This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft File: Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json) Hash identifier: KOiBEiit2AiuxzAGJOeZynAMLktdV6uLj3tTtUyydsk= Subject key identifier: 7D:C4:65:14:81:45:8B:43:9D:4F:EF:9A:D2:80:E0:76:03:F9:7C:66 Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 Certificate issuer: /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft Manifest number: 01AB Signing time: Fri 05 Dec 2025 01:26:14 +0000 Manifest this update: Fri 05 Dec 2025 01:26:14 +0000 Manifest next update: Fri 12 Dec 2025 01:26:14 +0000 Files and hashes: 1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: rlewcw/2pdW5ygH6q0Om8hY5/h50cy4uZX8yTD231NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Validity Not Before: Dec 5 01:26:14 2025 GMT Not After : Dec 12 01:26:14 2025 GMT Subject: CN=693234b6-1deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:f2:30:b3:3a:00:e2:6c:01:38:f1:92:ee: 91:76:c3:fb:00:89:3d:6c:de:c3:b1:fc:5c:19:37: d1:9b:2c:4b:58:cc:d4:92:fe:30:ed:b5:af:53:f6: 97:75:6f:72:53:54:72:0e:48:de:6a:3d:9b:b3:fc: 23:d1:80:58:a6:12:8f:08:06:38:c8:c0:c1:75:ca: 7e:22:90:17:ed:03:a4:93:c8:91:e3:4b:d9:70:7b: 07:75:6b:12:c5:4a:ec:91:e5:54:12:1d:5e:07:fc: 2f:b5:34:a8:ba:a0:36:be:57:de:2c:a9:ca:36:2d: 52:e3:ec:f1:1b:1d:1e:58:97:4a:2b:ce:e9:0d:b4: 19:4e:74:75:b4:b5:20:3b:20:1b:30:75:68:5b:b8: 23:3a:2f:b1:96:16:18:05:35:82:1a:b1:bd:fd:15: 29:0f:4a:b4:1a:78:2e:2b:48:a4:10:30:fd:f6:a6: bc:cf:79:a9:4d:a8:d9:5f:d6:fb:53:72:94:0a:ff: 59:32:3e:d3:35:9e:17:e6:a9:1e:e9:5b:d8:ea:c4: 69:8e:c3:68:33:1c:74:2f:cf:fa:a6:44:90:d2:cc: 39:e2:c5:87:bf:20:01:9f:28:5b:9c:17:5f:cc:30: 58:bd:f9:7f:7f:50:0f:2c:c6:94:9b:1d:25:a5:5e: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C4:65:14:81:45:8B:43:9D:4F:EF:9A:D2:80:E0:76:03:F9:7C:66 X509v3 Authority Key Identifier: keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:15:a3:4c:39:b0:6a:92:26:26:a7:64:03:a8:41:9c:af:a3: a2:a2:79:97:3e:a8:3b:ea:07:3c:ac:93:f8:9f:93:f0:2d:5f: e5:c5:fe:f3:44:1c:ac:08:2c:8e:ff:43:57:ad:52:94:ea:db: df:07:ef:df:3d:79:40:2c:3c:c1:79:9f:44:3b:b1:77:27:ec: 40:1d:ea:dd:a6:f8:bb:29:4c:7b:ee:52:1c:6f:ac:e8:d1:e2: d8:ab:52:1d:c8:5f:1a:0e:e2:92:60:55:fb:4e:b6:9a:b2:8b: d1:ca:cb:b7:ae:00:5b:3d:f9:13:e6:04:1b:ba:1a:ef:22:36: 3f:57:90:c1:19:4a:ff:3d:61:11:75:41:31:c8:23:76:bd:87: 74:75:28:78:ea:e0:f1:07:01:d4:43:38:c4:45:76:79:79:24: 81:67:e9:ca:3a:cc:0b:77:82:ee:d8:c1:7b:16:34:ed:df:5f: 5f:39:33:2e:e9:85:f2:ab:a1:51:3c:f2:8c:80:64:df:65:fd: 79:aa:f1:dd:1f:c2:a8:72:38:f5:44:ec:c4:75:81:43:ad:91: a2:75:83:26:2a:16:c7:4d:3d:47:c3:a3:8d:ce:f0:f8:ac:78: b4:95:e9:71:50:e0:e6:5c:67:7a:f6:3a:6f:ec:45:66:f1:dd: cc:74:b2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M2MzYxMTAvBgNVBAUTKDM2RjdGNURCNzAzNUI5MEZEQjI5Mjg1OEUyRkNGOEU2 Qjk5MTgxNzgwHhcNMjUxMjA1MDEyNjE0WhcNMjUxMjEyMDEyNjE0WjAYMRYwFAYD VQQDEw02OTMyMzRiNi0xZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM/yMLM6AOJsATjxku6RdsP7AIk9bN7DsfxcGTfRmyxLWMzUkv4w7bWvU/aX dW9yU1RyDkjeaj2bs/wj0YBYphKPCAY4yMDBdcp+IpAX7QOkk8iR40vZcHsHdWsS xUrskeVUEh1eB/wvtTSouqA2vlfeLKnKNi1S4+zxGx0eWJdKK87pDbQZTnR1tLUg OyAbMHVoW7gjOi+xlhYYBTWCGrG9/RUpD0q0GnguK0ikEDD99qa8z3mpTajZX9b7 U3KUCv9ZMj7TNZ4X5qke6VvY6sRpjsNoMxx0L8/6pkSQ0sw54sWHvyABnyhbnBdf zDBYvfl/f1APLMaUmx0lpV4EKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3EZRSB RYtDnU/vmtKA4HYD+XxmMB8GA1UdIwQYMBaAFDb39dtwNbkP2ykoWOL8+Oa5kYF4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzYzNi81NEQyN0UyMDQy MzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVRX2JLU2hZNHZ6NDVybVJn WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052ZjEyM0ExdVFfYktTaFk0dno0NXJtUmdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzYzNi81NEQyN0UyMDQyMzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVR X2JLU2hZNHZ6NDVybVJnWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhFaNMObBqkiYmp2QDqEGcr6OionmXPqg76gc8rJP4n5PwLV/lxf7z RBysCCyO/0NXrVKU6tvfB+/fPXlALDzBeZ9EO7F3J+xAHerdpvi7KUx77lIcb6zo 0eLYq1IdyF8aDuKSYFX7TraasovRysu3rgBbPfkT5gQbuhrvIjY/V5DBGUr/PWER dUExyCN2vYd0dSh46uDxBwHUQzjERXZ5eSSBZ+nKOswLd4Lu2MF7FjTt319fOTMu 6YXyq6FRPPKMgGTfZf15qvHdH8Kocjj1ROzEdYFDrZGidYMmKhbHTT1Hw6ONzvD4 rHi0lelxUODmXGd69jpv7EVm8d3MdLLx -----END CERTIFICATE-----Generated at Sat Dec 6 22:09:52 2025 by rpki-client