This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json) Hash identifier: uwBnaEiegy/1ZqPw/EpAUKDYbW1pYfxHydRDHI05NS4= Subject key identifier: 6E:EE:74:E7:AC:E6:4C:AC:E5:4C:94:4A:59:62:5B:1B:44:9E:77:77 Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft Manifest number: 0125 Signing time: Fri 19 Dec 2025 03:49:20 +0000 Manifest this update: Fri 19 Dec 2025 03:49:20 +0000 Manifest next update: Fri 26 Dec 2025 03:49:20 +0000 Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: 2ZFennWKP+kRHAHoUu+nnoqMkDqbm6ZMRvU8VdrsrM4=) 2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: Dec 19 03:49:20 2025 GMT Not After : Dec 26 03:49:20 2025 GMT Subject: CN=6944cb40-570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:65:62:73:01:c5:77:50:b3:f3:69:ce:ac:62: 0b:cd:45:cf:d6:24:24:2e:1d:3e:db:f0:87:4e:32: 9e:62:b2:88:ed:fe:6c:89:29:0f:57:fd:2a:44:c4: 74:2f:69:a0:11:75:d0:d1:ae:fa:ed:f5:ee:7a:fd: 52:f7:99:82:47:5a:dd:bd:9d:a1:b5:34:66:b5:da: 40:29:b1:e9:5a:f5:06:91:6f:9a:54:d9:09:7d:e9: 37:43:30:99:cd:0f:f1:f8:e0:35:42:f8:3c:41:e5: 63:0a:bd:a8:4d:7b:89:36:ef:df:73:76:88:f3:b7: b7:62:10:7b:f8:9a:4a:8b:3e:8b:0a:0b:a3:db:c1: cd:77:37:80:ad:9a:cc:3d:c2:81:be:8b:c3:46:ec: 71:75:1f:07:14:6d:96:cf:7d:e2:9c:8b:3b:22:84: 82:64:88:bd:0d:be:9e:18:13:64:b7:e2:1a:ef:66: 49:33:65:97:db:5b:13:e7:16:de:4b:ff:52:97:f8: 2d:18:fa:4b:6f:0c:81:a2:4f:7b:e5:cb:db:e2:eb: c6:93:52:ca:7b:41:ec:74:65:6e:73:6f:04:94:77: fc:1b:d3:6a:65:1f:06:d7:4f:ac:63:b1:5f:ff:a3: 92:2e:22:c1:a6:13:4c:c9:5f:68:d9:ad:0f:84:19: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EE:74:E7:AC:E6:4C:AC:E5:4C:94:4A:59:62:5B:1B:44:9E:77:77 X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b0:fe:4f:e0:82:41:49:68:89:0d:d8:c9:d2:db:d6:b8:fe: 62:d2:16:9b:17:af:75:66:80:19:e3:da:c2:74:f6:e0:93:6d: 9c:e5:13:63:4e:61:1b:2d:ab:dc:71:28:8a:47:d6:ee:63:03: 86:6a:23:0f:9a:27:0b:06:b7:e3:7e:4a:28:24:96:53:d1:a7: eb:6d:6f:28:cf:6f:01:96:95:52:ea:d6:cc:4a:a7:2c:a3:20: 48:cc:fc:00:00:2f:d3:d1:41:ef:71:45:2f:2d:fb:ec:ca:c3: 50:17:6a:3c:bd:f8:43:66:a5:4a:6a:b2:ca:2b:a6:28:e1:a3: 2c:1c:ec:d9:cd:22:0c:a3:02:42:08:fb:52:76:3d:6c:ab:8f: f0:fc:db:76:c3:a1:91:65:85:c8:db:0d:4b:84:1e:bf:99:3f: d3:01:8e:75:11:f4:74:88:4a:75:d8:22:d1:3e:1f:59:61:d5: 16:30:5b:fb:b3:3c:26:83:46:64:59:1f:e3:88:99:6b:3a:3d: 04:0b:42:25:91:b3:9e:d9:ca:40:4d:7e:ca:e3:91:c1:14:15: f0:b1:98:11:97:ef:e2:f8:17:7e:3d:64:67:5d:18:9c:44:06: 68:c2:7d:56:0b:8b:20:99:d8:b6:f7:df:2d:f0:2a:c4:b7:7c: fd:6d:e6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRDMxMTAvBgNVBAUTKDM3NDVGQjlGN0VBMkMxRTI1MkQyOUJFRkQ4NkE2MTU3 NzYwRDg4QzAwHhcNMjUxMjE5MDM0OTIwWhcNMjUxMjI2MDM0OTIwWjAYMRYwFAYD VQQDDA02OTQ0Y2I0MC01NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiGVicwHFd1Cz82nOrGILzUXP1iQkLh0+2/CHTjKeYrKI7f5siSkPV/0qRMR0 L2mgEXXQ0a767fXuev1S95mCR1rdvZ2htTRmtdpAKbHpWvUGkW+aVNkJfek3QzCZ zQ/x+OA1Qvg8QeVjCr2oTXuJNu/fc3aI87e3YhB7+JpKiz6LCguj28HNdzeArZrM PcKBvovDRuxxdR8HFG2Wz33inIs7IoSCZIi9Db6eGBNkt+Ia72ZJM2WX21sT5xbe S/9Sl/gtGPpLbwyBok975cvb4uvGk1LKe0HsdGVuc28ElHf8G9NqZR8G10+sY7Ff /6OSLiLBphNMyV9o2a0PhBm8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7udOes 5kys5UyUSlliWxtEnnd3MB8GA1UdIwQYMBaAFDdF+59+osHiUtKb79hqYVd2DYjA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFEMy9ENjIzMUEzMjFF MkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdlSlMwcHZ2MkdwaFYzWU5p TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFEMy9ENjIzMUEzMjFFMkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdl SlMwcHZ2MkdwaFYzWU5pTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+sP5P4IJBSWiJDdjJ0tvWuP5i0habF691ZoAZ49rCdPbgk22c5RNj TmEbLavccSiKR9buYwOGaiMPmicLBrfjfkooJJZT0afrbW8oz28BlpVS6tbMSqcs oyBIzPwAAC/T0UHvcUUvLfvsysNQF2o8vfhDZqVKarLKK6Yo4aMsHOzZzSIMowJC CPtSdj1sq4/w/Nt2w6GRZYXI2w1LhB6/mT/TAY51EfR0iEp12CLRPh9ZYdUWMFv7 szwmg0ZkWR/jiJlrOj0EC0IlkbOe2cpATX7K45HBFBXwsZgRl+/i+Bd+PWRnXRic RAZown1WC4sgmdi2998t8CrEt3z9beZu -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:10 2025 by rpki-client