This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: PNa24J6za05272VQIEx/BEyZN/fVkD+979Phpo931sY= Subject key identifier: 16:47:3B:F9:9D:D0:73:DF:02:42:AB:60:CA:A4:EC:3E:4A:51:DE:E1 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 085D Signing time: Sat 20 Dec 2025 20:04:38 +0000 Manifest this update: Sat 20 Dec 2025 20:04:38 +0000 Manifest next update: Sat 27 Dec 2025 20:04:38 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: 04TXFfrCJHISjDxhz0Dwxgo7Ru7a/YlhASKS3iJmUR0=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6X9DRIYN2JCL/kdvqE4XHDfEtLiRnlrwHj3YHZE4kgg=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Dec 20 20:04:38 2025 GMT Not After : Dec 27 20:04:38 2025 GMT Subject: CN=69470156-6f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:2d:dd:9c:d3:54:5b:3d:1c:34:c4:fb:61: 8a:3b:12:a2:6b:a4:72:a9:90:ed:9a:5f:ec:e5:13: 1d:a4:f5:e4:21:8a:e9:93:37:72:d2:75:43:c5:fc: d5:3f:20:4b:d4:f7:5f:ac:07:e0:92:95:a5:13:9c: cf:bc:e7:f3:67:55:36:ae:58:cf:2e:0a:f8:81:96: 99:42:b3:85:ff:ea:bc:d8:99:de:7d:6e:11:86:37: 93:74:5d:83:3d:7c:94:a8:3f:f6:51:d9:ee:42:31: bb:96:cd:0c:f2:5a:47:16:07:80:80:3b:55:e8:b3: 77:3b:46:2c:2a:5d:5d:a5:2a:e0:84:1c:77:d5:8d: 40:79:d3:5d:89:ed:95:29:95:f3:55:ff:96:69:5e: 1f:e9:e9:98:a7:90:d5:81:01:19:df:32:b8:b6:17: 7f:1a:2e:15:3b:ed:0c:4c:ba:bd:7c:7d:7b:e7:8e: 74:5c:f7:0b:10:84:41:43:b0:6a:47:ea:0c:94:09: 99:d6:a0:58:df:63:eb:71:a3:6a:0e:1e:08:7b:91: a1:f8:d9:ba:36:25:01:08:33:6c:6d:86:a3:e5:87: 3f:5a:42:dc:75:c5:cf:94:e9:91:eb:e7:52:29:b2: 65:85:6d:49:0e:df:a4:6f:5f:2f:a8:66:d3:44:e5: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:47:3B:F9:9D:D0:73:DF:02:42:AB:60:CA:A4:EC:3E:4A:51:DE:E1 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:3f:a7:e7:15:38:ea:29:f3:04:5a:06:90:7e:c9:7b:f7:45: 1e:20:df:29:f5:14:ab:35:d1:be:da:84:f2:19:db:cf:12:32: e9:17:3b:e9:8c:3c:d9:db:7e:a4:17:bc:90:54:56:e8:b6:74: ba:dd:b7:d7:97:13:27:55:40:6d:c7:73:68:54:d2:44:6c:25: 21:ca:a3:43:07:87:fc:3f:c9:da:35:eb:88:5b:84:1e:68:97: b5:f6:b6:d7:5b:3b:6b:30:90:0e:0e:bc:14:8c:a0:78:de:04: 1b:c2:47:4b:51:e3:68:99:c3:9b:5c:ff:da:29:f4:42:0d:83: 68:1a:17:c2:7b:6d:b8:55:be:59:42:a1:4a:9c:18:5a:b9:7c: f8:81:a7:b2:37:65:31:52:c1:4a:b9:ef:da:0b:84:0d:72:8c: 76:bc:82:08:4a:2b:67:9b:3b:4e:af:6b:4d:2c:ae:d9:4c:6f: 03:98:90:bd:4f:95:63:85:03:41:4e:f1:a4:19:e9:f0:53:80: 6d:3d:c4:42:a9:71:10:c0:80:93:b5:50:99:58:9f:7a:b8:5c: 47:77:7b:e2:ab:91:fa:96:8a:84:54:ca:34:bb:a7:10:3a:4a: 7a:6e:d4:01:79:a3:3a:03:fa:80:67:6c:2b:a1:5f:f5:0a:72: ef:d8:f5:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUxMjIwMjAwNDM4WhcNMjUxMjI3MjAwNDM4WjAYMRYwFAYD VQQDDA02OTQ3MDE1Ni02ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluQt3ZzTVFs9HDTE+2GKOxKia6RyqZDtml/s5RMdpPXkIYrpkzdy0nVDxfzV PyBL1PdfrAfgkpWlE5zPvOfzZ1U2rljPLgr4gZaZQrOF/+q82JnefW4RhjeTdF2D PXyUqD/2UdnuQjG7ls0M8lpHFgeAgDtV6LN3O0YsKl1dpSrghBx31Y1AedNdie2V KZXzVf+WaV4f6emYp5DVgQEZ3zK4thd/Gi4VO+0MTLq9fH175450XPcLEIRBQ7Bq R+oMlAmZ1qBY32PrcaNqDh4Ie5Gh+Nm6NiUBCDNsbYaj5Yc/WkLcdcXPlOmR6+dS KbJlhW1JDt+kb18vqGbTROXgDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZHO/md 0HPfAkKrYMqk7D5KUd7hMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5P6fnFTjqKfMEWgaQfsl790UeIN8p9RSrNdG+2oTyGdvPEjLpFzvp jDzZ236kF7yQVFbotnS63bfXlxMnVUBtx3NoVNJEbCUhyqNDB4f8P8naNeuIW4Qe aJe19rbXWztrMJAODrwUjKB43gQbwkdLUeNomcObXP/aKfRCDYNoGhfCe224Vb5Z QqFKnBhauXz4gaeyN2UxUsFKue/aC4QNcox2vIIISitnmztOr2tNLK7ZTG8DmJC9 T5VjhQNBTvGkGenwU4BtPcRCqXEQwICTtVCZWJ96uFxHd3viq5H6loqEVMo0u6cQ Okp6btQBeaM6A/qAZ2wroV/1CnLv2PXn -----END CERTIFICATE-----Generated at Sun Dec 21 10:46:49 2025 by rpki-client