This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: WUlNGwaw/5nnetyDmVPg3lvQL4m9GcMwB5rDl7AjiV4= Subject key identifier: 29:EB:92:AD:9B:1A:47:57:E7:FE:2F:99:0D:14:62:63:FA:C6:E9:35 Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 040C Signing time: Thu 04 Dec 2025 22:54:09 +0000 Manifest this update: Thu 04 Dec 2025 22:54:07 +0000 Manifest next update: Thu 11 Dec 2025 22:54:07 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: 9EGgoZxknE/iHXW4VU2IAHbInARVcjG3gyKQWI5C1JQ=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Dec 4 22:54:07 2025 GMT Not After : Dec 11 22:54:07 2025 GMT Subject: CN=6932110f-74fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:72:db:1c:20:d3:6a:b5:7e:0a:10:f5:45: 92:b8:b9:39:ec:16:71:e5:37:e0:b2:e6:0d:a4:38: 08:9e:04:7d:4c:94:62:73:15:ad:81:6d:1e:d5:78: 44:ad:32:18:c6:65:82:50:8a:41:fc:0a:06:e6:b2: d3:d4:47:ad:63:b8:69:e5:1c:03:a7:e7:a6:d2:2b: 81:99:82:d7:8e:de:56:8e:73:4e:5a:87:bf:07:5b: a8:0e:81:cc:15:c7:e1:ac:32:6c:2e:58:c9:cc:71: 38:3d:5d:b5:9a:8e:ac:db:38:1f:88:0e:5b:f6:2a: bf:92:54:d2:d8:24:54:1f:34:60:03:30:7e:7a:22: 86:c3:2b:a8:2a:94:77:b1:c3:69:9f:5e:6a:42:99: 2c:c6:10:c2:08:be:0d:4d:30:cb:8c:a2:90:ff:a5: 7b:e0:fe:4d:e5:52:75:1e:30:21:d1:01:3c:06:c7: 9b:5b:6e:e8:20:76:1b:a8:43:63:e1:fd:a9:b1:cb: 20:c1:4e:4f:ab:1f:61:1c:ba:e2:d4:2a:c7:32:d6: 59:a2:93:36:87:a1:4e:17:ef:a8:a4:79:37:b7:e7: 24:c7:84:9e:b1:45:3e:ae:07:2d:4b:34:5a:30:8b: 70:ca:6b:ff:f2:ae:22:20:a9:12:85:6e:5c:92:95: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:92:AD:9B:1A:47:57:E7:FE:2F:99:0D:14:62:63:FA:C6:E9:35 X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d7:e0:cc:dd:cb:82:63:57:d0:c4:fc:cd:d7:cc:e0:60:33: 9b:5a:04:64:c2:61:74:4f:c2:10:77:b0:93:27:06:45:aa:98: 5d:bf:8c:08:a2:9c:e2:12:ec:f2:6a:81:fa:cd:bc:bc:65:da: 91:4d:6b:b1:10:9c:7c:74:68:2a:4a:7c:1a:f5:5a:38:b8:8d: d3:c6:b3:d4:df:cd:15:bc:15:ca:8f:34:52:2a:71:0f:1a:17: b0:61:40:47:72:63:59:4a:53:b9:b8:e2:74:27:01:d7:fb:3f: d1:35:6a:bb:d7:1a:fe:94:17:8c:93:30:5b:69:a7:53:81:fd: 51:bd:9b:81:c9:95:e4:2a:e4:85:2e:1c:b6:76:16:de:5e:1f: 31:1e:15:cb:77:57:5d:6d:02:53:d7:fd:57:8c:96:86:38:8d: 11:46:a3:37:f9:77:b4:a6:5e:fc:fb:14:04:a0:cd:05:69:af: 94:77:28:23:93:19:ba:74:0c:b3:f0:66:be:49:c6:aa:46:6a: ff:e0:b8:7f:20:3e:30:e3:a2:bf:b9:fc:ae:13:61:0a:b6:e2: 8c:86:7c:24:03:db:37:e8:5d:4f:99:87:38:f8:93:0a:d1:78: df:b7:52:d2:70:b6:38:3b:89:93:38:ea:b8:88:9a:b5:05:45: 43:de:c7:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUxMjA0MjI1NDA3WhcNMjUxMjExMjI1NDA3WjAYMRYwFAYD VQQDEw02OTMyMTEwZi03NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcpy2xwg02q1fgoQ9UWSuLk57BZx5TfgsuYNpDgIngR9TJRicxWtgW0e1XhE rTIYxmWCUIpB/AoG5rLT1EetY7hp5RwDp+em0iuBmYLXjt5WjnNOWoe/B1uoDoHM FcfhrDJsLljJzHE4PV21mo6s2zgfiA5b9iq/klTS2CRUHzRgAzB+eiKGwyuoKpR3 scNpn15qQpksxhDCCL4NTTDLjKKQ/6V74P5N5VJ1HjAh0QE8BsebW27oIHYbqENj 4f2pscsgwU5Pqx9hHLri1CrHMtZZopM2h6FOF++opHk3t+ckx4SesUU+rgctSzRa MItwymv/8q4iIKkShW5ckpUp+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnrkq2b GkdX5/4vmQ0UYmP6xuk1MB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA71+DM3cuCY1fQxPzN18zgYDObWgRkwmF0T8IQd7CTJwZFqphdv4wI opziEuzyaoH6zby8ZdqRTWuxEJx8dGgqSnwa9Vo4uI3TxrPU380VvBXKjzRSKnEP GhewYUBHcmNZSlO5uOJ0JwHX+z/RNWq71xr+lBeMkzBbaadTgf1RvZuByZXkKuSF Lhy2dhbeXh8xHhXLd1ddbQJT1/1XjJaGOI0RRqM3+Xe0pl78+xQEoM0Faa+Udygj kxm6dAyz8Ga+ScaqRmr/4Lh/ID4w46K/ufyuE2EKtuKMhnwkA9s36F1PmYc4+JMK 0Xjft1LScLY4O4mTOOq4iJq1BUVD3sfH -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:14 2025 by rpki-client