This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: FysKjCGfTxnXvnujocGbixfk/njAL98P2XK+mMsctWU= Subject key identifier: A8:A9:47:0B:C2:EF:D7:41:8E:8C:12:6F:EF:1B:FE:CF:14:0B:69:E5 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: D9 Signing time: Fri 05 Dec 2025 03:36:43 +0000 Manifest this update: Fri 05 Dec 2025 03:36:43 +0000 Manifest next update: Fri 12 Dec 2025 03:36:43 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: KEl+Cv4Auq+UDnX1Dk1aS5mSnZ1098tXvocg0AWsor0=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: svxCNz/PtUeVtTEkfJI0UGnsP9Tbd78MIluuCyhiaVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Dec 5 03:36:43 2025 GMT Not After : Dec 12 03:36:43 2025 GMT Subject: CN=6932534b-bd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:9d:0c:dd:29:4c:d9:c6:38:31:2d:a6:8f: d7:83:6c:65:3f:1e:3d:73:93:86:92:f3:78:03:98: e4:0f:e8:83:0f:05:52:9f:6d:70:49:be:19:a1:6d: 16:46:f2:13:f1:09:46:07:f2:59:69:fa:2c:57:63: a2:78:c9:b9:cd:aa:44:f5:b9:cc:1d:3e:ca:d8:3c: 40:28:91:a6:3b:ec:84:66:f8:13:70:51:61:9e:e0: 38:f2:2e:71:13:a7:bc:c1:24:97:05:13:e5:6d:81: 84:9c:2a:ce:fb:a9:28:fe:21:0e:1f:db:f0:47:7b: 86:9d:c5:32:45:c0:ad:37:08:0e:59:cd:bf:02:ed: ea:1e:4c:10:91:32:cb:2d:51:1e:39:77:bb:d9:c2: 64:15:fb:88:fb:f4:2d:b7:3b:ef:d3:bf:d3:b8:69: e7:7a:af:5c:39:07:c7:91:96:16:d1:b6:7c:64:97: 04:2a:7b:67:24:0d:d8:d1:44:24:71:6e:3d:40:4d: 20:89:ea:2c:42:13:3a:1d:eb:fc:cc:32:21:45:4a: 95:e0:ca:58:58:9f:4f:ae:ec:54:64:6a:43:18:d5: 00:8b:bb:8e:18:2a:25:14:b6:71:2d:96:2e:7c:c4: be:06:21:91:f6:ca:71:7f:50:27:ff:66:be:14:3e: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A9:47:0B:C2:EF:D7:41:8E:8C:12:6F:EF:1B:FE:CF:14:0B:69:E5 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e7:20:01:3d:31:70:90:16:a3:82:a8:82:69:80:a2:d2:dd: 1e:73:06:1a:22:97:74:80:d2:0b:fb:d4:c0:2c:b1:de:cc:9b: 5d:ce:76:ec:50:d3:d5:07:d2:37:d3:0a:5e:46:ea:a7:c7:04: fa:6f:45:d9:2b:16:53:e4:61:80:0e:96:b1:c5:97:ef:5f:e4: 0f:ee:1d:d5:cd:f2:30:71:33:26:24:96:f9:e1:01:db:b0:6c: 61:23:5e:1d:f0:bd:77:f6:14:f7:b6:e4:1e:98:cc:54:7b:a8: 71:ff:ba:40:25:8f:74:c8:b8:c0:55:37:94:ef:0c:28:58:89: ce:e6:0b:1d:9d:fa:06:27:61:35:0e:77:0d:02:ff:39:3c:58: 29:a0:9f:c7:63:30:a2:c2:8f:d6:85:76:8d:0c:78:96:d1:5b: 40:6d:23:51:0f:6b:b0:55:66:1b:55:10:d5:42:b3:55:b4:0e: f6:c4:b8:7d:98:29:0a:13:71:67:8f:34:8f:78:cf:51:c5:52: 65:6a:c1:15:71:46:99:6e:a8:b4:c7:5e:8d:61:ae:d9:c6:92: a7:a5:01:49:99:b9:1c:d0:0d:52:38:84:f0:84:59:31:ec:89: d0:fa:45:43:18:5b:ee:ce:aa:37:e2:76:4d:1b:72:8a:fb:8b: 3b:bf:8e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjUxMjA1MDMzNjQzWhcNMjUxMjEyMDMzNjQzWjAYMRYwFAYD VQQDEw02OTMyNTM0Yi1iZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp76dDN0pTNnGODEtpo/Xg2xlPx49c5OGkvN4A5jkD+iDDwVSn21wSb4ZoW0W RvIT8QlGB/JZafosV2OieMm5zapE9bnMHT7K2DxAKJGmO+yEZvgTcFFhnuA48i5x E6e8wSSXBRPlbYGEnCrO+6ko/iEOH9vwR3uGncUyRcCtNwgOWc2/Au3qHkwQkTLL LVEeOXe72cJkFfuI+/Qttzvv07/TuGnneq9cOQfHkZYW0bZ8ZJcEKntnJA3Y0UQk cW49QE0gieosQhM6Hev8zDIhRUqV4MpYWJ9PruxUZGpDGNUAi7uOGColFLZxLZYu fMS+BiGR9spxf1An/2a+FD7WCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKipRwvC 79dBjowSb+8b/s8UC2nlMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj5yABPTFwkBajgqiCaYCi0t0ecwYaIpd0gNIL+9TALLHezJtdznbs UNPVB9I30wpeRuqnxwT6b0XZKxZT5GGADpaxxZfvX+QP7h3VzfIwcTMmJJb54QHb sGxhI14d8L139hT3tuQemMxUe6hx/7pAJY90yLjAVTeU7wwoWInO5gsdnfoGJ2E1 DncNAv85PFgpoJ/HYzCiwo/WhXaNDHiW0VtAbSNRD2uwVWYbVRDVQrNVtA72xLh9 mCkKE3FnjzSPeM9RxVJlasEVcUaZbqi0x16NYa7ZxpKnpQFJmbkc0A1SOITwhFkx 7InQ+kVDGFvuzqo34nZNG3KK+4s7v46j -----END CERTIFICATE-----Generated at Sat Dec 6 17:44:29 2025 by rpki-client