This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: 9l8HJkI4XBqc4keS9+kBGBWF8471Ql3PbHAaomYxQlg= Subject key identifier: 9E:AD:A4:1D:35:C1:76:B5:DE:E4:60:FB:D8:66:28:75:93:95:75:86 Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0AA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 11F4 Signing time: Sat 06 Dec 2025 18:46:40 +0000 Manifest this update: Sat 06 Dec 2025 18:46:40 +0000 Manifest next update: Sat 13 Dec 2025 18:46:40 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: x4O7i3EvPH8uhK7+HByduw+TEEHobpSOwIo2KveK5LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: Dec 6 18:46:40 2025 GMT Not After : Dec 13 18:46:40 2025 GMT Subject: CN=69347a10-bbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:0b:7e:5c:44:ed:f7:b6:fc:f1:c9:79:ed: d8:05:97:0f:d0:8e:0d:c3:d7:9c:3f:27:27:97:fb: 98:e9:a8:b6:37:d0:e2:23:a3:a0:0b:f2:11:fb:b6: d4:92:b5:c8:93:be:64:18:ab:52:77:d4:6d:e0:bd: 29:4b:95:40:af:20:7a:6f:8d:c0:f5:6b:11:c2:f3: c5:c3:2f:61:c9:bd:9b:72:ec:12:10:7a:bd:c1:90: 46:13:9b:43:b8:bd:73:5d:05:c4:54:ec:c7:47:14: 83:9e:74:34:69:ef:f3:3a:c9:3e:cf:01:48:60:be: 4a:b8:19:e4:a6:b4:57:d6:7a:39:f1:13:a4:dd:ce: 0c:6d:80:78:fc:ec:c0:88:25:cc:7f:77:9f:b5:e2: 28:16:a9:d5:dc:b5:e4:e8:36:3b:a8:83:e2:3e:8a: 67:5a:cd:05:5a:7c:7a:55:b9:68:ee:42:3e:12:a5: a8:89:0d:c1:75:7f:74:38:cc:ff:c5:f6:84:0f:ab: 9d:b4:90:fd:6e:5f:36:f9:45:c5:e4:07:e2:1d:87: 69:58:ea:55:50:91:6d:77:10:47:f5:3e:6e:88:67: f8:bb:5c:22:02:d1:40:2a:25:f5:37:d4:bb:c8:ab: de:0a:c6:13:02:51:d6:83:9e:ef:de:7a:90:bb:46: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AD:A4:1D:35:C1:76:B5:DE:E4:60:FB:D8:66:28:75:93:95:75:86 X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:67:4a:2b:46:37:23:52:16:8f:89:50:cb:66:0e:08:92:51: 21:d6:d8:64:da:ba:56:c0:63:a4:79:7c:1b:41:db:da:4f:59: 65:d0:3b:da:b8:25:3d:7c:0d:ce:e0:95:e3:d6:c3:3f:93:53: e9:8b:c6:db:ce:a3:bb:11:59:14:fb:12:38:e9:cf:b1:b7:9d: 90:48:44:1e:7b:ff:88:d1:0f:4c:c7:7f:8c:16:9d:bb:6a:e4: 8d:07:90:a6:61:ec:5b:5b:36:75:3f:a5:ac:3d:38:f4:7b:28: 29:19:45:c2:41:ef:a6:d3:38:88:47:ed:c6:eb:d2:b7:cb:3f: fc:a6:93:82:00:da:3c:7b:31:7b:03:3d:eb:c6:ba:89:92:83: af:17:ff:01:f9:77:97:d0:ea:33:39:7f:ae:8e:db:21:fd:62: a9:0f:33:ef:bc:e4:d6:72:3d:0d:65:6d:86:a6:02:49:8a:8b: a5:bc:1f:5a:6b:80:86:7a:1c:43:30:ac:bb:ba:22:60:a6:7d: 2c:f5:e1:d8:ac:4c:56:b3:f8:15:04:2b:3a:cb:3d:59:dc:b8: 92:27:b2:06:db:fb:cf:c5:b5:bf:15:91:c4:21:06:57:f6:0a: e7:e3:83:6c:36:53:a5:e8:0f:02:c3:ee:ad:44:69:ff:c1:d7: cb:22:1a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjUxMjA2MTg0NjQwWhcNMjUxMjEzMTg0NjQwWjAYMRYwFAYD VQQDEw02OTM0N2ExMC1iYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1sLflxE7fe2/PHJee3YBZcP0I4Nw9ecPycnl/uY6ai2N9DiI6OgC/IR+7bU krXIk75kGKtSd9Rt4L0pS5VAryB6b43A9WsRwvPFwy9hyb2bcuwSEHq9wZBGE5tD uL1zXQXEVOzHRxSDnnQ0ae/zOsk+zwFIYL5KuBnkprRX1no58ROk3c4MbYB4/OzA iCXMf3efteIoFqnV3LXk6DY7qIPiPopnWs0FWnx6Vblo7kI+EqWoiQ3BdX90OMz/ xfaED6udtJD9bl82+UXF5AfiHYdpWOpVUJFtdxBH9T5uiGf4u1wiAtFAKiX1N9S7 yKveCsYTAlHWg57v3nqQu0bUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6tpB01 wXa13uRg+9hmKHWTlXWGMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaZ0orRjcjUhaPiVDLZg4IklEh1thk2rpWwGOkeXwbQdvaT1ll0Dva uCU9fA3O4JXj1sM/k1Ppi8bbzqO7EVkU+xI46c+xt52QSEQee/+I0Q9Mx3+MFp27 auSNB5CmYexbWzZ1P6WsPTj0eygpGUXCQe+m0ziIR+3G69K3yz/8ppOCANo8ezF7 Az3rxrqJkoOvF/8B+XeX0OozOX+ujtsh/WKpDzPvvOTWcj0NZW2GpgJJioulvB9a a4CGehxDMKy7uiJgpn0s9eHYrExWs/gVBCs6yz1Z3LiSJ7IG2/vPxbW/FZHEIQZX 9grn44NsNlOl6A8Cw+6tRGn/wdfLIhqs -----END CERTIFICATE-----Generated at Sun Dec 7 02:42:44 2025 by rpki-client