This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json) Hash identifier: XixbwaNycns6sq7AWFAPxE1ac3Uaw4X6xbzGoz2zuV0= Subject key identifier: 36:76:6A:50:68:5A:FD:BD:5E:6D:EB:3E:F6:D3:32:93:56:FC:18:F6 Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft Manifest number: 0144 Signing time: Sun 07 Dec 2025 02:40:15 +0000 Manifest this update: Sun 07 Dec 2025 02:40:15 +0000 Manifest next update: Sun 14 Dec 2025 02:40:15 +0000 Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: HuO7vYhkF6nA0qY8RP7UEjinBAOInMQs1HwMSC/uh98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Validity Not Before: Dec 7 02:40:15 2025 GMT Not After : Dec 14 02:40:15 2025 GMT Subject: CN=6934e90f-fa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:73:76:57:8f:8c:a8:cd:ed:eb:e0:04:b1: d5:d2:70:44:43:61:80:e4:87:30:20:09:72:ab:86: fc:fb:ef:9b:63:d7:e8:57:b1:b5:95:90:61:fd:44: 07:53:6a:ea:e9:a8:e2:64:91:b7:ae:d5:d7:ef:f5: 1a:d2:14:be:b4:68:eb:c3:86:8e:a9:f9:16:f1:1b: 66:53:cc:93:8f:f1:1c:c3:f3:8a:3d:c5:b7:d5:d1: e2:e9:7e:c1:54:3a:bd:70:71:23:2d:d8:a8:88:f8: ec:01:da:2f:22:7d:44:e7:c7:03:a3:ed:8b:a2:d0: 1d:62:2b:7b:e9:0a:9e:ea:21:69:bd:8d:35:29:33: 3e:e4:83:dd:24:af:80:b8:b2:ee:ee:02:ca:01:5f: ae:15:7e:dd:82:db:95:7b:94:9b:4d:a6:d3:52:e3: 05:87:33:2e:d0:f9:1c:9c:ac:cc:c2:33:b0:f4:f1: 31:24:6b:c8:af:39:06:db:cf:87:06:ad:2e:2d:2f: 49:db:fc:40:de:1a:01:bb:ef:21:2f:d0:40:a8:11: e2:d1:67:19:00:ae:6b:0d:b5:39:43:9c:31:e8:9c: 9f:04:33:6f:29:40:5e:fc:44:e2:0c:6d:56:92:0c: fa:a1:7e:d1:09:e4:09:8e:41:5c:22:17:4b:54:89: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:76:6A:50:68:5A:FD:BD:5E:6D:EB:3E:F6:D3:32:93:56:FC:18:F6 X509v3 Authority Key Identifier: keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:81:9b:65:71:28:d8:6b:24:6e:87:fc:c6:1b:8e:8b:c6:5d: 83:d2:ce:99:26:f5:b7:e7:cd:04:68:0c:9c:48:ae:e3:95:32: 33:71:11:c1:f9:9a:b2:c3:04:8e:a5:83:bd:18:3e:bb:b8:e2: cf:31:70:1f:49:64:53:38:88:6f:92:2a:81:0c:ec:21:99:25: 0e:8c:7a:e6:93:29:1f:91:42:f9:f4:5d:d6:f0:c3:6a:71:21: 4a:9e:8c:88:6f:f8:5f:f0:3f:b4:5e:65:51:61:c5:c6:2a:3a: 4d:0f:4e:8a:76:f8:8b:46:a7:05:cb:46:fc:0c:f2:21:4c:78: 50:ad:6a:41:4c:eb:49:90:91:24:72:78:b4:c2:bb:b1:21:bf: 36:c0:6b:81:4f:f7:d2:a2:fd:1e:9c:35:fe:48:83:30:59:82: 2d:b1:cc:02:35:4e:d8:57:0a:23:51:7d:f7:5d:ef:39:b4:e8: 2e:17:b5:b7:a7:0a:e7:79:b7:3f:d1:4b:dd:56:5d:3a:0f:e4: 5f:76:8f:9c:74:11:fc:61:62:0e:66:2f:b1:20:8b:3f:4d:b1: 0a:27:35:37:05:9b:72:f3:ea:3d:b1:c9:c9:a8:1a:1b:dc:00: 84:ad:ee:c5:c1:98:69:80:87:62:3f:01:57:1b:e4:c9:cb:a6: f4:63:39:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDREQxMTAvBgNVBAUTKDlENDYwNDQwNjBGQTk2RTk0QTIzMUUwMzBBMzBFM0Q2 NTRGNDExQUUwHhcNMjUxMjA3MDI0MDE1WhcNMjUxMjE0MDI0MDE1WjAYMRYwFAYD VQQDEw02OTM0ZTkwZi1mYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiBzdlePjKjN7evgBLHV0nBEQ2GA5IcwIAlyq4b8+++bY9foV7G1lZBh/UQH U2rq6ajiZJG3rtXX7/Ua0hS+tGjrw4aOqfkW8RtmU8yTj/Ecw/OKPcW31dHi6X7B VDq9cHEjLdioiPjsAdovIn1E58cDo+2LotAdYit76Qqe6iFpvY01KTM+5IPdJK+A uLLu7gLKAV+uFX7dgtuVe5SbTabTUuMFhzMu0PkcnKzMwjOw9PExJGvIrzkG28+H Bq0uLS9J2/xA3hoBu+8hL9BAqBHi0WcZAK5rDbU5Q5wx6JyfBDNvKUBe/ETiDG1W kgz6oX7RCeQJjkFcIhdLVIk6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZ2alBo Wv29Xm3rPvbTMpNW/Bj2MB8GA1UdIwQYMBaAFJ1GBEBg+pbpSiMeAwow49ZU9BGu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NERC85MzZCMzFFMERE MEQxMUVFOUQyOTJENkFDNEY5QUUwMi9uVVlFUUdENmx1bEtJeDREQ2pEajFsVDBF YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25VWUVRR0Q2bHVsS0l4NERDakRqMWxUMEVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NERC85MzZCMzFFMEREMEQxMUVFOUQyOTJENkFDNEY5QUUwMi9uVVlFUUdENmx1 bEtJeDREQ2pEajFsVDBFYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgZtlcSjYayRuh/zGG46Lxl2D0s6ZJvW3580EaAycSK7jlTIzcRHB +ZqywwSOpYO9GD67uOLPMXAfSWRTOIhvkiqBDOwhmSUOjHrmkykfkUL59F3W8MNq cSFKnoyIb/hf8D+0XmVRYcXGKjpND06KdviLRqcFy0b8DPIhTHhQrWpBTOtJkJEk cni0wruxIb82wGuBT/fSov0enDX+SIMwWYItscwCNU7YVwojUX33Xe85tOguF7W3 pwrnebc/0UvdVl06D+Rfdo+cdBH8YWIOZi+xIIs/TbEKJzU3BZty8+o9scnJqBob 3ACEre7FwZhpgIdiPwFXG+TJy6b0YznJ -----END CERTIFICATE-----Generated at Sun Dec 7 04:54:42 2025 by rpki-client