This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: dXzW/QeNFYS3CO9BlHuvySxDMBYC/BVPNl8GMub4Niw= Subject key identifier: AE:BB:8B:54:98:36:C6:67:45:D8:FE:34:BA:B1:83:D0:52:5F:36:6A Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 8D Signing time: Fri 05 Dec 2025 04:28:49 +0000 Manifest this update: Fri 05 Dec 2025 04:28:48 +0000 Manifest next update: Fri 12 Dec 2025 04:28:48 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: rbGGnyF1xcWSBzjrwKkn7fkDXr1R+AODVgLq7R34KRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Dec 5 04:28:48 2025 GMT Not After : Dec 12 04:28:48 2025 GMT Subject: CN=69325f81-c72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:c9:4c:f8:80:5f:ee:1c:63:25:89:be:75: ed:2d:03:49:c9:9e:50:ad:7a:b6:9e:6b:68:d3:d3: 82:9c:87:0a:d8:aa:ba:95:d8:8b:e0:3b:d8:ff:f5: 27:35:6c:61:f3:c7:78:5f:7f:6a:9d:d8:f9:e0:6f: 95:07:1e:f9:ac:fa:68:91:59:ff:dd:42:17:bf:e7: 86:83:98:6b:e7:ff:94:19:b7:55:61:b7:a2:4f:d4: d8:1e:d4:d3:58:b7:98:51:f3:3c:73:e7:4c:a1:ab: 83:ba:d4:60:dc:22:a5:2b:aa:60:de:15:ee:fc:bd: ac:96:b1:e6:30:e1:f1:a8:46:fd:17:68:44:13:e1: 85:0d:19:a6:13:0a:9c:6a:dd:57:7b:44:92:6c:70: 1b:6c:37:f3:1d:0e:22:54:99:db:ef:60:d1:50:87: d3:7b:4d:69:c6:63:09:65:13:79:2b:4d:f7:b7:fc: 8b:f3:5e:91:e2:9f:d3:07:f7:a7:2d:2b:66:39:5c: 4b:d7:11:80:95:fb:e5:48:a5:3e:3b:27:57:cc:a7: a6:7d:57:6e:20:95:6a:5a:22:2a:fa:8e:a8:55:6b: ac:c5:c7:f8:fd:bd:6a:3f:a7:7b:7f:23:1c:6f:e0: b5:68:f2:ce:d8:6f:1f:29:99:06:cf:c3:a2:bc:bc: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BB:8B:54:98:36:C6:67:45:D8:FE:34:BA:B1:83:D0:52:5F:36:6A X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:2a:7f:a2:02:3e:d8:da:e2:dd:cc:46:d9:e0:9c:e6:c0:1d: e7:5e:e8:4f:99:dd:9c:65:f8:f7:df:3d:91:cf:17:30:83:97: d2:34:9c:16:ad:6d:fe:7a:14:cf:42:5f:9c:5e:f5:c0:77:22: 83:9c:c3:74:04:ec:fb:10:62:bc:ae:7a:a5:5c:9c:69:c7:a0: 06:aa:55:a1:e2:d9:15:96:93:b5:36:8a:d8:f6:14:1c:7e:29: 2c:7a:18:22:20:aa:f5:93:21:b1:1b:68:64:77:2b:d6:cd:dc: b2:4d:ae:a7:61:aa:a1:31:c0:90:04:45:2b:ce:40:c9:52:d8: 5a:25:78:cf:cf:d2:75:3b:8f:1b:58:ce:6a:5a:5f:50:1f:87: 5d:f9:81:62:34:6c:73:3a:2d:c1:32:54:24:75:36:af:02:a0: 4d:58:b6:64:56:64:92:b7:f7:3b:7c:d2:49:b6:8c:80:88:57: b7:95:94:29:b5:98:27:a0:ef:85:6a:2e:a3:be:bb:54:2d:17: 78:84:c9:a2:54:b9:98:0e:5d:ee:52:bb:91:1c:df:3c:c9:af: 0f:6c:cf:2a:59:31:e3:f5:71:b6:81:af:27:d2:c0:dd:21:2d: 41:e2:cb:5f:b2:cc:e7:c5:b6:65:47:eb:df:d6:b7:bb:db:b2: 89:2c:85:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKDlFNzFGQjcxQjY3MDBDNDA0NUE1QzM0MEMxOEYxMzBG MDg2MEFBMzkwHhcNMjUxMjA1MDQyODQ4WhcNMjUxMjEyMDQyODQ4WjAYMRYwFAYD VQQDEw02OTMyNWY4MS1jNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj/JTPiAX+4cYyWJvnXtLQNJyZ5QrXq2nmto09OCnIcK2Kq6ldiL4DvY//Un NWxh88d4X39qndj54G+VBx75rPpokVn/3UIXv+eGg5hr5/+UGbdVYbeiT9TYHtTT WLeYUfM8c+dMoauDutRg3CKlK6pg3hXu/L2slrHmMOHxqEb9F2hEE+GFDRmmEwqc at1Xe0SSbHAbbDfzHQ4iVJnb72DRUIfTe01pxmMJZRN5K033t/yL816R4p/TB/en LStmOVxL1xGAlfvlSKU+OydXzKemfVduIJVqWiIq+o6oVWusxcf4/b1qP6d7fyMc b+C1aPLO2G8fKZkGz8OivLwzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK67i1SY NsZnRdj+NLqxg9BSXzZqMB8GA1UdIwQYMBaAFJ5x+3G2cAxARaXDQMGPEw8IYKo5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy81NDY2NkIzQ0Y5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RFQkZwY05Bd1k4VER3aGdx amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy81NDY2NkIzQ0Y5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RF QkZwY05Bd1k4VER3aGdxamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHKn+iAj7Y2uLdzEbZ4JzmwB3nXuhPmd2cZfj33z2Rzxcwg5fSNJwW rW3+ehTPQl+cXvXAdyKDnMN0BOz7EGK8rnqlXJxpx6AGqlWh4tkVlpO1NorY9hQc fiksehgiIKr1kyGxG2hkdyvWzdyyTa6nYaqhMcCQBEUrzkDJUthaJXjPz9J1O48b WM5qWl9QH4dd+YFiNGxzOi3BMlQkdTavAqBNWLZkVmSSt/c7fNJJtoyAiFe3lZQp tZgnoO+Fai6jvrtULRd4hMmiVLmYDl3uUruRHN88ya8PbM8qWTHj9XG2ga8n0sDd IS1B4stfssznxbZlR+vf1re727KJLIWo -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:33 2025 by rpki-client