This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json) Hash identifier: p9Z38dKo2NdcQ3B7F/Ml8F0ADpEdDaiSBlJpM8ZrKaU= Subject key identifier: 02:14:89:22:C0:31:EE:E6:5E:86:71:E4:CD:9D:35:2A:EE:C8:0B:13 Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Certificate serial: 17D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft Manifest number: 53B1 Signing time: Sat 06 Dec 2025 14:56:44 +0000 Manifest this update: Sat 06 Dec 2025 14:56:44 +0000 Manifest next update: Sat 13 Dec 2025 14:56:44 +0000 Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: yREtyK0dqodLVoqD/Eoia8KAeR7NqcnHzk/Ms/faSok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6097 (0x17d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Validity Not Before: Dec 6 14:56:44 2025 GMT Not After : Dec 13 14:56:44 2025 GMT Subject: CN=6934442c-f3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:07:34:f2:c2:dc:00:e4:27:d3:62:6b:cc: 3d:1f:5e:06:75:97:3f:0d:2f:34:9a:db:d0:ff:65: 80:a9:91:5c:dd:c1:91:f8:b4:2a:cb:c5:08:a9:3e: d4:de:14:83:42:6f:b0:09:34:32:18:d8:5b:ba:92: a4:a2:8f:8b:18:75:4a:42:a7:c1:2e:ea:e3:8b:a7: c1:e0:72:f7:84:b9:e1:d2:2f:84:a4:26:44:ab:81: 2e:14:01:41:f8:ff:df:26:34:3f:12:b4:4c:0a:14: 6a:cb:21:91:53:ff:94:e6:55:2f:19:10:db:71:a4: 83:2c:e0:98:2e:87:e2:0d:c8:a6:8c:92:4f:b6:df: 1e:45:42:97:03:68:a1:a4:1b:46:4e:4f:1b:41:7b: 5d:d1:7c:7f:cc:88:df:4a:c6:0a:6e:a7:67:84:7b: be:3c:bb:b6:9e:e0:ff:66:ba:4c:2a:0c:04:ba:25: 54:4c:60:42:02:a0:2e:a9:bf:af:c1:68:db:97:73: 21:15:a9:2b:34:a8:02:30:c1:4a:46:2c:79:24:93: c1:c4:cf:6a:0c:0d:49:bc:d1:92:f2:8d:e4:58:c4: 71:bc:7c:4d:9c:f5:fd:7c:3e:3e:3b:d6:59:7f:82: a0:6c:49:55:a6:ff:f0:a4:4b:b7:7c:55:c3:a7:7c: a8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:89:22:C0:31:EE:E6:5E:86:71:E4:CD:9D:35:2A:EE:C8:0B:13 X509v3 Authority Key Identifier: keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:fc:6f:20:0b:7d:1c:8d:9e:93:d3:e2:70:db:ae:bc:92:ef: 43:31:6d:1b:7c:5c:11:4b:24:61:dd:66:92:1b:86:35:34:12: 22:37:f0:99:dd:d4:83:0f:fb:a2:6f:81:41:24:f8:6c:5d:1c: 05:e9:65:1c:17:39:9b:1e:f7:7c:97:13:44:d8:77:8e:52:fa: 20:52:1d:ef:1d:31:43:68:19:2b:ca:0f:83:73:d6:9d:f6:40: bf:12:22:ed:05:24:0d:0a:7b:77:94:69:e4:cf:4e:a9:43:59: 93:0e:96:13:69:ce:7c:38:dd:02:f1:c7:c9:47:90:4d:7f:fd: 96:ed:3d:70:22:1a:8d:a5:86:cb:34:a2:f7:79:49:32:05:d0: d4:83:be:d3:53:8c:0b:d0:d3:63:2b:8f:1a:37:36:d1:8e:05: b0:0e:be:91:1c:e8:d8:c8:99:f7:cd:e3:c1:a7:bd:ee:00:af: d8:a6:ac:71:e8:3e:68:39:a0:09:98:03:b6:52:62:4e:c1:b2: 88:32:ff:2f:61:02:7b:7c:8c:ae:69:19:92:41:a7:eb:bb:93: 05:1a:74:83:93:a9:be:7f:a3:07:77:3a:b3:eb:83:01:7a:21: ad:00:b0:c8:62:d4:9d:8b:e7:f8:3b:cf:45:5a:a8:5d:34:ec: 0d:93:06:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF RDI0MkVGNjEwHhcNMjUxMjA2MTQ1NjQ0WhcNMjUxMjEzMTQ1NjQ0WjAYMRYwFAYD VQQDEw02OTM0NDQyYy1mM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2QHNPLC3ADkJ9Nia8w9H14GdZc/DS80mtvQ/2WAqZFc3cGR+LQqy8UIqT7U 3hSDQm+wCTQyGNhbupKkoo+LGHVKQqfBLurji6fB4HL3hLnh0i+EpCZEq4EuFAFB +P/fJjQ/ErRMChRqyyGRU/+U5lUvGRDbcaSDLOCYLofiDcimjJJPtt8eRUKXA2ih pBtGTk8bQXtd0Xx/zIjfSsYKbqdnhHu+PLu2nuD/ZrpMKgwEuiVUTGBCAqAuqb+v wWjbl3MhFakrNKgCMMFKRix5JJPBxM9qDA1JvNGS8o3kWMRxvHxNnPX9fD4+O9ZZ f4KgbElVpv/wpEu3fFXDp3yo0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIUiSLA Me7mXoZx5M2dNSruyAsTMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5 YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi/G8gC30cjZ6T0+Jw2668ku9DMW0bfFwRSyRh3WaSG4Y1NBIiN/CZ 3dSDD/uib4FBJPhsXRwF6WUcFzmbHvd8lxNE2HeOUvogUh3vHTFDaBkryg+Dc9ad 9kC/EiLtBSQNCnt3lGnkz06pQ1mTDpYTac58ON0C8cfJR5BNf/2W7T1wIhqNpYbL NKL3eUkyBdDUg77TU4wL0NNjK48aNzbRjgWwDr6RHOjYyJn3zePBp73uAK/Ypqxx 6D5oOaAJmAO2UmJOwbKIMv8vYQJ7fIyuaRmSQafru5MFGnSDk6m+f6MHdzqz64MB eiGtALDIYtSdi+f4O89FWqhdNOwNkwYb -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:01 2025 by rpki-client