This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: nrlkAFVH7Qt8AopxkPt2TkckXxGh64sYrDegQYmoIvQ= Subject key identifier: 31:52:AA:55:8B:E9:C4:EE:E1:F3:39:73:00:E8:2E:2F:EF:06:98:E1 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1293 Signing time: Sat 06 Dec 2025 18:26:50 +0000 Manifest this update: Sat 06 Dec 2025 18:26:49 +0000 Manifest next update: Sat 13 Dec 2025 18:26:49 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: fT3gJmXm2sxSc8V7s9/yBAypsDzFDkbYTm6x8uiYmu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2910 (0xb5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Dec 6 18:26:49 2025 GMT Not After : Dec 13 18:26:49 2025 GMT Subject: CN=6934756a-7f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:da:69:cc:fd:b1:bf:22:aa:98:74:ee:da: 55:1b:ae:4a:be:87:88:d9:a1:d1:40:34:a3:f1:6c: 9d:1c:ab:7f:17:e5:84:0b:9c:7e:41:14:72:34:13: 68:29:0f:bd:91:aa:35:3e:6f:94:cd:6b:5a:f8:9c: ee:36:eb:b2:a2:49:69:b5:eb:37:5d:de:ab:4e:75: 9f:de:d2:27:34:be:88:7f:32:4b:93:b8:03:17:dc: a6:98:82:17:44:49:34:14:07:12:a6:57:1c:d9:33: 30:15:10:5a:57:71:e8:02:1e:db:44:0b:bb:ad:61: 22:32:a2:cc:99:f6:44:4c:5a:e0:99:2a:75:2d:5c: 1a:df:6a:68:5a:ff:c2:f2:31:67:9b:c2:bf:99:ad: 4a:fb:5f:ab:44:e4:1f:74:3e:d3:a6:87:56:e5:52: 5e:ac:42:b7:90:50:30:82:bc:02:cc:d9:42:ac:1b: 4a:cb:24:a2:83:cb:d5:1c:55:0d:50:f3:6e:76:03: e0:63:74:94:aa:ce:f8:46:3b:e0:58:1c:53:9f:bd: 94:a3:4b:e8:4a:3c:ec:20:28:df:55:08:2a:65:8f: 80:89:fd:d7:55:36:5d:fa:53:d7:4a:58:f7:a5:4f: 00:de:b8:60:ec:90:a7:e9:a3:47:40:42:27:a2:90: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:AA:55:8B:E9:C4:EE:E1:F3:39:73:00:E8:2E:2F:EF:06:98:E1 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2d:07:dd:c1:24:2f:59:4f:09:0f:0d:4f:69:5f:d2:1e:a1: 76:3e:d6:89:9f:2f:36:ad:2d:33:99:73:3c:f9:7b:7e:4a:cc: 25:75:2b:56:ac:c0:86:90:5e:38:d9:2b:34:01:f5:d1:a2:cf: 36:fb:c7:9e:eb:71:7b:59:92:52:9a:2b:8b:5d:80:cd:15:72: 56:e2:b8:83:d7:cf:88:4d:c7:44:b5:77:b8:8d:6a:4b:5a:e7: af:33:a9:03:93:61:b8:46:cc:bf:e3:4b:29:cd:b7:99:38:30: f2:57:37:67:01:0e:83:07:0a:db:68:8d:d6:4e:c4:32:40:5f: ac:50:72:8c:39:4f:0b:11:b9:32:d5:28:28:f9:36:05:d0:05: 7c:4f:c9:03:c7:33:d0:47:6d:68:32:fa:66:c1:52:4d:96:fe: 70:e5:21:74:30:ee:62:da:e3:d3:e5:43:31:77:b8:b5:8f:39: 7c:b0:7c:b6:fb:32:89:fe:cb:91:1d:57:46:e6:5e:2f:02:83: 60:03:73:9a:be:db:2a:77:74:cb:eb:8d:0a:65:0b:a8:52:82: 4b:17:e7:54:00:e6:8e:41:c7:30:ad:d7:8c:0d:80:7c:41:da: 71:f5:a4:b1:07:0b:5e:bb:39:d0:f6:f3:0d:da:4e:65:73:1b: 2a:63:ac:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUxMjA2MTgyNjQ5WhcNMjUxMjEzMTgyNjQ5WjAYMRYwFAYD VQQDEw02OTM0NzU2YS03Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PXaacz9sb8iqph07tpVG65KvoeI2aHRQDSj8WydHKt/F+WEC5x+QRRyNBNo KQ+9kao1Pm+UzWta+JzuNuuyoklptes3Xd6rTnWf3tInNL6IfzJLk7gDF9ymmIIX REk0FAcSplcc2TMwFRBaV3HoAh7bRAu7rWEiMqLMmfZETFrgmSp1LVwa32poWv/C 8jFnm8K/ma1K+1+rROQfdD7TpodW5VJerEK3kFAwgrwCzNlCrBtKyySig8vVHFUN UPNudgPgY3SUqs74RjvgWBxTn72Uo0voSjzsICjfVQgqZY+Aif3XVTZd+lPXSlj3 pU8A3rhg7JCn6aNHQEInopCKBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFSqlWL 6cTu4fM5cwDoLi/vBpjhMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGLQfdwSQvWU8JDw1PaV/SHqF2PtaJny82rS0zmXM8+Xt+SswldStW rMCGkF442Ss0AfXRos82+8ee63F7WZJSmiuLXYDNFXJW4riD18+ITcdEtXe4jWpL WuevM6kDk2G4Rsy/40spzbeZODDyVzdnAQ6DBwrbaI3WTsQyQF+sUHKMOU8LEbky 1Sgo+TYF0AV8T8kDxzPQR21oMvpmwVJNlv5w5SF0MO5i2uPT5UMxd7i1jzl8sHy2 +zKJ/suRHVdG5l4vAoNgA3Oavtsqd3TL640KZQuoUoJLF+dUAOaOQccwrdeMDYB8 Qdpx9aSxBwteuznQ9vMN2k5lcxsqY6w2 -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:22 2025 by rpki-client