This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: HRECXBhIi8hX+77/MeVlEdgiwDGFpJIq8VL+Vv6S8Rs= Subject key identifier: EE:09:CF:4D:7E:BF:71:79:32:75:84:0E:FC:23:86:33:4A:E6:58:96 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 351E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 3509 Signing time: Sat 06 Dec 2025 14:38:03 +0000 Manifest this update: Sat 06 Dec 2025 14:38:02 +0000 Manifest next update: Sat 13 Dec 2025 14:38:02 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: QXNIurRXt9JNWMEikneubLICPAptk+W9iIVRezfY5hg=) 2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: mBi2xBGJz7ABmwG7Kd/FaX5nMMQUKh+oy7XK2XR044o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13598 (0x351e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: Dec 6 14:38:02 2025 GMT Not After : Dec 13 14:38:02 2025 GMT Subject: CN=69343fcb-d4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:66:db:82:f4:0e:e7:f6:52:32:f6:94:f1: 8c:ff:fd:18:63:5a:e2:2a:d2:f8:ef:81:b5:74:de: 8c:1c:11:4f:96:ab:98:ae:fc:6b:eb:38:aa:a8:1c: 19:83:a6:d6:82:03:d7:3c:c0:2c:82:f5:9b:03:ff: d5:0a:62:0a:ef:16:9b:c1:be:6a:40:c2:31:bf:e6: 48:ce:d5:6e:82:b1:9c:f3:a1:83:59:d1:68:7d:35: 69:60:60:e5:33:c5:7c:d8:34:f5:b6:e1:76:16:2f: 00:8b:d1:8e:81:ef:af:f1:4d:e7:f2:a8:7a:6f:aa: d3:f0:50:87:f8:c4:35:cb:4f:d7:99:6a:f1:58:ff: 7c:dc:ce:15:69:8a:e9:c8:1c:e9:38:51:6b:d3:51: c2:e7:e1:40:c5:4e:6b:d3:be:85:41:ce:19:69:ef: c9:74:44:ab:f9:c8:ed:ef:ec:84:7f:52:ac:63:4c: 01:64:a9:d3:1e:5c:df:48:5c:86:9b:59:2a:cc:1c: 85:a6:2d:42:5d:9c:cc:07:b1:af:ef:81:da:87:41: 5b:b2:a3:8c:7e:ec:52:ef:84:89:c8:61:28:2a:3e: 11:30:1e:0e:7e:4d:99:b6:5e:de:1d:58:bd:89:b7: 04:cd:40:43:be:11:3f:d8:26:09:09:2c:c8:d3:7c: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:CF:4D:7E:BF:71:79:32:75:84:0E:FC:23:86:33:4A:E6:58:96 X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cd:f8:e5:1b:4f:7d:68:12:92:79:63:70:96:ad:b4:43:62: 9f:38:76:24:d1:e3:9f:d7:49:d3:76:0b:0d:84:33:d9:ff:ad: cb:b3:a6:c3:15:3a:9e:e1:f8:09:10:45:6d:f7:39:02:3f:83: 08:47:37:88:c1:97:1a:20:85:82:b6:54:e8:44:a7:c6:be:ac: ce:27:aa:4d:25:eb:2a:04:36:7e:b6:7b:6f:9e:40:23:8c:25: e2:50:8e:e9:16:44:32:65:da:86:17:0e:ca:06:7e:8f:e7:64: f2:a3:b5:d2:32:bd:33:21:3c:08:60:3c:32:5b:1e:6f:a7:99: 06:91:c1:90:84:db:a7:3c:06:eb:6b:14:93:32:d5:ce:b0:16: 50:6a:69:96:be:99:57:a1:58:d7:55:a1:67:a1:46:0b:f9:ee: 82:8d:ec:1e:1d:2d:a0:26:91:88:41:79:21:34:f7:cd:9e:78: 2b:1e:36:4f:19:96:b6:86:bb:f3:e1:2d:f8:99:1a:f2:b0:df: 9d:19:28:ff:b9:ee:76:b3:59:c6:35:0c:43:3d:8f:96:92:22: d4:58:33:f1:81:1d:fb:8c:db:8e:2b:1a:90:02:71:f6:c3:e7: 66:8b:d1:a1:43:08:9c:71:e2:87:74:11:60:58:d0:44:3f:2a: 6e:8e:f6:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjUxMjA2MTQzODAyWhcNMjUxMjEzMTQzODAyWjAYMRYwFAYD VQQDEw02OTM0M2ZjYi1kNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08Fm24L0Duf2UjL2lPGM//0YY1riKtL474G1dN6MHBFPlquYrvxr6ziqqBwZ g6bWggPXPMAsgvWbA//VCmIK7xabwb5qQMIxv+ZIztVugrGc86GDWdFofTVpYGDl M8V82DT1tuF2Fi8Ai9GOge+v8U3n8qh6b6rT8FCH+MQ1y0/XmWrxWP983M4VaYrp yBzpOFFr01HC5+FAxU5r076FQc4Zae/JdESr+cjt7+yEf1KsY0wBZKnTHlzfSFyG m1kqzByFpi1CXZzMB7Gv74Hah0FbsqOMfuxS74SJyGEoKj4RMB4Ofk2Ztl7eHVi9 ibcEzUBDvhE/2CYJCSzI03zNlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4Jz01+ v3F5MnWEDvwjhjNK5liWMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+zfjlG099aBKSeWNwlq20Q2KfOHYk0eOf10nTdgsNhDPZ/63Ls6bD FTqe4fgJEEVt9zkCP4MIRzeIwZcaIIWCtlToRKfGvqzOJ6pNJesqBDZ+tntvnkAj jCXiUI7pFkQyZdqGFw7KBn6P52Tyo7XSMr0zITwIYDwyWx5vp5kGkcGQhNunPAbr axSTMtXOsBZQammWvplXoVjXVaFnoUYL+e6CjeweHS2gJpGIQXkhNPfNnngrHjZP GZa2hrvz4S34mRrysN+dGSj/ue52s1nGNQxDPY+WkiLUWDPxgR37jNuOKxqQAnH2 w+dmi9GhQwicceKHdBFgWNBEPypujvYZ -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:25 2025 by rpki-client