This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: jYyKiCCBYc/B/E0ijfOyg4+lL4OD6iUF0ZBKPdQfhjg= Subject key identifier: 57:78:2E:42:85:9B:13:D3:33:0C:32:7C:5A:95:FD:93:DE:CE:2A:22 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C84 Signing time: Thu 04 Dec 2025 17:53:59 +0000 Manifest this update: Thu 04 Dec 2025 17:53:58 +0000 Manifest next update: Thu 11 Dec 2025 17:53:58 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: stkjdv8AxmaIjNN15cKSemSwCPdVnJZzc0XqGNKvBbQ=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Dec 4 17:53:58 2025 GMT Not After : Dec 11 17:53:58 2025 GMT Subject: CN=6931cab6-99a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:36:0a:55:2c:97:2c:c9:8e:d5:8b:d7:71: 80:83:2d:9a:f5:65:43:f9:46:84:c8:f7:d3:48:70: ce:08:57:34:c7:1b:08:9e:ad:c5:2b:72:c8:fd:e9: c0:f8:30:04:d4:1a:c3:44:b4:e8:c1:ee:a3:1e:96: c4:9e:74:84:65:8b:ff:63:67:b2:a9:45:9c:f5:55: e8:38:d3:40:a7:07:10:e5:70:a8:35:b9:44:0b:f5: ec:07:bb:3c:ed:35:7b:7f:d1:bc:2d:f1:bc:0c:1a: c0:57:db:35:5f:10:6b:5d:fb:99:7b:75:98:ce:a9: 22:b5:25:82:ce:7a:c5:be:8e:9d:a0:8e:0d:c7:61: ca:78:42:81:5e:40:99:d6:7d:34:41:0b:ef:04:db: 7b:41:be:2b:41:93:4e:46:16:83:0a:94:f0:48:25: 29:f3:64:6c:e8:84:05:93:f3:29:55:65:30:fc:b5: f0:8b:77:ed:55:20:3a:ae:eb:dc:1d:6e:23:23:19: 49:d4:97:27:6c:c7:f1:5f:98:ce:90:19:90:d8:c9: cc:71:ff:18:c7:4e:75:5c:6e:39:51:9e:7a:5d:e9: 0a:0d:db:54:50:62:9e:7e:98:6f:55:c1:ec:31:8a: d8:9e:b4:4b:6c:e3:fe:88:9c:eb:11:e1:7e:c7:25: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:78:2E:42:85:9B:13:D3:33:0C:32:7C:5A:95:FD:93:DE:CE:2A:22 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:91:ae:ea:ec:4a:bf:b4:0e:eb:e2:4a:34:63:1f:90:4b:b4: 12:18:90:41:ee:d7:4a:20:45:73:27:eb:43:64:e0:5e:22:b6: 5b:ea:e8:1c:3a:64:3c:0c:26:ec:dd:f1:ba:2c:43:e6:ad:ef: 56:68:76:2e:56:31:c8:dc:7e:8a:81:aa:d7:39:35:69:70:29: fe:15:fb:27:01:90:84:97:a7:a3:16:60:98:1e:86:86:d8:ec: 99:1d:92:57:96:b7:c6:47:f6:49:bd:3f:ec:29:d3:ac:40:6a: 58:49:95:1a:35:b3:d7:95:c1:75:64:20:61:46:23:12:68:ef: 40:46:e6:51:6a:cc:1a:c5:89:9a:97:a7:45:8d:aa:92:c7:d0: ed:0e:51:ba:34:75:0d:fb:53:82:2d:3b:7d:22:c5:b1:60:80: 08:54:70:1b:07:3e:e3:be:b7:3e:c9:17:a3:c8:f9:42:47:98: 6a:38:a3:57:59:84:42:08:8b:38:16:2d:61:b8:a7:ec:7e:7c: 5c:79:17:6b:e8:46:a9:dd:a4:1a:82:b0:33:4e:10:e7:00:1a: f4:ed:a8:2d:01:e3:7b:01:af:a3:94:df:9d:3b:3e:d2:d6:87: bb:52:da:e0:2a:4b:25:9c:7d:e3:27:48:55:f2:b5:7c:f7:7b: d0:d7:79:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUxMjA0MTc1MzU4WhcNMjUxMjExMTc1MzU4WjAYMRYwFAYD VQQDEw02OTMxY2FiNi05OWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtF82ClUslyzJjtWL13GAgy2a9WVD+UaEyPfTSHDOCFc0xxsInq3FK3LI/enA +DAE1BrDRLTowe6jHpbEnnSEZYv/Y2eyqUWc9VXoONNApwcQ5XCoNblEC/XsB7s8 7TV7f9G8LfG8DBrAV9s1XxBrXfuZe3WYzqkitSWCznrFvo6doI4Nx2HKeEKBXkCZ 1n00QQvvBNt7Qb4rQZNORhaDCpTwSCUp82Rs6IQFk/MpVWUw/LXwi3ftVSA6ruvc HW4jIxlJ1JcnbMfxX5jOkBmQ2MnMcf8Yx051XG45UZ56XekKDdtUUGKefphvVcHs MYrYnrRLbOP+iJzrEeF+xyXfNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd4LkKF mxPTMwwyfFqV/ZPezioiMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/ka7q7Eq/tA7r4ko0Yx+QS7QSGJBB7tdKIEVzJ+tDZOBeIrZb6ugc OmQ8DCbs3fG6LEPmre9WaHYuVjHI3H6KgarXOTVpcCn+FfsnAZCEl6ejFmCYHoaG 2OyZHZJXlrfGR/ZJvT/sKdOsQGpYSZUaNbPXlcF1ZCBhRiMSaO9ARuZRaswaxYma l6dFjaqSx9DtDlG6NHUN+1OCLTt9IsWxYIAIVHAbBz7jvrc+yRejyPlCR5hqOKNX WYRCCIs4Fi1huKfsfnxceRdr6Eap3aQagrAzThDnABr07agtAeN7Aa+jlN+dOz7S 1oe7UtrgKkslnH3jJ0hV8rV893vQ13n9 -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:16 2025 by rpki-client