This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: i9wa54P+9ujcNjvN/Q92lBgvFcAYf9fnLRvtgelUuv8= Subject key identifier: 2E:B7:B8:84:71:D1:41:AC:05:4C:9F:07:31:A4:B3:4A:EF:2F:74:87 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 0963 Signing time: Thu 18 Dec 2025 19:39:42 +0000 Manifest this update: Thu 18 Dec 2025 19:39:41 +0000 Manifest next update: Thu 25 Dec 2025 19:39:41 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: AtI3dQhS5jtNzD500YYNP0B6ybhcCcDoLq4Kk0cSiIk=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: Dqc2A2nNp9iRWlHOyQUrLEGAECqLcbkzGYQ/tB1zbpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Dec 18 19:39:41 2025 GMT Not After : Dec 25 19:39:41 2025 GMT Subject: CN=6944587e-ef75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:1b:59:e4:17:1f:f5:9c:b0:34:72:af:97: 48:fa:29:4f:e7:87:cf:e6:a8:43:ea:5c:6b:fd:98: 8b:9d:c1:93:bb:2e:34:c9:dd:0a:5e:9e:b8:22:d8: 59:5a:05:90:7f:e7:c5:37:22:d7:78:02:41:54:89: 66:ae:70:80:ac:75:a6:87:7b:0e:ea:0c:f2:76:95: 55:a0:1e:63:be:b5:79:5c:e9:9f:1b:ce:70:f6:45: 2d:c1:e8:8f:24:2c:0d:08:c5:54:e3:dd:0d:22:42: 06:24:7a:84:87:66:a6:89:9f:1e:b1:b7:ac:e4:7c: e9:c8:e9:cd:1a:01:b3:b0:d5:ad:f6:63:55:7f:88: 3e:2b:cb:cd:7b:3f:54:2c:f9:5d:05:dd:01:54:14: 29:c7:2a:63:18:c0:6b:4f:68:68:5d:e4:f1:e7:fd: e1:35:ca:59:58:b8:7d:34:2a:3c:67:74:f9:22:5d: 75:0d:07:68:9b:46:46:f9:55:b9:70:9c:96:44:c5: cb:b4:ad:10:42:98:ad:c5:e6:ee:00:5c:52:b7:46: 70:48:40:a9:48:af:83:f4:fc:60:04:e0:7c:8b:62: 93:d5:44:9c:4a:f8:1a:9c:2c:9d:f7:35:c8:a8:5b: 60:fe:fe:d2:f4:0d:7b:ef:bd:5d:ab:2a:92:ad:88: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:B8:84:71:D1:41:AC:05:4C:9F:07:31:A4:B3:4A:EF:2F:74:87 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:dc:8d:b7:9a:18:61:e7:5b:cd:bc:e1:9b:2b:15:3b:c2:9b: 09:fc:08:73:bd:2e:e5:56:b9:76:92:a9:06:90:cc:7a:3a:fe: 7a:19:e6:63:0a:56:53:b3:4c:2d:fb:87:6f:ce:ec:42:67:f1: 0c:7f:d1:8c:d3:38:7c:b5:d4:d5:ab:f8:8c:d7:25:58:44:91: 25:53:73:28:38:9a:82:e4:f6:81:5c:4a:14:6d:dc:7e:a5:c4: 80:25:fa:d2:86:c7:35:ee:8b:59:b9:13:1c:c9:9a:3d:42:70: cf:c0:f8:77:51:a1:0b:8b:fc:8b:0c:af:9f:b3:a2:48:41:b8: 7f:d7:fc:2e:4f:a6:c2:39:34:06:5a:c1:1f:4e:8b:cf:b9:5e: 12:da:86:d0:d7:47:53:cf:14:03:f8:de:45:f2:69:70:e2:c0: 25:8e:53:cb:1d:8c:e7:28:16:8f:2e:06:8e:82:ac:d6:f4:6e: ff:a6:f5:01:fb:6e:11:3f:c7:18:c2:ea:cf:8e:7a:f3:cc:f2: 2e:26:6e:36:97:c0:35:fb:b6:4c:66:76:31:0d:00:c7:d5:c6: c3:86:e3:e5:bf:45:70:05:64:3c:df:bd:9b:f5:a0:0d:97:31: 71:5e:c7:03:cd:f2:7c:bf:4e:5b:0c:7d:71:9e:75:9e:97:c0: 47:f6:34:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjUxMjE4MTkzOTQxWhcNMjUxMjI1MTkzOTQxWjAYMRYwFAYD VQQDDA02OTQ0NTg3ZS1lZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjp4bWeQXH/WcsDRyr5dI+ilP54fP5qhD6lxr/ZiLncGTuy40yd0KXp64IthZ WgWQf+fFNyLXeAJBVIlmrnCArHWmh3sO6gzydpVVoB5jvrV5XOmfG85w9kUtweiP JCwNCMVU490NIkIGJHqEh2amiZ8esbes5HzpyOnNGgGzsNWt9mNVf4g+K8vNez9U LPldBd0BVBQpxypjGMBrT2hoXeTx5/3hNcpZWLh9NCo8Z3T5Il11DQdom0ZG+VW5 cJyWRMXLtK0QQpitxebuAFxSt0ZwSECpSK+D9PxgBOB8i2KT1UScSvganCyd9zXI qFtg/v7S9A17771dqyqSrYhDXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC63uIRx 0UGsBUyfBzGks0rvL3SHMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq3I23mhhh51vNvOGbKxU7wpsJ/AhzvS7lVrl2kqkGkMx6Ov56GeZj ClZTs0wt+4dvzuxCZ/EMf9GM0zh8tdTVq/iM1yVYRJElU3MoOJqC5PaBXEoUbdx+ pcSAJfrShsc17otZuRMcyZo9QnDPwPh3UaELi/yLDK+fs6JIQbh/1/wuT6bCOTQG WsEfTovPuV4S2obQ10dTzxQD+N5F8mlw4sAljlPLHYznKBaPLgaOgqzW9G7/pvUB +24RP8cYwurPjnrzzPIuJm42l8A1+7ZMZnYxDQDH1cbDhuPlv0VwBWQ8372b9aAN lzFxXscDzfJ8v05bDH1xnnWel8BH9jRM -----END CERTIFICATE-----Generated at Fri Dec 19 17:36:40 2025 by rpki-client