This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft File: nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json) Hash identifier: tDWRoO4Z30p4W0rLdFlvlDtttZPbay/chAcRWT4bTYU= Subject key identifier: A1:AD:42:4D:E0:50:B5:67:0B:BD:9E:57:2C:4E:A4:AB:19:3B:D4:A2 Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 Certificate issuer: /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Certificate serial: 063C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft Manifest number: 063A Signing time: Sat 20 Dec 2025 22:00:37 +0000 Manifest this update: Sat 20 Dec 2025 22:00:36 +0000 Manifest next update: Sat 27 Dec 2025 22:00:36 +0000 Files and hashes: 1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: 2WEsH2sVKiixuvGaOJCueYwY9EdEpml5ZUVIXd+9yvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Validity Not Before: Dec 20 22:00:36 2025 GMT Not After : Dec 27 22:00:36 2025 GMT Subject: CN=69471c85-d7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:38:bc:f5:35:98:d1:fe:42:ba:24:2a:d8: 6c:92:ce:21:b9:1e:eb:61:a4:12:8e:17:d9:d1:1c: ee:eb:59:1f:33:58:e5:58:28:f9:76:3d:dc:c8:53: 86:76:f9:f1:36:3a:ab:c8:b4:3d:bc:0a:93:50:04: 3f:69:a9:25:8f:ff:f9:38:b0:a5:84:fd:f3:9d:5d: fd:6f:73:f4:3e:5f:5b:83:fc:15:c2:00:72:3a:1d: ae:a6:8c:0f:01:b3:a8:d1:76:2e:85:c8:0d:53:2d: 91:41:25:99:ce:51:31:38:c8:27:a3:bb:3d:4a:43: 46:22:54:60:07:2b:e8:91:c5:e5:df:cc:4d:88:0c: 70:2b:b5:5d:ea:d7:2e:3d:86:93:8e:c3:d6:10:dd: e6:44:7a:5f:7d:a7:64:24:7f:21:cf:81:1c:b1:1f: b2:db:df:14:aa:b4:4c:34:03:3b:6e:9b:09:02:db: c6:c5:85:4f:ad:75:df:b8:fd:a1:6b:91:88:d5:54: 07:18:c6:f2:32:47:42:40:9c:e7:c2:b2:f2:ba:57: 03:46:63:69:31:9f:6b:43:ec:70:31:94:aa:f7:00: 8e:7a:23:c1:e3:18:f9:88:b1:f8:58:ce:d3:b1:89: 78:74:28:11:35:ab:a2:6a:40:e4:cc:40:55:c5:c3: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AD:42:4D:E0:50:B5:67:0B:BD:9E:57:2C:4E:A4:AB:19:3B:D4:A2 X509v3 Authority Key Identifier: keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b3:11:24:d2:d7:28:ac:be:e0:2c:ec:37:52:c2:d6:9a:c0: 3a:f3:5d:18:a0:d9:f2:f0:87:86:c7:2e:e3:98:1b:55:60:00: 57:bf:8a:10:07:46:bd:c9:9f:f3:9f:1d:42:7f:78:05:7a:ee: dc:75:03:5c:49:46:93:eb:ac:48:90:5a:dc:04:90:95:cd:39: d3:d2:ea:22:0b:8c:86:53:a3:e3:84:4c:5f:47:9e:59:46:91: f4:9e:ab:2b:79:0e:af:4c:4f:6c:c9:74:54:86:e9:ea:bf:48: 80:13:f4:35:0c:83:0a:d5:ad:07:e4:d4:e9:e9:53:63:3e:29: 62:90:3f:b5:a4:1c:82:18:06:52:68:be:eb:b1:7d:d8:bc:fe: 92:bf:f5:61:2d:53:38:c5:da:f9:49:a8:cb:85:46:1f:d7:db: 56:ee:aa:c2:8c:e3:43:d7:3a:04:e5:eb:aa:bc:0c:5a:c2:68: 87:3a:48:9d:85:7d:47:0e:e6:da:17:da:c2:5f:a7:65:85:33: ee:8f:2b:9c:a9:dd:e3:b0:f2:95:2b:a7:59:28:3b:38:95:93: c5:e9:7e:89:de:b9:8e:09:e2:46:f7:88:cb:f5:d2:2d:38:47: 61:81:5e:0c:95:a3:8f:94:d3:fb:e1:25:94:d8:e5:79:55:c5: fb:88:a4:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQzExMTAvBgNVBAUTKDlDOUE3NDdERTAwQUY0NUI4OEY3ODQxMTI4RTg5REIx M0QyMzE3MjkwHhcNMjUxMjIwMjIwMDM2WhcNMjUxMjI3MjIwMDM2WjAYMRYwFAYD VQQDDA02OTQ3MWM4NS1kN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mg4vPU1mNH+QrokKthsks4huR7rYaQSjhfZ0Rzu61kfM1jlWCj5dj3cyFOG dvnxNjqryLQ9vAqTUAQ/aaklj//5OLClhP3znV39b3P0Pl9bg/wVwgByOh2upowP AbOo0XYuhcgNUy2RQSWZzlExOMgno7s9SkNGIlRgByvokcXl38xNiAxwK7Vd6tcu PYaTjsPWEN3mRHpffadkJH8hz4EcsR+y298UqrRMNAM7bpsJAtvGxYVPrXXfuP2h a5GI1VQHGMbyMkdCQJznwrLyulcDRmNpMZ9rQ+xwMZSq9wCOeiPB4xj5iLH4WM7T sYl4dCgRNauiakDkzEBVxcMpaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGtQk3g ULVnC72eVyxOpKsZO9SiMB8GA1UdIwQYMBaAFJyadH3gCvRbiPeEESjonbE9Ixcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFDMS9GRTY4RDNDNEI5 OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlGdUk5NFFSS09pZHNUMGpG eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KcDBmZUFLOUZ1STk0UVJLT2lkc1QwakZ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFDMS9GRTY4RDNDNEI5OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlG dUk5NFFSS09pZHNUMGpGeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgsxEk0tcorL7gLOw3UsLWmsA6810YoNny8IeGxy7jmBtVYABXv4oQ B0a9yZ/znx1Cf3gFeu7cdQNcSUaT66xIkFrcBJCVzTnT0uoiC4yGU6PjhExfR55Z RpH0nqsreQ6vTE9syXRUhunqv0iAE/Q1DIMK1a0H5NTp6VNjPilikD+1pByCGAZS aL7rsX3YvP6Sv/VhLVM4xdr5SajLhUYf19tW7qrCjOND1zoE5euqvAxawmiHOkid hX1HDubaF9rCX6dlhTPujyucqd3jsPKVK6dZKDs4lZPF6X6J3rmOCeJG94jL9dIt OEdhgV4MlaOPlNP74SWU2OV5VcX7iKTc -----END CERTIFICATE-----Generated at Sun Dec 21 02:22:02 2025 by rpki-client