This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: hJTI3DzpeSlhqzqm/kl/sXGbuPjMNofkld4CJwxyNmI= Subject key identifier: 88:4A:F1:0A:E4:A1:7D:D8:08:87:FE:10:65:17:14:EB:03:7A:65:C8 Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0CA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C92 Signing time: Thu 04 Dec 2025 17:55:59 +0000 Manifest this update: Thu 04 Dec 2025 17:55:58 +0000 Manifest next update: Thu 11 Dec 2025 17:55:58 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: icI5ZoHIlCNIXTuLimT8CtvGtFkRQJEsaPTPW1u0Bp8=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: RKcFdcMziNVq8aQAr5eNokx30FuoH7iCpLshPn3BtOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Dec 4 17:55:58 2025 GMT Not After : Dec 11 17:55:58 2025 GMT Subject: CN=6931cb2e-0b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:4f:37:59:22:a3:20:b9:d1:82:bb:c2:b6: a2:e1:9e:04:14:00:78:16:2e:bc:b7:bc:3a:5f:b4: 78:b8:09:ee:be:29:56:6b:cb:6d:30:b7:62:b9:85: 27:a0:eb:44:84:40:a5:38:c7:2e:a0:4d:36:26:34: c4:d2:a0:82:25:4d:04:f3:a5:d8:1a:86:b8:f9:39: 77:7b:41:9d:34:08:2d:f9:a0:72:55:d6:47:52:8b: 75:a4:d7:f8:c3:dd:61:da:9c:73:2b:86:c0:ae:dc: 92:93:f4:d8:ef:ca:3c:95:f5:6e:de:ce:d5:f3:f6: d9:0a:d7:88:50:ad:f3:d4:2a:fd:05:fe:91:3a:ac: 3a:ec:0e:04:2f:f5:3f:ee:58:d7:ef:4a:18:93:66: 69:97:9e:94:e7:a0:95:98:ba:d8:ec:2c:49:00:b2: fa:ef:cf:4d:d9:57:b8:dd:42:40:1a:af:b2:b3:04: 99:44:23:96:5d:71:b3:d0:0c:bb:a1:c1:9f:56:42: a4:f4:c8:77:01:11:d5:ba:d1:36:98:46:55:6e:c3: 0f:cf:df:e6:08:a8:1b:0a:4e:58:4a:ef:43:43:98: fb:9c:a7:1f:06:e2:0d:51:66:8a:32:94:ea:69:f4: bb:ce:34:07:2c:e0:d9:0d:34:db:07:63:87:45:05: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4A:F1:0A:E4:A1:7D:D8:08:87:FE:10:65:17:14:EB:03:7A:65:C8 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:eb:c5:bd:70:08:35:7f:66:02:66:4d:6d:36:e6:08:ce:07: 81:6a:8c:72:9e:2a:14:70:4b:59:f0:2e:3d:11:57:c8:e4:cb: fc:10:d9:5c:1d:20:9a:f4:b5:e6:b1:8b:7a:28:f3:1d:c7:d8: b4:fc:10:b1:17:f6:a8:df:2c:78:52:c3:c0:7c:52:cd:e2:f1: b1:6d:8c:d7:3a:7f:bf:f6:ce:e1:89:3c:23:ad:4b:29:9a:f2: 0a:1c:ab:a6:6a:9c:68:65:ff:01:2a:d8:1a:4a:e7:f8:1c:47: 89:b7:b0:2c:ce:46:ee:ce:89:60:c6:3f:67:08:96:f6:66:33: 3d:c4:2d:cb:1e:06:2c:76:d5:79:9f:ef:36:01:a7:b3:b4:5b: 9c:cf:0e:1d:71:11:aa:e9:3e:2e:89:8c:84:2a:15:6c:0d:fc: c5:b5:08:e3:2e:a0:45:61:9a:d8:73:9e:70:29:b5:b3:0f:e2: e2:fe:3a:f7:af:7e:d4:77:ea:97:e2:30:43:3d:6d:4d:80:eb: e9:93:c0:3b:e0:3b:49:09:13:19:fa:4c:7b:30:1f:77:69:73: c0:79:ff:44:0e:fb:13:8d:3d:48:d3:4e:84:0c:9c:b2:19:1c: bc:1e:a7:f9:2c:4b:ca:e6:78:9f:f3:7f:08:27:21:ae:5c:31: 89:c9:1f:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUxMjA0MTc1NTU4WhcNMjUxMjExMTc1NTU4WjAYMRYwFAYD VQQDEw02OTMxY2IyZS0wYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm9PN1kioyC50YK7wrai4Z4EFAB4Fi68t7w6X7R4uAnuvilWa8ttMLdiuYUn oOtEhEClOMcuoE02JjTE0qCCJU0E86XYGoa4+Tl3e0GdNAgt+aByVdZHUot1pNf4 w91h2pxzK4bArtySk/TY78o8lfVu3s7V8/bZCteIUK3z1Cr9Bf6ROqw67A4EL/U/ 7ljX70oYk2Zpl56U56CVmLrY7CxJALL6789N2Ve43UJAGq+yswSZRCOWXXGz0Ay7 ocGfVkKk9Mh3ARHVutE2mEZVbsMPz9/mCKgbCk5YSu9DQ5j7nKcfBuINUWaKMpTq afS7zjQHLODZDTTbB2OHRQWCHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhK8Qrk oX3YCIf+EGUXFOsDemXIMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq68W9cAg1f2YCZk1tNuYIzgeBaoxynioUcEtZ8C49EVfI5Mv8ENlc HSCa9LXmsYt6KPMdx9i0/BCxF/ao3yx4UsPAfFLN4vGxbYzXOn+/9s7hiTwjrUsp mvIKHKumapxoZf8BKtgaSuf4HEeJt7Aszkbuzolgxj9nCJb2ZjM9xC3LHgYsdtV5 n+82AaeztFuczw4dcRGq6T4uiYyEKhVsDfzFtQjjLqBFYZrYc55wKbWzD+Li/jr3 r37Ud+qX4jBDPW1NgOvpk8A74DtJCRMZ+kx7MB93aXPAef9EDvsTjT1I006EDJyy GRy8Hqf5LEvK5nif838IJyGuXDGJyR/m -----END CERTIFICATE-----Generated at Sat Dec 6 17:07:36 2025 by rpki-client