This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: Iz4OOuqbK6KWuGwmfEkzPmh3CWbMv1dstLRIDm5tR58= Subject key identifier: B5:28:87:CA:56:34:65:8D:80:E8:83:8A:B6:AF:FF:1D:27:F3:71:3F Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 01B7 Signing time: Wed 17 Dec 2025 02:41:01 +0000 Manifest this update: Wed 17 Dec 2025 02:41:00 +0000 Manifest next update: Wed 24 Dec 2025 02:41:00 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: VNYB5MQaOXI3JeBQe7oGyyj4dwo3Pug/2ejqxpbK8l4=) 2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: v3dChgnA84SfDYgqRC2E+QVbu8keAWHj6W+tTQnPlbw=) 3: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: HG1f/f+5SFm8izuIB1/hs3U0LoMscjbV7+BezDm08/8=) 4: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: 8qXcxCRSjyOP/oKs9vNyiIBs05KSJRouDgmhdgT6x8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 02:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Dec 17 02:41:00 2025 GMT Not After : Dec 24 02:41:00 2025 GMT Subject: CN=6942183d-db98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:8f:c2:95:de:5f:a4:0d:87:c3:88:0c:ab: 7f:59:5f:12:f2:db:81:1c:6c:e1:4c:c2:15:7c:12: 29:4c:0d:7d:75:b2:d7:49:59:7b:ce:ea:00:a5:4d: 0e:99:cf:83:6f:0d:19:f8:08:9c:ad:3b:6d:4a:dc: 44:52:38:67:40:8f:e9:ef:ea:e9:b6:e3:d6:32:45: a3:82:46:e1:47:95:2e:c2:6b:20:bf:93:43:e0:18: 01:72:3b:61:73:a5:a3:c4:80:81:ac:9f:fc:71:bd: cb:fd:50:e9:c3:13:d9:56:99:2b:73:e6:29:aa:95: 9f:ef:1d:d0:f3:e2:b5:00:d8:48:60:59:2e:43:11: 13:1f:4e:05:a8:64:7d:f3:b0:7b:bc:56:08:1f:16: af:36:bb:f7:30:ed:c1:31:a3:5c:b8:c4:6b:2b:06: 2a:e4:7a:3c:75:03:f5:80:1a:dd:19:64:3c:ca:46: cd:c3:24:13:00:07:d2:a7:18:55:ef:0e:15:50:62: 44:e5:2c:19:df:5b:41:d8:55:91:b1:9b:71:f2:93: 2e:38:5b:7c:81:b0:83:0b:03:e2:2e:9b:61:e4:0a: 5b:0f:9c:ef:e2:8e:ee:05:a8:5b:e9:0c:3c:02:dd: 6d:ec:e7:c1:94:ac:cf:89:b4:1a:de:5b:f1:5d:26: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:28:87:CA:56:34:65:8D:80:E8:83:8A:B6:AF:FF:1D:27:F3:71:3F X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d3:50:ff:e3:9c:60:cf:7c:39:3d:37:82:19:d2:61:e0:78: 07:74:ec:c4:04:b0:26:97:ac:e6:f6:6b:ba:03:a8:22:05:68: 3c:f7:59:25:c0:cf:d3:60:ab:ed:45:3b:18:00:51:a7:55:8d: 99:8c:17:d9:9a:ec:d7:cf:e8:44:a6:58:25:ec:bf:87:d5:d4: 77:2b:3d:5a:38:0d:2d:04:ef:0a:23:e3:d2:d4:21:ac:fc:84: 85:a7:30:e4:6a:1f:3a:18:9a:55:ff:a1:ba:f8:10:19:09:89: f1:b8:ed:dc:a0:ba:23:40:b8:f9:5d:32:02:bb:b9:e6:e0:f0: c8:59:40:45:96:82:97:40:e3:29:ef:66:0f:49:b4:59:d0:ec: d0:bf:20:2a:e9:18:a0:3f:b1:5f:50:cb:dc:8e:ed:c5:db:97: b1:40:7f:77:51:78:64:29:4e:22:ac:31:4c:64:93:01:30:88: 06:22:12:06:d0:07:be:d7:1c:dd:fd:4b:fb:46:99:5a:40:00: fa:2c:fa:e4:56:0d:95:7e:cf:56:dd:b1:7f:a1:4e:1a:c0:5b: 71:01:14:97:6d:6a:78:98:c9:b6:75:71:e6:1b:a9:3d:50:d0: b6:fc:c5:c3:0c:41:b6:8c:cd:cf:5d:f3:b5:c5:8d:d5:5d:c6: 32:cb:cb:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUxMjE3MDI0MTAwWhcNMjUxMjI0MDI0MTAwWjAYMRYwFAYD VQQDDA02OTQyMTgzZC1kYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+mPwpXeX6QNh8OIDKt/WV8S8tuBHGzhTMIVfBIpTA19dbLXSVl7zuoApU0O mc+Dbw0Z+AicrTttStxEUjhnQI/p7+rptuPWMkWjgkbhR5Uuwmsgv5ND4BgBcjth c6WjxICBrJ/8cb3L/VDpwxPZVpkrc+YpqpWf7x3Q8+K1ANhIYFkuQxETH04FqGR9 87B7vFYIHxavNrv3MO3BMaNcuMRrKwYq5Ho8dQP1gBrdGWQ8ykbNwyQTAAfSpxhV 7w4VUGJE5SwZ31tB2FWRsZtx8pMuOFt8gbCDCwPiLpth5ApbD5zv4o7uBahb6Qw8 At1t7OfBlKzPibQa3lvxXSaOhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUoh8pW NGWNgOiDirav/x0n83E/MB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu01D/45xgz3w5PTeCGdJh4HgHdOzEBLAml6zm9mu6A6giBWg891kl wM/TYKvtRTsYAFGnVY2ZjBfZmuzXz+hEplgl7L+H1dR3Kz1aOA0tBO8KI+PS1CGs /ISFpzDkah86GJpV/6G6+BAZCYnxuO3coLojQLj5XTICu7nm4PDIWUBFloKXQOMp 72YPSbRZ0OzQvyAq6RigP7FfUMvcju3F25exQH93UXhkKU4irDFMZJMBMIgGIhIG 0Ae+1xzd/Uv7RplaQAD6LPrkVg2Vfs9W3bF/oU4awFtxARSXbWp4mMm2dXHmG6k9 UNC2/MXDDEG2jM3PXfO1xY3VXcYyy8uH -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:19 2025 by rpki-client