This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: +gmq71v28Ibfwya2lYVwBEPkwTCg2DZAuJmYfrSNgqs= Subject key identifier: B9:48:63:D8:FA:57:67:6D:16:2A:7F:98:73:4A:0C:AB:F4:69:45:31 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01A6 Signing time: Fri 19 Dec 2025 02:28:17 +0000 Manifest this update: Fri 19 Dec 2025 02:28:16 +0000 Manifest next update: Fri 26 Dec 2025 02:28:16 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: 8OXeV1kNbkLz0lOw9wNnggfIksTlKzFe23CSA/aROBA=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 0taDnwo0qjXesfO3FrAvUEEfUHs3YxCMYz8QGg31osQ=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: xPqI8byEZA0kbH+t1Ot9il53KHXLD5VMa8Lng8oAAuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Dec 19 02:28:16 2025 GMT Not After : Dec 26 02:28:16 2025 GMT Subject: CN=6944b841-dd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:44:e8:c2:22:c3:0e:51:83:db:12:c8:4e: 43:c0:c8:8c:7e:00:8a:9c:f6:92:a8:7a:43:8f:8d: 75:96:01:de:0f:62:0d:f4:a8:4c:d4:40:b1:77:6f: 15:e9:58:12:f7:9b:e6:f5:86:7d:a5:64:70:ce:b3: f2:15:aa:2e:ad:9b:cd:15:67:53:ea:58:8c:8b:49: f9:0e:e0:4d:47:72:7a:08:7b:8e:2d:87:13:f8:d6: 3c:36:03:f5:32:ff:d8:da:64:00:80:e9:a5:09:3b: 25:fc:13:aa:4d:43:de:a4:70:67:54:14:ea:d9:3f: 2d:ba:c2:4b:34:a7:7f:1b:79:c8:cf:72:ee:23:22: 30:6d:55:ab:7b:1a:83:67:20:e9:87:96:37:cb:86: 33:52:26:03:61:af:c6:0f:e2:f5:a3:0b:2f:eb:6e: 0a:97:cf:71:f6:64:78:9f:95:ae:5c:a8:2b:b5:09: 82:f1:1b:90:44:c9:da:cc:79:36:23:f9:87:25:7c: 27:bc:a6:19:18:83:62:d3:df:49:5c:08:70:2e:33: 57:bf:b1:0c:c9:21:da:12:30:4c:b1:12:ef:67:fb: d1:71:75:5e:69:a0:74:e5:48:d8:bb:f8:19:61:10: 71:67:12:4a:a3:87:71:bf:24:1a:0d:96:d3:6e:f8: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:63:D8:FA:57:67:6D:16:2A:7F:98:73:4A:0C:AB:F4:69:45:31 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:d4:66:fa:64:b2:d0:bd:f1:0f:bc:66:7d:c7:9e:63:76: 92:0c:c0:56:6a:5e:71:f2:43:c5:3e:04:27:f7:36:5f:ca:fb: 66:cb:0d:23:36:64:df:5f:6c:ea:de:40:51:c3:83:73:8a:f4: 36:73:2d:6e:07:74:54:fe:a7:67:a0:eb:81:5a:59:3f:16:90: 6d:fc:dd:b9:9a:d2:d1:4d:eb:a1:5c:4c:59:54:6f:12:3c:d8: 23:b1:f4:82:05:e8:19:55:cb:ef:49:39:35:7c:95:e6:80:26: 88:80:67:54:5b:f1:c3:1b:25:ac:48:fa:d3:d3:74:be:d5:ca: 4a:60:57:4d:8b:4e:0f:47:86:9e:0d:cd:25:df:b9:dd:ae:af: d2:22:a3:58:89:f3:0f:a6:72:e6:63:12:f3:17:3d:30:dc:95: c2:c7:80:26:54:7a:f2:57:7c:f4:10:1e:89:b2:45:2b:4d:fd: 3b:a7:a7:29:cf:0f:9e:32:cf:2b:59:8b:3f:2a:08:af:eb:5f: 63:92:fc:d7:b1:64:04:8a:33:e0:51:0b:91:b6:e8:32:94:09: 21:0e:19:01:6a:5e:a6:61:5f:8b:8c:61:95:6e:37:8b:87:e4: 53:06:52:1b:d0:46:42:f7:c6:d3:10:0d:8b:8e:53:f4:90:50: 41:bc:34:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUxMjE5MDIyODE2WhcNMjUxMjI2MDIyODE2WjAYMRYwFAYD VQQDDA02OTQ0Yjg0MS1kZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA059E6MIiww5Rg9sSyE5DwMiMfgCKnPaSqHpDj411lgHeD2IN9KhM1ECxd28V 6VgS95vm9YZ9pWRwzrPyFaourZvNFWdT6liMi0n5DuBNR3J6CHuOLYcT+NY8NgP1 Mv/Y2mQAgOmlCTsl/BOqTUPepHBnVBTq2T8tusJLNKd/G3nIz3LuIyIwbVWrexqD ZyDph5Y3y4YzUiYDYa/GD+L1owsv624Kl89x9mR4n5WuXKgrtQmC8RuQRMnazHk2 I/mHJXwnvKYZGINi099JXAhwLjNXv7EMySHaEjBMsRLvZ/vRcXVeaaB05UjYu/gZ YRBxZxJKo4dxvyQaDZbTbvjBoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlIY9j6 V2dtFip/mHNKDKv0aUUxMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzytRm+mSy0L3xD7xmfceeY3aSDMBWal5x8kPFPgQn9zZfyvtmyw0j NmTfX2zq3kBRw4NzivQ2cy1uB3RU/qdnoOuBWlk/FpBt/N25mtLRTeuhXExZVG8S PNgjsfSCBegZVcvvSTk1fJXmgCaIgGdUW/HDGyWsSPrT03S+1cpKYFdNi04PR4ae Dc0l37ndrq/SIqNYifMPpnLmYxLzFz0w3JXCx4AmVHryV3z0EB6JskUrTf07p6cp zw+eMs8rWYs/Kgiv619jkvzXsWQEijPgUQuRtugylAkhDhkBal6mYV+LjGGVbjeL h+RTBlIb0EZC98bTEA2LjlP0kFBBvDTT -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:48 2025 by rpki-client