This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: kqMMGZqwODjcjQJ44lyIi41sg8kWdbhJCLlKY0u1DPw= Subject key identifier: F5:9B:51:D8:71:19:C5:F0:C3:6F:5D:06:62:4A:1C:68:FE:A1:15:F8 Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 1748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 173B Signing time: Thu 18 Dec 2025 16:29:25 +0000 Manifest this update: Thu 18 Dec 2025 16:29:25 +0000 Manifest next update: Thu 25 Dec 2025 16:29:25 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: SkHnic3VH2su3TDVWeId6EMGAIsNXDfaw80KjRE1ZbI=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5960 (0x1748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Dec 18 16:29:25 2025 GMT Not After : Dec 25 16:29:25 2025 GMT Subject: CN=69442be5-2264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:fc:ff:fe:33:0d:a8:59:f4:38:6b:da:24: 2a:1f:df:a1:5a:47:b1:b0:bf:8c:7b:f5:ad:39:bf: bf:5d:df:e3:e0:9f:a3:9d:c4:89:89:e8:f0:a8:62: e1:5a:70:46:68:47:d1:f3:6a:41:2b:20:67:97:f6: 79:0a:76:ad:fb:df:27:52:55:39:ae:b8:ba:ff:40: 9b:17:bd:f0:2d:5e:b7:50:bc:c1:58:ce:dd:1d:64: 47:05:36:1e:ce:e9:4e:12:36:da:2c:31:06:be:15: 95:e0:67:43:8f:c9:59:26:8d:9f:4f:52:c6:cc:27: 4c:77:18:3f:01:16:87:f0:07:44:30:22:fc:1a:da: 63:11:ac:d1:7f:f9:33:56:93:b3:47:dd:98:0e:56: 76:c6:ab:97:39:0a:b0:35:bd:b2:22:bf:fb:ff:c0: 2c:7e:e7:90:fd:51:3c:7b:0f:9e:ca:d7:fc:33:a6: 6a:fa:c4:a3:84:8d:23:df:96:83:fe:8c:97:08:77: dc:74:8b:e2:6c:95:11:35:73:b2:f4:b4:4a:f3:c7: 6d:1c:3c:38:50:bf:f0:f6:70:c2:db:e1:a6:66:6e: 35:60:1e:07:cc:35:c8:7f:35:9d:95:31:1e:7b:fd: 77:11:84:31:02:d2:a8:c0:6f:4e:d9:f0:1e:dc:ca: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:51:D8:71:19:C5:F0:C3:6F:5D:06:62:4A:1C:68:FE:A1:15:F8 X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:c0:93:2d:b0:9e:b5:c7:1a:51:23:71:c5:d2:3a:b6:a4: f6:29:8e:ee:9d:fe:7a:6d:67:55:75:10:43:c2:cb:c6:cf:2f: 20:26:03:3f:b4:8d:e5:93:d5:f7:2d:10:c2:48:6d:8c:07:19: a5:ff:c4:78:c2:5b:34:a2:41:a1:1b:94:6f:22:9e:cb:7f:a7: 4e:ad:11:48:d7:dd:93:aa:ea:a0:b8:74:32:de:b0:1e:f3:50: 0f:58:d9:39:2c:eb:27:90:36:33:ff:76:8e:3d:ee:44:ad:9a: 47:cc:85:db:37:a5:9d:64:d4:25:05:72:81:63:6d:eb:0c:38: ed:4d:66:b9:74:6d:d9:c8:1c:f3:b2:26:6b:86:3f:56:54:ae: b5:fd:c0:43:28:2b:47:68:9b:2c:ca:c2:65:18:ab:08:11:96: c7:9c:e9:36:b9:ab:13:9f:4b:29:4e:68:dc:95:02:1a:46:83: ef:eb:4c:0e:ba:66:e4:41:65:fa:07:4c:21:9e:32:55:a5:57: b7:fd:3a:fc:d1:b2:47:31:67:fa:cb:3f:6b:72:00:e1:0c:2b: bf:c8:46:c2:cc:e1:b3:be:be:25:91:1f:f7:67:90:de:36:16: 52:90:d5:ba:f0:c0:2a:db:ca:5b:78:c7:c4:89:a6:c3:82:bd: a9:25:48:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUxMjE4MTYyOTI1WhcNMjUxMjI1MTYyOTI1WjAYMRYwFAYD VQQDDA02OTQ0MmJlNS0yMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNj8//4zDahZ9Dhr2iQqH9+hWkexsL+Me/WtOb+/Xd/j4J+jncSJiejwqGLh WnBGaEfR82pBKyBnl/Z5Cnat+98nUlU5rri6/0CbF73wLV63ULzBWM7dHWRHBTYe zulOEjbaLDEGvhWV4GdDj8lZJo2fT1LGzCdMdxg/ARaH8AdEMCL8GtpjEazRf/kz VpOzR92YDlZ2xquXOQqwNb2yIr/7/8AsfueQ/VE8ew+eytf8M6Zq+sSjhI0j35aD /oyXCHfcdIvibJURNXOy9LRK88dtHDw4UL/w9nDC2+GmZm41YB4HzDXIfzWdlTEe e/13EYQxAtKowG9O2fAe3MrqpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWbUdhx GcXww29dBmJKHGj+oRX4MB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB78CTLbCetccaUSNxxdI6tqT2KY7unf56bWdVdRBDwsvGzy8gJgM/ tI3lk9X3LRDCSG2MBxml/8R4wls0okGhG5RvIp7Lf6dOrRFI192TquqguHQy3rAe 81APWNk5LOsnkDYz/3aOPe5ErZpHzIXbN6WdZNQlBXKBY23rDDjtTWa5dG3ZyBzz siZrhj9WVK61/cBDKCtHaJssysJlGKsIEZbHnOk2uasTn0spTmjclQIaRoPv60wO umbkQWX6B0whnjJVpVe3/Tr80bJHMWf6yz9rcgDhDCu/yEbCzOGzvr4lkR/3Z5De NhZSkNW68MAq28pbeMfEiabDgr2pJUiG -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:11 2025 by rpki-client