk= Subject key identifier: 66:5B:A2:CF:2B:B1:25:60:9E:CF:F5:25:61:12:F7:D3:F8:C8:AF:7B Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 06:52:58 +0000 Manifest this update: Fri 19 Dec 2025 06:52:58 +0000 Manifest next update: Fri 26 Dec 2025 06:52:58 +0000 Files and hashes: 1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: eI4+y7P06Ps57Jhyvw2aA8wAJBqrRE+5iLr1yvjn670=) 2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: APz1fq2YwQ7yS7mDD19LwdpN2CTZ/bZgxloH7c0/wbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Validity Not Before: Dec 19 06:52:58 2025 GMT Not After : Dec 26 06:52:58 2025 GMT Subject: CN=6944f64a-f446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ae:7d:ee:31:53:eb:94:80:44:3e:5a:e2:f9: ff:4a:a5:bc:32:8b:d5:f6:dc:ae:df:86:b1:ba:36: 81:79:6d:33:52:49:9c:dc:88:19:00:49:33:03:39: 69:05:7e:0f:93:9d:9c:85:74:b5:06:41:c2:d9:83: 5e:20:98:63:5f:5d:a5:8a:03:74:4c:d6:30:33:f8: 6f:ce:bf:8e:6a:be:fa:2f:42:57:c9:4d:88:fb:68: d6:d4:5d:44:9c:26:ba:03:47:a9:06:66:02:fd:7e: e7:5b:dc:85:2e:e4:ec:ff:80:c7:07:fd:e2:ff:db: 54:78:d5:e6:ad:63:e8:19:99:b3:49:c0:4e:5b:9a: a5:8c:fe:2a:ec:53:c4:69:83:27:92:af:0e:67:51: f1:8e:7d:53:56:e3:38:82:20:d7:2d:66:f6:bf:a3: f6:c3:4e:64:7d:e6:0f:e7:71:4e:98:1b:99:de:42: 8c:3e:cf:a1:39:3c:30:a5:18:61:1c:c7:d6:72:39: 03:04:c5:e0:06:8c:ad:c1:64:1b:6a:0a:1f:90:01: 31:e7:06:0c:35:af:66:30:90:a4:f1:fd:b0:36:82: 15:e1:1b:49:6d:47:b7:e9:a3:5d:33:31:70:33:58: 5a:ff:1e:86:36:ee:e7:73:de:73:7a:2c:38:a6:ad: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:A2:CF:2B:B1:25:60:9E:CF:F5:25:61:12:F7:D3:F8:C8:AF:7B X509v3 Authority Key Identifier: keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:c3:3f:f4:37:85:7f:9b:f1:7e:1f:e2:d6:99:08:9b:9e: 84:83:7f:51:c6:32:f6:da:c6:3e:05:42:9c:10:57:46:55:36: 2d:73:22:ec:ca:34:d9:53:35:2b:d4:70:f2:b1:26:7e:2d:c5: 8f:05:e6:21:15:f5:31:d7:c7:72:80:ed:16:1e:2e:b3:59:54: 0d:3a:26:3b:8d:e2:8e:d3:8d:87:52:18:dc:6f:bc:db:45:3b: 79:88:d5:20:88:ca:11:37:b0:7b:48:ec:99:fc:1d:cd:b3:ab: 3f:81:76:43:26:50:0b:97:cd:a7:87:47:60:02:21:71:73:df: 9a:09:04:c2:0d:d3:10:cb:87:3a:ad:ba:65:ee:27:c4:b6:a4: 7b:de:23:25:59:a6:09:6e:67:c4:1e:3f:f7:1c:60:0a:7b:5c: 94:ed:ca:0c:6e:e2:f3:90:7a:fb:88:91:ee:2b:48:b1:53:d3: 57:1a:1f:d3:44:2c:f3:15:71:dc:17:2d:2c:6b:7e:18:4c:6f: 03:0b:a6:8a:93:cf:b7:d2:0d:23:14:15:e9:67:d0:db:7c:93: cb:c4:04:2d:bb:a4:7e:38:5a:2c:c4:73:3c:40:4f:b2:ed:7a: 06:fa:80:e4:4e:89:a2:f3:45:d9:89:2d:b6:f1:7d:2a:f9:dd: a7:f3:0f:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjlFRjExMC8GA1UEBRMoMzRGNDY3NkMwNjYzODM5MTQ3OTczRDRDODY5QjQ5REM4 QzY2NDBGMzAeFw0yNTEyMTkwNjUyNThaFw0yNTEyMjYwNjUyNThaMBgxFjAUBgNV BAMMDTY5NDRmNjRhLWY0NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtrn3uMVPrlIBEPlri+f9Kpbwyi9X23K7fhrG6NoF5bTNSSZzciBkASTMDOWkF fg+TnZyFdLUGQcLZg14gmGNfXaWKA3RM1jAz+G/Ov45qvvovQlfJTYj7aNbUXUSc JroDR6kGZgL9fudb3IUu5Oz/gMcH/eL/21R41eatY+gZmbNJwE5bmqWM/irsU8Rp gyeSrw5nUfGOfVNW4ziCINctZva/o/bDTmR95g/ncU6YG5neQow+z6E5PDClGGEc x9ZyOQMExeAGjK3BZBtqCh+QATHnBgw1r2YwkKTx/bA2ghXhG0ltR7fpo10zMXAz WFr/HoY27udz3nN6LDimrTSzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZluizyux JWCez/UlYRL30/jIr3swHwYDVR0jBBgwFoAUNPRnbAZjg5FHlz1MhptJ3IxmQPMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOUVGLzg3ODcyM0U2Qzg0 RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBSbmJBWmpnNUZIbHoxTWhwdEozSXhtUVBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OUVGLzg3ODcyM0U2Qzg0RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVG SGx6MU1ocHRKM0l4bVFQTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZgwz/0N4V/m/F+H+LWmQibnoSDf1HGMvbaxj4FQpwQV0ZVNi1zIuzK NNlTNSvUcPKxJn4txY8F5iEV9THXx3KA7RYeLrNZVA06JjuN4o7TjYdSGNxvvNtF O3mI1SCIyhE3sHtI7Jn8Hc2zqz+BdkMmUAuXzaeHR2ACIXFz35oJBMIN0xDLhzqt umXuJ8S2pHveIyVZpgluZ8QeP/ccYAp7XJTtygxu4vOQevuIke4rSLFT01caH9NE LPMVcdwXLSxrfhhMbwMLpoqTz7fSDSMUFeln0Nt8k8vEBC27pH44WizEczxAT7Lt egb6gOROiaLzRdmJLbbxfSr53afzDxw= -----END CERTIFICATE-----Generated at Fri Dec 19 18:42:34 2025 by rpki-client