This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: TEgLZ1NLI46oTWku0TcbGdf6cAQm0yHA1wnGi4uFNaM= Subject key identifier: CF:0D:F3:AF:80:17:0C:CD:5D:CF:01:DE:7E:6E:E1:DC:85:72:5B:99 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 0765 Signing time: Thu 25 Dec 2025 02:46:51 +0000 Manifest this update: Thu 25 Dec 2025 02:46:50 +0000 Manifest next update: Thu 01 Jan 2026 02:46:50 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: x/7ibwbuwvddXCay0DsVopGfi60+ddP0QYpPw/HXhBc=) 2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 9Q6UVfld/+rzBWvRbqts4WlKXGhealsLgosXkfmaleY=) 3: 9E0384D2D4AE11F0B3093770C4F9AE02.roa (hash: v9CiHNMRCrRNTUccG0SyqMKRfuFAi8FsxcmJZoqH2g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 02:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Dec 25 02:46:50 2025 GMT Not After : Jan 1 02:46:50 2026 GMT Subject: CN=694ca59b-b942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ee:c2:18:e3:c0:d3:20:0e:b3:05:e6:43:09: 16:6a:8b:87:4c:05:21:5e:22:3b:8f:e4:f8:3c:8b: 17:a4:79:ae:8f:e6:db:99:2f:2f:6c:75:0d:67:00: e4:9f:68:1a:1f:60:49:b3:59:a0:7a:e1:c5:4f:46: f1:1d:b5:c8:ca:f3:89:a2:c3:ee:5e:2c:26:d6:a1: 0b:21:f7:18:ba:77:12:94:bb:c9:4a:99:e6:2e:52: 2c:74:9f:fd:5f:cb:fc:c5:14:c9:d0:a2:e5:c9:02: af:80:96:fe:64:3e:88:f8:f6:bf:9f:11:78:89:fc: 1b:68:1f:49:68:07:b9:55:43:9c:b6:9d:03:29:8d: 78:54:a4:aa:80:6f:7e:49:b5:de:74:e8:02:ff:32: 42:1b:f3:aa:7d:78:cf:b6:19:db:2a:cb:f8:fd:67: e6:2b:d6:79:c2:3e:fa:a0:21:b9:2f:8b:2d:62:fb: 9e:8e:4d:b7:7b:f8:be:97:fc:37:9a:0c:b8:65:c1: ed:5c:c0:36:e6:60:ec:e2:ff:f4:df:7c:d7:a3:ff: 4c:59:55:1f:33:20:1d:c7:a8:13:c9:e1:31:05:27: e3:7a:dc:cf:31:f3:fd:3a:28:e3:2d:dc:48:3b:e8: b2:e8:72:ca:25:71:35:ee:6d:44:85:ff:66:dc:ca: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0D:F3:AF:80:17:0C:CD:5D:CF:01:DE:7E:6E:E1:DC:85:72:5B:99 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1f:49:bd:e4:72:fb:ee:df:1a:c2:0e:0c:41:3e:91:53:d8: 64:5d:2d:87:fe:e4:ad:31:e9:3d:f4:85:4a:90:29:3d:15:d6: 22:be:b8:69:1f:95:54:6e:7c:a4:29:a8:1a:36:92:07:ef:41: 7c:98:f8:b9:c4:9b:13:ff:52:d7:f3:e0:e2:cf:4a:be:16:46: 64:7b:54:e4:4b:c0:2b:99:0c:dc:a8:db:78:4d:fa:c8:6a:39: 3a:d7:e4:f3:f3:ba:65:de:f5:85:a4:94:2c:98:08:7a:63:03: e0:cc:06:24:1c:40:83:f9:8f:7b:9f:8a:45:2b:24:fb:5e:74: c8:40:8b:0a:d5:c6:66:f0:fc:15:09:87:4d:8b:ef:13:47:93: cf:2b:71:d1:d3:f8:b1:a8:11:e2:95:60:a8:e2:cd:42:3d:63: 47:91:0b:91:13:c5:98:c5:6c:6c:76:db:c3:df:80:c4:ba:48: ad:bc:01:c8:58:9c:cd:c5:ee:a5:2c:5d:e4:45:ad:64:bb:27: 64:59:50:9c:54:ee:c8:c8:de:69:a9:33:59:86:76:e9:c5:02: 34:4c:8e:38:c1:3d:11:2d:16:f8:04:d5:32:dc:aa:b4:20:ce: 0b:fe:3c:aa:63:07:3a:3c:f2:20:c3:ad:b9:32:d3:e5:08:1a: 7d:fe:ef:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjUxMjI1MDI0NjUwWhcNMjYwMTAxMDI0NjUwWjAYMRYwFAYD VQQDDA02OTRjYTU5Yi1iOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e7CGOPA0yAOswXmQwkWaouHTAUhXiI7j+T4PIsXpHmuj+bbmS8vbHUNZwDk n2gaH2BJs1mgeuHFT0bxHbXIyvOJosPuXiwm1qELIfcYuncSlLvJSpnmLlIsdJ/9 X8v8xRTJ0KLlyQKvgJb+ZD6I+Pa/nxF4ifwbaB9JaAe5VUOctp0DKY14VKSqgG9+ SbXedOgC/zJCG/OqfXjPthnbKsv4/WfmK9Z5wj76oCG5L4stYvuejk23e/i+l/w3 mgy4ZcHtXMA25mDs4v/033zXo/9MWVUfMyAdx6gTyeExBSfjetzPMfP9OijjLdxI O+iy6HLKJXE17m1Ehf9m3MqAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8N86+A FwzNXc8B3n5u4dyFcluZMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEH0m95HL77t8awg4MQT6RU9hkXS2H/uStMek99IVKkCk9FdYivrhp H5VUbnykKagaNpIH70F8mPi5xJsT/1LX8+Diz0q+FkZke1TkS8ArmQzcqNt4TfrI ajk61+Tz87pl3vWFpJQsmAh6YwPgzAYkHECD+Y97n4pFKyT7XnTIQIsK1cZm8PwV CYdNi+8TR5PPK3HR0/ixqBHilWCo4s1CPWNHkQuRE8WYxWxsdtvD34DEukitvAHI WJzNxe6lLF3kRa1kuydkWVCcVO7IyN5pqTNZhnbpxQI0TI44wT0RLRb4BNUy3Kq0 IM4L/jyqYwc6PPIgw625MtPlCBp9/u8b -----END CERTIFICATE-----Generated at Thu Dec 25 13:24:44 2025 by rpki-client