This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: 7RgnxOPU3VVbYTpvMC54cO5sRoI/tbU1hFkzhjrZUjk= Subject key identifier: 19:FA:21:FC:D0:69:FF:E6:64:F7:08:6B:0A:23:D3:32:3C:80:EF:F3 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C61 Signing time: Sat 06 Dec 2025 17:55:17 +0000 Manifest this update: Sat 06 Dec 2025 17:55:16 +0000 Manifest next update: Sat 13 Dec 2025 17:55:16 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: v5hg9n2wSE6ao3W88fYMf1j09vV0QkvRhWE96KsWgZQ=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Dec 6 17:55:16 2025 GMT Not After : Dec 13 17:55:16 2025 GMT Subject: CN=69346e04-c924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:fa:4d:82:8d:ce:91:3b:38:57:bb:f6:32: bb:d1:8d:c4:e6:57:4d:c9:d0:76:60:82:85:48:7e: 0a:ea:3a:7c:7a:54:ed:6b:d0:98:90:7a:4d:da:76: cb:28:3b:0a:c9:ce:e2:49:7c:94:6d:37:e3:ff:71: d4:03:a4:2e:a0:67:78:af:f2:69:79:56:67:a7:2f: 55:8d:62:d4:d6:f9:66:4f:c1:45:13:71:4a:2f:09: 20:7c:a3:7f:8c:60:17:6c:4e:fd:a9:19:e0:bc:9e: 1c:9e:b0:d1:d8:02:e7:66:e7:4c:9e:81:e9:b6:7a: 63:d1:f7:63:47:90:a0:40:7e:bd:af:0f:57:36:f6: 9f:6e:2a:0d:5b:44:82:b2:72:76:85:64:4b:b6:71: 2b:38:52:0e:a0:ef:fe:ea:13:9f:ad:25:c6:b1:3b: e6:32:d0:c5:e5:3d:ab:38:ea:2c:22:ea:c9:c7:a7: 60:a3:5e:f8:ea:ee:26:f9:27:a6:92:bd:bc:87:24: 1a:d8:0d:fd:d5:f2:ac:31:4b:66:b4:3c:dd:ea:58: b0:d0:85:12:97:46:0f:8f:28:dc:bd:13:2f:58:dc: cb:15:e7:df:51:ce:c6:7a:18:22:62:a0:78:a4:15: 6d:b1:ab:fe:a3:58:c2:7f:ca:fc:45:53:9a:8c:90: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FA:21:FC:D0:69:FF:E6:64:F7:08:6B:0A:23:D3:32:3C:80:EF:F3 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:9b:23:fa:2b:c6:7b:9e:b9:f0:2d:cf:9e:2b:8d:d3:fc:c5: b2:ee:40:80:d2:94:4f:76:e3:1a:d2:7e:aa:3f:ab:c2:a2:0c: fc:26:93:c1:69:7d:9e:2f:25:59:2f:70:13:17:54:30:ad:ea: 6c:fa:e7:b5:f7:da:57:e5:b1:80:5a:29:a7:a0:8a:0d:0b:e0: 0a:38:4e:ae:05:66:58:69:71:32:d7:dd:d7:25:9e:ef:b9:56: ac:a8:28:0c:99:0d:11:bd:22:37:89:af:ca:5f:14:92:a6:e5: 55:d2:ed:8d:4d:ff:86:9a:0c:a0:63:27:34:5c:32:eb:19:9e: e5:2c:48:89:02:e7:8b:01:78:00:76:61:75:21:98:71:73:fb: 75:d2:9f:41:e1:e7:92:8a:29:a9:75:32:44:de:b4:e8:7c:d5: b6:07:f8:5e:79:e3:68:21:5b:2e:58:f9:cc:2c:de:22:21:f7: 19:af:c7:9b:47:ca:b3:db:f6:9a:36:69:a3:83:96:f4:1c:f0: 4c:cf:f4:76:1e:ec:dd:a2:1a:9a:ce:49:0c:99:1e:5c:c3:35: f8:77:c3:cd:eb:87:df:1f:fb:99:50:7b:0c:28:b5:56:c5:44: 67:34:0c:8e:71:b8:db:ca:4b:7e:9e:fd:0b:06:60:78:b3:a9: b8:e5:3d:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUxMjA2MTc1NTE2WhcNMjUxMjEzMTc1NTE2WjAYMRYwFAYD VQQDEw02OTM0NmUwNC1jOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhT6TYKNzpE7OFe79jK70Y3E5ldNydB2YIKFSH4K6jp8elTta9CYkHpN2nbL KDsKyc7iSXyUbTfj/3HUA6QuoGd4r/JpeVZnpy9VjWLU1vlmT8FFE3FKLwkgfKN/ jGAXbE79qRngvJ4cnrDR2ALnZudMnoHptnpj0fdjR5CgQH69rw9XNvafbioNW0SC snJ2hWRLtnErOFIOoO/+6hOfrSXGsTvmMtDF5T2rOOosIurJx6dgo1746u4m+Sem kr28hyQa2A391fKsMUtmtDzd6liw0IUSl0YPjyjcvRMvWNzLFeffUc7GehgiYqB4 pBVtsav+o1jCf8r8RVOajJASEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn6IfzQ af/mZPcIawoj0zI8gO/zMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSmyP6K8Z7nrnwLc+eK43T/MWy7kCA0pRPduMa0n6qP6vCogz8JpPB aX2eLyVZL3ATF1Qwreps+ue199pX5bGAWimnoIoNC+AKOE6uBWZYaXEy193XJZ7v uVasqCgMmQ0RvSI3ia/KXxSSpuVV0u2NTf+GmgygYyc0XDLrGZ7lLEiJAueLAXgA dmF1IZhxc/t10p9B4eeSiimpdTJE3rTofNW2B/heeeNoIVsuWPnMLN4iIfcZr8eb R8qz2/aaNmmjg5b0HPBMz/R2HuzdohqazkkMmR5cwzX4d8PN64ffH/uZUHsMKLVW xURnNAyOcbjbykt+nv0LBmB4s6m45T0V -----END CERTIFICATE-----Generated at Sun Dec 7 00:00:12 2025 by rpki-client