This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: Lm65O8u3HYTPIxIyOlvIIEOGhOSowx32AuO8C9JERnw= Subject key identifier: 93:66:2E:E5:4B:28:66:4A:DA:51:9C:31:DE:CE:96:39:09:D3:8F:D2 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 08DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0A28 Signing time: Sat 06 Dec 2025 19:35:19 +0000 Manifest this update: Sat 06 Dec 2025 19:35:18 +0000 Manifest next update: Sat 13 Dec 2025 19:35:18 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: 22BSlHYfOn829iD3GoikvdUAGujpQU/5pIhYK5r693I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Dec 6 19:35:18 2025 GMT Not After : Dec 13 19:35:18 2025 GMT Subject: CN=69348577-96fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:58:58:f8:fa:46:13:ee:1d:3b:1b:e5:8b: b3:2e:b4:b2:e9:a3:d8:46:38:d1:6a:68:05:de:41: 80:90:78:b9:6c:1c:f7:bb:db:26:21:25:bf:ab:46: 0a:92:68:c1:2c:86:57:b9:bc:33:03:bd:ed:ca:91: dd:4b:99:2f:d9:9b:c5:03:85:47:57:8c:55:85:09: d9:53:24:be:78:be:67:5e:fe:b3:e3:57:b3:25:9e: 3b:33:e5:c7:2c:f1:15:52:1d:2f:81:60:36:b6:56: 15:83:b1:9a:33:07:34:f6:55:88:65:3d:05:88:29: 21:e2:c1:cb:27:4c:7d:5b:e6:27:90:4b:be:b5:84: b1:44:0b:63:80:3b:21:de:4b:25:9c:89:17:31:3b: 99:fc:2f:3f:ea:59:01:35:25:de:2e:97:3a:a9:39: 94:25:fa:46:51:05:df:a8:cf:97:51:06:1c:24:e6: 1f:6b:99:37:6c:2c:5d:b8:c0:6e:c4:5e:3e:ce:f3: 41:73:35:5c:49:5f:9e:f4:f0:34:a8:ac:03:39:bb: 06:87:27:6e:25:fa:70:7b:a6:13:2c:4b:ad:70:e2: b7:19:d8:b3:1d:06:a3:d5:7c:b8:5f:64:14:0d:c2: 58:a0:1d:6c:cb:29:b0:e2:ae:01:c0:1e:02:fe:ae: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:66:2E:E5:4B:28:66:4A:DA:51:9C:31:DE:CE:96:39:09:D3:8F:D2 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:8c:41:5c:21:fb:06:53:d4:84:e9:fb:24:19:d3:a6:8d:2a: f4:e7:c0:1b:19:20:fa:c7:1f:4c:df:61:7b:b4:b4:d0:ac:92: 50:42:d1:8a:4a:ff:7a:99:cb:0e:27:a6:42:f9:38:d7:78:2a: d7:c1:d0:45:5f:48:3b:b5:64:17:0f:53:06:7c:e7:4c:65:1f: d1:25:94:45:16:06:f8:8d:9f:80:3e:5b:dc:5f:a7:a4:06:41: 68:c4:83:9d:c6:51:04:6f:37:32:9e:a1:0a:e3:2a:9f:4f:7d: 1e:d4:f2:2f:7c:cc:48:c0:24:59:3c:7c:ea:09:64:26:7b:8a: bb:b1:a9:15:c3:3f:0f:1a:30:55:89:5e:84:02:29:87:95:5e: a8:d8:2e:06:04:46:ba:eb:c1:5f:50:74:b3:bf:36:10:a4:be: be:df:d3:c9:a8:d6:b5:3e:c2:06:32:4e:12:95:d7:42:5e:7c: 06:3e:5e:f8:59:c7:20:2a:7c:b4:c8:98:e3:28:34:45:4e:2d: 65:11:22:a0:6f:49:59:1e:02:c1:c1:d0:ae:e4:e7:ed:5f:91: c0:b9:e5:65:20:14:6b:67:f6:b7:e1:f6:e2:d4:94:2e:16:8b: 78:76:b8:c5:d1:2d:94:17:f5:39:28:a4:7b:84:7c:af:44:c6: fa:93:ad:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUxMjA2MTkzNTE4WhcNMjUxMjEzMTkzNTE4WjAYMRYwFAYD VQQDEw02OTM0ODU3Ny05NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/9YWPj6RhPuHTsb5YuzLrSy6aPYRjjRamgF3kGAkHi5bBz3u9smISW/q0YK kmjBLIZXubwzA73typHdS5kv2ZvFA4VHV4xVhQnZUyS+eL5nXv6z41ezJZ47M+XH LPEVUh0vgWA2tlYVg7GaMwc09lWIZT0FiCkh4sHLJ0x9W+YnkEu+tYSxRAtjgDsh 3kslnIkXMTuZ/C8/6lkBNSXeLpc6qTmUJfpGUQXfqM+XUQYcJOYfa5k3bCxduMBu xF4+zvNBczVcSV+e9PA0qKwDObsGhyduJfpwe6YTLEutcOK3GdizHQaj1Xy4X2QU DcJYoB1syymw4q4BwB4C/q796wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNmLuVL KGZK2lGcMd7OljkJ04/SMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGjEFcIfsGU9SE6fskGdOmjSr058AbGSD6xx9M32F7tLTQrJJQQtGK Sv96mcsOJ6ZC+TjXeCrXwdBFX0g7tWQXD1MGfOdMZR/RJZRFFgb4jZ+APlvcX6ek BkFoxIOdxlEEbzcynqEK4yqfT30e1PIvfMxIwCRZPHzqCWQme4q7sakVwz8PGjBV iV6EAimHlV6o2C4GBEa668FfUHSzvzYQpL6+39PJqNa1PsIGMk4SlddCXnwGPl74 WccgKny0yJjjKDRFTi1lESKgb0lZHgLBwdCu5OftX5HAueVlIBRrZ/a34fbi1JQu Fot4drjF0S2UF/U5KKR7hHyvRMb6k60K -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:51 2025 by rpki-client