This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json) Hash identifier: ZKPSgZ8q2XI0H8upwtuaFgDNcTvOcCYBRRpnfbjcSMQ= Subject key identifier: 67:5E:03:A0:CC:31:6E:C1:36:83:80:7B:86:24:2D:20:01:21:87:9E Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft Manifest number: 3C Signing time: Fri 05 Dec 2025 05:21:09 +0000 Manifest this update: Fri 05 Dec 2025 05:21:09 +0000 Manifest next update: Fri 12 Dec 2025 05:21:08 +0000 Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: 7XcEpLahB5H9AvX2DH3flTz0crjctApXKxnu2q/lxoo=) 2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: oUOKfGpowL+63AVr56ivCHHAJRNhENKlNPtv0dg5ub8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Validity Not Before: Dec 5 05:21:09 2025 GMT Not After : Dec 12 05:21:08 2025 GMT Subject: CN=69326bc5-d607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:84:64:0a:71:d9:35:6f:24:38:8e:92:43: 56:53:f6:be:d7:48:51:5c:fd:eb:f7:a9:eb:1b:a1: e2:b1:68:24:98:69:bb:ce:8f:74:b4:58:85:c0:4a: 53:46:c3:55:9d:32:56:db:27:fe:c1:90:44:10:49: 1a:cd:c9:47:3d:8a:84:ce:6d:57:3a:f4:75:63:b5: 57:94:0a:1b:27:1d:d4:96:39:33:24:28:5f:00:c4: 5c:ab:a7:ba:c3:f7:b3:48:90:e8:cb:af:6b:51:d6: 4b:4b:d1:32:e8:4a:a9:80:86:30:7b:c6:83:7e:8b: 12:3b:f3:5e:24:2c:b0:54:4c:93:05:0f:eb:1b:3a: 90:e4:15:21:a5:49:52:7a:95:4a:d7:fd:ae:45:5e: df:ec:a9:04:9a:01:19:fa:b7:dd:e4:4b:4f:96:87: 3b:e1:18:ad:c2:19:fb:47:31:74:9e:55:41:e1:1b: f2:7e:45:17:1b:26:48:26:b5:9f:72:2c:30:71:7f: 68:aa:dd:8e:17:7a:c5:d5:99:c6:6b:33:e1:c6:b7: b6:fd:41:43:91:8d:7d:68:d0:20:13:cf:65:92:62: 3b:7e:f5:b4:dd:d2:76:b6:05:79:82:34:15:1b:c2: 4f:ef:a2:61:da:73:86:3c:1c:47:b3:05:94:c5:a3: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:03:A0:CC:31:6E:C1:36:83:80:7B:86:24:2D:20:01:21:87:9E X509v3 Authority Key Identifier: keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:51:f9:0c:1b:28:3e:b6:16:08:4f:18:2c:e5:42:0e:d6:48: 24:6b:8d:43:60:eb:58:62:72:7c:76:9b:d7:43:51:0d:69:15: 28:58:64:c2:4e:88:56:32:48:3a:f2:bc:84:49:cf:1e:a5:f3: 9c:5c:f3:90:88:83:22:73:5a:33:da:14:7d:6f:94:d0:e2:6a: 1c:d2:9d:72:ae:9d:6b:c3:24:1f:76:7e:17:94:47:39:71:e1: 30:5c:76:1e:2f:ed:b1:eb:a7:c4:66:b7:be:eb:52:49:a3:08: c9:e9:91:11:7b:cb:80:5b:5e:e2:30:d8:e0:fa:7d:26:73:1d: bc:69:63:66:54:83:e5:b7:8a:89:9b:6c:35:4a:1a:5b:f7:98: da:bb:ea:41:5c:10:3b:31:32:5f:a8:f1:68:a3:e3:c9:d5:16: d1:c1:a9:68:6e:41:07:89:cf:d2:bd:d6:71:d4:c8:da:09:cd: 10:08:4e:92:c4:5f:78:48:ab:cd:2e:8c:c9:ed:b7:e2:73:86: 13:c4:5a:a0:f5:df:be:0c:0d:74:d8:88:4f:d8:d4:cf:f6:b1: 3c:a9:9b:18:b8:d3:e9:16:c7:ef:31:22:ff:b1:09:6f:34:34: 02:d4:74:59:1f:ef:38:30:da:07:ff:0c:20:8d:2a:95:c7:2f: bf:4d:c2:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzBEOTExMC8GA1UEBRMoOUVBQzU0RTlGOUY1OUU2ODM4RjQ4NDYwNDIxMDU2MzMw NjZEMjA4RTAeFw0yNTEyMDUwNTIxMDlaFw0yNTEyMTIwNTIxMDhaMBgxFjAUBgNV BAMTDTY5MzI2YmM1LWQ2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHz4RkCnHZNW8kOI6SQ1ZT9r7XSFFc/ev3qesboeKxaCSYabvOj3S0WIXASlNG w1WdMlbbJ/7BkEQQSRrNyUc9ioTObVc69HVjtVeUChsnHdSWOTMkKF8AxFyrp7rD 97NIkOjLr2tR1ktL0TLoSqmAhjB7xoN+ixI7814kLLBUTJMFD+sbOpDkFSGlSVJ6 lUrX/a5FXt/sqQSaARn6t93kS0+WhzvhGK3CGftHMXSeVUHhG/J+RRcbJkgmtZ9y LDBxf2iq3Y4XesXVmcZrM+HGt7b9QUORjX1o0CATz2WSYjt+9bTd0na2BXmCNBUb wk/vomHac4Y8HEezBZTFo0gjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ14DoMwx bsE2g4B7hiQtIAEhh54wHwYDVR0jBBgwFoAUnqxU6fn1nmg49IRgQhBWMwZtII4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MEQ5LzJFQ0IyRkZBN0Q4 MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1nNDlJUmdRaEJXTXdadElJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnF4VTZmbjFubWc0OUlSZ1FoQldNd1p0SUk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MEQ5LzJFQ0IyRkZBN0Q4MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1n NDlJUmdRaEJXTXdadElJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBR+QwbKD62FghPGCzlQg7WSCRrjUNg61hicnx2m9dDUQ1pFShYZMJO iFYySDryvIRJzx6l85xc85CIgyJzWjPaFH1vlNDiahzSnXKunWvDJB92fheURzlx 4TBcdh4v7bHrp8Rmt77rUkmjCMnpkRF7y4BbXuIw2OD6fSZzHbxpY2ZUg+W3iomb bDVKGlv3mNq76kFcEDsxMl+o8Wij48nVFtHBqWhuQQeJz9K91nHUyNoJzRAITpLE X3hIq80ujMntt+JzhhPEWqD1374MDXTYiE/Y1M/2sTypmxi40+kWx+8xIv+xCW80 NALUdFkf7zgw2gf/DCCNKpXHL79Nwic= -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:12 2025 by rpki-client