This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: hiuzB2P+AQcn4RHDuCBX25F7i7pnnqw6ahqBPc9ZXhI= Subject key identifier: 6B:4A:F1:47:F2:A8:B2:EE:E1:70:FA:D8:7E:C7:35:09:6E:71:E1:1A Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: B1 Signing time: Fri 05 Dec 2025 04:05:24 +0000 Manifest this update: Fri 05 Dec 2025 04:05:23 +0000 Manifest next update: Fri 12 Dec 2025 04:05:23 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: O+EMxlO+8KwZDISkftkUMXFoH0YIHiTN1h7SLqrXesA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Dec 5 04:05:23 2025 GMT Not After : Dec 12 04:05:23 2025 GMT Subject: CN=69325a04-b63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:33:3e:04:f9:9f:a5:68:cc:a2:73:c8:e7:8c: 00:bc:f9:af:63:8b:0f:1e:d5:3f:08:14:b8:69:7c: 54:83:31:f1:3a:b5:54:9d:69:d8:a0:e8:24:9a:5c: e0:e5:4f:76:33:3f:61:6f:42:7b:89:e7:ca:6f:4b: 77:5b:b9:90:8f:e9:68:63:b7:d9:fc:95:7f:ff:f0: e5:1b:59:8b:38:0e:91:9a:86:c8:e7:20:f4:52:5c: 6d:9f:c7:75:45:25:ad:7d:63:ad:c6:b7:29:83:45: 9e:45:01:0d:a5:ae:60:61:33:7c:81:7a:77:46:26: 84:68:1d:90:86:80:ab:d8:52:89:a8:01:41:25:6e: d8:04:3c:dc:e4:1d:22:28:00:bd:45:fe:14:b6:e2: a8:07:3d:e8:f7:bf:23:17:ef:5a:76:6b:7e:8a:ec: 38:1a:b5:45:fb:65:fb:41:92:33:5b:2a:51:42:bd: 38:f5:0d:ac:cc:24:67:79:aa:f2:cb:74:99:16:db: cf:78:bc:13:17:18:49:ac:fb:65:d0:5a:72:7f:0b: 0f:a6:8e:69:81:2f:8d:93:ef:c4:84:7d:bb:f0:09: 65:74:b3:64:b3:7b:b1:4e:56:b8:42:2e:fc:06:97: 11:03:d2:cf:19:b4:83:42:c2:a2:83:62:59:04:04: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:F1:47:F2:A8:B2:EE:E1:70:FA:D8:7E:C7:35:09:6E:71:E1:1A X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:79:19:4c:c6:79:af:7a:18:24:83:1a:64:d2:c6:d1:2e:fc: fa:c3:6a:45:e0:16:75:60:4d:ae:69:92:1b:85:15:4f:37:44: e1:bd:65:9f:39:e0:1c:10:db:d6:a8:25:25:07:ed:77:0b:39: 6b:13:05:7d:7f:b5:42:03:25:40:1a:78:2c:ff:37:a0:d9:4e: 65:75:7b:c3:6d:f4:42:33:3e:6a:1a:34:f8:78:5c:ba:3d:50: 77:70:1f:cb:04:ed:dc:22:b1:a3:1b:a5:e0:f1:dc:7f:07:e2: da:e0:04:be:ee:b6:0b:bb:93:3d:fa:ae:29:5e:91:39:b9:45: 17:3a:c6:89:e0:07:30:2b:57:3f:32:72:8c:e9:3d:b5:d6:5a: 65:29:25:5e:e4:cf:05:ee:3e:57:ca:1c:1b:4c:e5:3f:d9:91: a9:e2:f6:34:d9:cb:cc:86:cf:81:57:77:2a:67:a9:43:4d:97: 50:5f:6f:8e:be:39:c1:15:2e:ac:d4:b2:53:fa:3e:2d:28:0f: aa:14:3d:0c:c3:13:88:f7:3f:21:77:78:a6:1d:46:2d:1f:a7: 8c:37:04:a3:b7:9b:b8:9c:10:7a:0e:e9:63:c2:8e:4b:41:8b: e1:02:1a:68:74:a7:db:69:42:76:d0:6a:8f:8a:cc:bc:91:79: 10:de:6a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1 QUVGQTRDQUEwHhcNMjUxMjA1MDQwNTIzWhcNMjUxMjEyMDQwNTIzWjAYMRYwFAYD VQQDEw02OTMyNWEwNC1iNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DM+BPmfpWjMonPI54wAvPmvY4sPHtU/CBS4aXxUgzHxOrVUnWnYoOgkmlzg 5U92Mz9hb0J7iefKb0t3W7mQj+loY7fZ/JV///DlG1mLOA6RmobI5yD0Ulxtn8d1 RSWtfWOtxrcpg0WeRQENpa5gYTN8gXp3RiaEaB2QhoCr2FKJqAFBJW7YBDzc5B0i KAC9Rf4UtuKoBz3o978jF+9admt+iuw4GrVF+2X7QZIzWypRQr049Q2szCRneary y3SZFtvPeLwTFxhJrPtl0FpyfwsPpo5pgS+Nk+/EhH278AlldLNks3uxTla4Qi78 BpcRA9LPGbSDQsKig2JZBAR6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtK8Ufy qLLu4XD62H7HNQluceEaMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS R0M2NkZMZU1oSXBhNzZUS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8eRlMxnmvehgkgxpk0sbRLvz6w2pF4BZ1YE2uaZIbhRVPN0ThvWWf OeAcENvWqCUlB+13CzlrEwV9f7VCAyVAGngs/zeg2U5ldXvDbfRCMz5qGjT4eFy6 PVB3cB/LBO3cIrGjG6Xg8dx/B+La4AS+7rYLu5M9+q4pXpE5uUUXOsaJ4AcwK1c/ MnKM6T211lplKSVe5M8F7j5XyhwbTOU/2ZGp4vY02cvMhs+BV3cqZ6lDTZdQX2+O vjnBFS6s1LJT+j4tKA+qFD0MwxOI9z8hd3imHUYtH6eMNwSjt5u4nBB6Duljwo5L QYvhAhpodKfbaUJ20GqPisy8kXkQ3mpg -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:23 2025 by rpki-client