This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: lX5d3Fq9m+VGiMc5QxC7lphqPkfWIA1lvVJ+ULRw3iA= Subject key identifier: 37:BD:1C:41:85:E7:1C:77:B5:98:54:B4:26:7A:6C:AC:0B:21:8A:B7 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0578 Signing time: Thu 04 Dec 2025 21:56:23 +0000 Manifest this update: Thu 04 Dec 2025 21:56:22 +0000 Manifest next update: Thu 11 Dec 2025 21:56:22 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: ZycBRvAEXuhWcfTC8l+KYxIpGGfkoOO6ml2JOtutobQ=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: sFxA7zWd1QKxzt33I3bSrxQFMBjh0wvM8Ox270gKZ1E=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: RyN8TdZ33FgQoqBN1enP2qHNRdbXtugooz5NQ7OTf7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Dec 4 21:56:22 2025 GMT Not After : Dec 11 21:56:22 2025 GMT Subject: CN=69320387-6b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:e4:17:10:6b:ff:2e:b9:76:91:2b:7f:9d: 03:79:ea:14:72:b6:62:7e:7e:8c:76:b8:18:21:a2: 77:7d:ea:71:9e:d6:e5:c5:1b:d7:58:40:26:38:b6: cf:2c:c1:d4:10:20:2b:ec:ac:ee:47:1c:3f:03:d1: ad:13:ad:e0:58:ed:ac:d2:f7:cb:48:39:51:5a:9b: 38:ff:0b:21:0a:a7:b5:ec:85:26:0a:ef:bd:9c:c9: 75:1b:27:d0:7d:94:91:b9:03:cf:9f:10:3b:86:39: f5:3b:a6:53:28:ea:f0:eb:f9:ee:24:05:de:e4:aa: 9d:98:41:0c:67:74:50:53:03:3c:c1:28:8f:36:88: c9:9b:e7:2e:f9:d3:0f:ca:43:66:e2:ec:65:c7:9c: 05:dd:2c:ab:ed:0c:f1:1f:29:5a:61:8a:e0:3b:37: aa:86:81:16:8f:bb:aa:d3:cb:06:c5:fe:23:1d:59: 28:a0:8a:f4:e3:1d:62:18:36:f2:50:9d:f2:9c:c9: b8:58:9f:7a:ad:de:fb:96:33:42:b7:03:be:7c:cd: 1f:c1:01:0b:12:92:d0:32:5a:69:be:1f:16:88:58: 68:cb:7f:6e:7a:0b:90:38:23:10:35:9f:13:d3:0b: b3:6f:b3:0f:9c:10:78:55:c5:66:17:15:ee:0a:af: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BD:1C:41:85:E7:1C:77:B5:98:54:B4:26:7A:6C:AC:0B:21:8A:B7 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:58:15:9e:11:92:3c:17:04:28:21:89:d5:55:7c:81:7f:e6: 96:b8:b2:f1:30:ef:ec:62:f8:12:b0:2a:84:11:42:aa:7d:94: 74:80:bc:11:28:54:ea:19:3e:a7:04:d3:56:14:1c:b2:d1:f4: 5b:b8:2a:3c:79:ae:e8:9b:25:2a:c2:60:6c:36:67:2a:8b:c9: 94:b8:50:f3:61:1d:59:7c:c7:bf:9d:f1:67:b5:17:db:fd:c3: c8:c7:c1:2a:cc:a2:c0:89:81:93:72:19:67:48:73:b1:f8:25: 38:f2:5c:33:a0:3c:6e:26:e3:24:d9:01:f3:97:e3:a5:4b:94: a4:72:ac:c8:99:1b:14:cb:18:f3:09:e3:6b:f5:30:94:8f:a8: 7e:e2:1e:4f:c9:68:c2:f2:8f:b3:3b:3b:31:c1:a5:23:00:cd: db:c1:31:2e:56:7f:b9:3c:8c:cd:a6:f0:4f:db:57:33:ff:b4: 3f:26:89:19:19:f9:be:0e:42:6f:a7:63:1d:0f:7f:5b:b9:08: 51:8c:d4:bb:1d:ac:4b:45:81:3f:ec:0d:16:ab:38:8f:e9:0a: ad:58:88:2a:b3:ad:f9:15:33:39:24:46:03:28:9c:89:47:6a: 26:e7:f7:6e:e4:94:26:e9:9f:5e:2c:7b:27:99:4f:1d:2d:f7: a7:c4:3f:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUxMjA0MjE1NjIyWhcNMjUxMjExMjE1NjIyWjAYMRYwFAYD VQQDEw02OTMyMDM4Ny02YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4PkFxBr/y65dpErf50DeeoUcrZifn6MdrgYIaJ3fepxntblxRvXWEAmOLbP LMHUECAr7KzuRxw/A9GtE63gWO2s0vfLSDlRWps4/wshCqe17IUmCu+9nMl1GyfQ fZSRuQPPnxA7hjn1O6ZTKOrw6/nuJAXe5KqdmEEMZ3RQUwM8wSiPNojJm+cu+dMP ykNm4uxlx5wF3Syr7QzxHylaYYrgOzeqhoEWj7uq08sGxf4jHVkooIr04x1iGDby UJ3ynMm4WJ96rd77ljNCtwO+fM0fwQELEpLQMlppvh8WiFhoy39ueguQOCMQNZ8T 0wuzb7MPnBB4VcVmFxXuCq9pAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe9HEGF 5xx3tZhUtCZ6bKwLIYq3MB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbWBWeEZI8FwQoIYnVVXyBf+aWuLLxMO/sYvgSsCqEEUKqfZR0gLwR KFTqGT6nBNNWFByy0fRbuCo8ea7omyUqwmBsNmcqi8mUuFDzYR1ZfMe/nfFntRfb /cPIx8EqzKLAiYGTchlnSHOx+CU48lwzoDxuJuMk2QHzl+OlS5SkcqzImRsUyxjz CeNr9TCUj6h+4h5PyWjC8o+zOzsxwaUjAM3bwTEuVn+5PIzNpvBP21cz/7Q/JokZ Gfm+DkJvp2MdD39buQhRjNS7HaxLRYE/7A0WqziP6QqtWIgqs635FTM5JEYDKJyJ R2om5/du5JQm6Z9eLHsnmU8dLfenxD9+ -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:17 2025 by rpki-client