This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: xwwjtm8WD8oDZEiqYrEppkrTom7WNguOK1fVQ5IA85Y= Subject key identifier: 3E:18:C5:9E:C7:28:FE:B5:FA:B4:49:7A:C5:E5:83:41:3E:CF:19:24 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E7E Signing time: Sat 20 Dec 2025 15:56:05 +0000 Manifest this update: Sat 20 Dec 2025 15:56:05 +0000 Manifest next update: Sat 27 Dec 2025 15:56:05 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: HzN0hAgrXB28pqU2+u+LDEwT2HCpENrgweIsKevD3Dw=) 2: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: ltr4XnwnjVpdj/jucAxqqv9mxZJ3S6DG2NUkiYWuAIA=) 3: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 50LilFdBJbezb7tEZ8nsCEOtBU33AYgM2/+xtSJDySI=) 4: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: JeWsOi+knaSUxggDbgl626QjqrgQeIlCOoedWQ2j1gw=) 5: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: i7wEnbCyGMVzc1IAkdcmx0nvf45iFjmn6BBF93GVkvU=) 6: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: 5b1/IgnFBtnOU/QGYhYiucXHvjsBgfKiscQ0RXrreCU=) 7: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 2B6MyeDlusb2e4Wysz6uj9aO5/idmj+cmIrB8/V1Q4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8020 (0x1f54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Dec 20 15:56:05 2025 GMT Not After : Dec 27 15:56:05 2025 GMT Subject: CN=6946c715-55d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b0:75:b7:be:79:e4:48:13:67:65:51:fa:cf: 72:cd:38:ce:db:31:d6:34:c5:54:ec:ef:ea:ce:34: ae:65:4d:41:45:88:8e:f0:8b:57:f6:2a:4c:96:e9: 4e:cc:d1:4d:b0:d0:12:7d:63:60:8a:bf:6e:0d:73: e6:04:98:fd:fe:ec:d2:57:3d:a6:65:c6:cf:6d:c3: ec:4c:f3:f2:63:e0:3e:8c:7b:c0:0e:74:fd:c4:a2: 37:2f:a4:c1:6e:70:a2:4a:7b:98:c8:d4:73:59:a2: 3e:7d:d0:ec:3a:ff:e7:30:0e:6e:bd:b5:84:87:d2: a4:13:77:4a:6b:b0:16:22:18:f1:af:bd:d7:34:28: 91:73:cb:74:d0:48:be:f3:d9:a8:30:d9:6d:9b:70: d6:19:18:3e:15:cf:4e:09:93:8d:77:3a:75:26:07: 49:16:9c:ec:f9:a6:1c:87:c8:44:56:a4:f0:a6:c6: 59:15:04:59:3c:c5:da:f2:5f:b5:17:1a:b7:61:85: a2:56:97:40:d3:33:14:ac:56:e9:de:ff:e5:29:0e: 54:de:67:1c:b1:d1:78:d6:ce:f0:1f:cf:79:aa:4a: 1b:b4:fb:5e:c4:e4:9d:42:7a:d1:e2:f0:bc:43:b6: 13:97:2e:e9:7b:cd:25:c4:54:fc:5b:bc:68:50:18: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:18:C5:9E:C7:28:FE:B5:FA:B4:49:7A:C5:E5:83:41:3E:CF:19:24 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f0:9e:42:1e:00:85:50:40:a1:1c:33:d8:1f:67:9c:29:72: 04:c8:8a:51:dc:2e:7a:36:e6:11:57:ce:9c:92:a1:5b:d0:4f: e3:e0:43:4d:07:66:44:9f:69:2f:27:fb:23:ea:cb:41:dd:23: 0d:81:20:a2:8a:36:86:63:e3:7e:bd:c8:bb:45:80:22:c6:b2: 92:08:18:4a:ae:ee:8c:2b:c6:6a:64:71:34:e5:e2:03:9f:1d: bc:77:35:75:25:58:2f:14:6a:f6:d0:d6:7d:a7:49:62:d0:21: e9:22:be:16:1b:7c:9f:d2:c4:34:2a:98:56:f3:8b:0f:de:39: bb:07:81:cc:23:21:2a:bf:5a:50:7a:e7:25:a3:37:ed:ab:a0: 5b:82:12:1e:35:03:9b:4a:29:dc:52:e5:87:00:a8:a6:f2:a3: fd:e6:78:87:6e:71:76:c5:be:13:4c:4f:69:6c:a0:b9:a0:eb: 2a:2c:58:39:c8:08:66:81:d4:5b:53:b1:c4:17:f8:d1:e0:72: cf:c5:0a:41:d1:b0:1c:de:ce:90:ac:6e:1b:bb:18:f9:a3:ad: fa:55:a4:25:37:59:30:3a:d9:c1:06:26:54:63:31:ab:c4:b1: 13:30:e8:60:91:8a:60:05:74:1c:d1:b8:7d:e3:29:f5:9a:84: ac:99:a4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMjIwMTU1NjA1WhcNMjUxMjI3MTU1NjA1WjAYMRYwFAYD VQQDDA02OTQ2YzcxNS01NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rB1t7555EgTZ2VR+s9yzTjO2zHWNMVU7O/qzjSuZU1BRYiO8ItX9ipMlulO zNFNsNASfWNgir9uDXPmBJj9/uzSVz2mZcbPbcPsTPPyY+A+jHvADnT9xKI3L6TB bnCiSnuYyNRzWaI+fdDsOv/nMA5uvbWEh9KkE3dKa7AWIhjxr73XNCiRc8t00Ei+ 89moMNltm3DWGRg+Fc9OCZONdzp1JgdJFpzs+aYch8hEVqTwpsZZFQRZPMXa8l+1 Fxq3YYWiVpdA0zMUrFbp3v/lKQ5U3mccsdF41s7wH895qkobtPtexOSdQnrR4vC8 Q7YTly7pe80lxFT8W7xoUBjd0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4YxZ7H KP61+rRJesXlg0E+zxkkMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl8J5CHgCFUEChHDPYH2ecKXIEyIpR3C56NuYRV86ckqFb0E/j4ENN B2ZEn2kvJ/sj6stB3SMNgSCiijaGY+N+vci7RYAixrKSCBhKru6MK8ZqZHE05eID nx28dzV1JVgvFGr20NZ9p0li0CHpIr4WG3yf0sQ0KphW84sP3jm7B4HMIyEqv1pQ euclozftq6BbghIeNQObSincUuWHAKim8qP95niHbnF2xb4TTE9pbKC5oOsqLFg5 yAhmgdRbU7HEF/jR4HLPxQpB0bAc3s6QrG4buxj5o636VaQlN1kwOtnBBiZUYzGr xLETMOhgkYpgBXQc0bh94yn1moSsmaRp -----END CERTIFICATE-----Generated at Sun Dec 21 00:30:47 2025 by rpki-client