This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: Ehl5q+8TEOImJDW0lMwo8YlOqfFEDlFUtWx/OvV/G/8= Subject key identifier: A6:D9:7D:AD:A9:8D:A3:83:C8:A3:A9:AD:CF:63:C4:9A:EA:D0:D9:FC Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 020C Signing time: Fri 05 Dec 2025 00:35:48 +0000 Manifest this update: Fri 05 Dec 2025 00:35:48 +0000 Manifest next update: Fri 12 Dec 2025 00:35:48 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: xQJZQ28RcrozFxPxZvL6PrGYQfcyNZndA2tAFY7xBbE=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Dec 5 00:35:48 2025 GMT Not After : Dec 12 00:35:48 2025 GMT Subject: CN=693228e4-a6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:36:a4:9e:4f:a5:d3:2e:6f:cf:8f:74:ed: be:25:31:74:5b:30:bc:c8:e2:ae:9a:2c:e5:b5:74: 89:56:cf:7d:c2:90:c8:97:20:b8:46:16:fc:ff:13: 6a:2f:8b:c0:1a:65:b5:84:ab:4d:96:7e:6e:cb:e8: 20:82:15:79:65:03:f6:c0:2e:63:d9:26:53:f3:02: df:31:a6:a3:4c:8d:10:b1:cd:9d:de:a7:b9:c1:a6: 5a:f9:19:0b:b5:03:de:e9:c5:e1:a0:5e:9e:04:b8: 4d:61:94:ee:ce:54:3f:cd:4f:cd:6f:26:0b:6c:39: a9:4d:61:13:49:05:4d:59:c0:5b:27:4f:bb:83:ee: b2:4c:92:5d:0c:27:a2:14:00:e4:77:a2:ee:6c:d2: c0:07:28:76:4c:6f:82:8f:a7:9a:ba:7d:63:5a:26: eb:47:f3:77:21:f5:35:d8:5f:f4:77:fb:61:ec:0b: 24:7c:c3:e4:6a:e4:74:72:38:b6:c0:4f:04:03:31: 6b:6e:73:64:83:7b:ab:ce:6b:45:e0:bb:7a:62:6f: fc:c5:fa:fc:90:8f:fc:ca:b8:78:6b:44:76:99:d6: fb:06:f2:f8:b6:3e:b4:b6:22:ab:62:53:c8:b3:5a: 00:11:d5:2b:33:03:ba:90:43:ad:fd:be:7d:b3:7e: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D9:7D:AD:A9:8D:A3:83:C8:A3:A9:AD:CF:63:C4:9A:EA:D0:D9:FC X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e9:27:2d:18:64:38:14:3c:15:c1:12:38:ae:a6:aa:df:d9: 78:e8:f6:83:a9:80:2d:77:d0:3c:50:b3:d6:e9:be:c9:ac:55: f9:60:9f:86:1a:86:4e:04:ee:ae:4f:4b:a3:6e:e6:f4:9c:9d: b1:2f:09:d9:1b:0e:04:0a:f6:b6:f2:3d:1c:06:24:39:c0:b7: 8c:3e:df:c6:5c:1e:06:7a:38:fa:ce:31:72:9b:84:57:b7:ca: 48:4a:4a:72:92:4e:1d:d7:bc:4c:f7:46:a3:dc:56:40:ce:a6: fc:de:f7:82:59:95:c2:f2:60:93:f5:cd:3e:10:4b:27:13:ce: 57:54:be:16:a4:5b:1b:1c:b4:4a:bf:a6:6c:f9:06:40:6e:f5: 29:f4:63:e2:42:b0:9b:82:9e:64:fe:a4:c1:62:f8:3b:d7:9e: 40:0b:74:7f:9c:b4:2d:17:d6:bb:43:42:37:d9:37:75:c4:08: f9:97:93:88:83:fb:6b:e7:56:0c:23:7b:78:8b:54:a8:81:70: f4:71:4b:98:50:5f:32:d3:e6:04:68:83:60:8b:b2:e0:44:0f: 56:dc:82:bf:d9:de:1a:2d:bf:97:f9:14:e8:78:19:95:3f:ed: d9:fb:af:1f:cd:2c:00:d1:8d:a7:77:78:3d:2d:59:e5:62:98: 1d:6e:cf:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjUxMjA1MDAzNTQ4WhcNMjUxMjEyMDAzNTQ4WjAYMRYwFAYD VQQDEw02OTMyMjhlNC1hNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMQ2pJ5PpdMub8+PdO2+JTF0WzC8yOKumizltXSJVs99wpDIlyC4Rhb8/xNq L4vAGmW1hKtNln5uy+ggghV5ZQP2wC5j2SZT8wLfMaajTI0Qsc2d3qe5waZa+RkL tQPe6cXhoF6eBLhNYZTuzlQ/zU/NbyYLbDmpTWETSQVNWcBbJ0+7g+6yTJJdDCei FADkd6LubNLAByh2TG+Cj6eaun1jWibrR/N3IfU12F/0d/th7AskfMPkauR0cji2 wE8EAzFrbnNkg3urzmtF4Lt6Ym/8xfr8kI/8yrh4a0R2mdb7BvL4tj60tiKrYlPI s1oAEdUrMwO6kEOt/b59s34xtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbZfa2p jaODyKOprc9jxJrq0Nn8MB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe6SctGGQ4FDwVwRI4rqaq39l46PaDqYAtd9A8ULPW6b7JrFX5YJ+G GoZOBO6uT0ujbub0nJ2xLwnZGw4ECva28j0cBiQ5wLeMPt/GXB4Gejj6zjFym4RX t8pISkpykk4d17xM90aj3FZAzqb83veCWZXC8mCT9c0+EEsnE85XVL4WpFsbHLRK v6Zs+QZAbvUp9GPiQrCbgp5k/qTBYvg7155AC3R/nLQtF9a7Q0I32Td1xAj5l5OI g/tr51YMI3t4i1SogXD0cUuYUF8y0+YEaINgi7LgRA9W3IK/2d4aLb+X+RToeBmV P+3Z+68fzSwA0Y2nd3g9LVnlYpgdbs8g -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:35 2025 by rpki-client