This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: bgGi6Lgm+lvHNLPA7eP2ac1vmxh+bQ+GpDnShoiSGJ8= Subject key identifier: 37:FF:42:BD:FE:FA:A9:1E:B4:6E:86:55:AA:6A:B8:CB:2C:FF:A5:84 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 019F Signing time: Fri 05 Dec 2025 01:35:00 +0000 Manifest this update: Fri 05 Dec 2025 01:35:00 +0000 Manifest next update: Fri 12 Dec 2025 01:35:00 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: CddXQrszjc0WqtjwbbOKyOHpSIeNvaXbjRCnITLqek8=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 0taDnwo0qjXesfO3FrAvUEEfUHs3YxCMYz8QGg31osQ=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: xPqI8byEZA0kbH+t1Ot9il53KHXLD5VMa8Lng8oAAuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Dec 5 01:35:00 2025 GMT Not After : Dec 12 01:35:00 2025 GMT Subject: CN=693236c4-5980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:04:75:82:dd:49:99:3a:e5:08:e4:b0:13: 3c:e1:a7:a4:27:fe:62:2c:87:0e:40:d8:85:19:03: 5f:60:e5:10:d7:84:d6:aa:6e:f0:d1:41:cf:d5:d3: e0:11:f4:4a:db:45:76:f9:b0:41:69:d9:73:bd:1c: 83:02:af:6b:b7:af:28:fb:19:52:84:6a:2a:c9:1e: c6:5e:c8:d1:01:33:de:e7:93:78:4e:c3:92:49:91: d4:85:0a:14:23:10:3d:03:cf:fa:8f:51:99:e9:7a: 81:62:fa:5d:fc:28:7c:c2:aa:05:db:4f:90:6a:54: b4:1a:ec:95:f2:ff:fe:8f:cd:ad:35:cb:94:ee:57: 40:a9:17:45:2c:43:e3:af:ff:4b:b6:28:0f:53:7e: f8:87:d4:d9:e8:64:cf:87:59:ad:21:bb:57:81:17: 06:9c:0c:11:9f:12:2f:6d:06:ef:4f:31:2a:22:63: fc:4b:9f:2d:71:eb:d3:12:e4:f2:a1:ac:17:29:de: 4e:cc:9f:96:c1:fc:da:8e:58:1a:ce:10:27:ce:e9: 1f:ae:28:c7:e4:4b:ba:6e:ae:ed:8e:32:52:37:4b: 34:45:da:ab:d7:ac:da:d8:f3:93:ad:23:17:02:f3: 07:9e:5d:6f:55:68:9f:68:bb:4f:46:da:21:9f:cc: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FF:42:BD:FE:FA:A9:1E:B4:6E:86:55:AA:6A:B8:CB:2C:FF:A5:84 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:f1:14:ec:45:b7:cd:b9:b5:db:41:fa:86:3f:bd:b5:bb:c3: 70:5f:47:6f:39:72:9c:24:06:da:aa:d5:ed:10:37:47:fa:04: 6d:ac:09:fc:d3:bc:88:fd:1e:a4:64:81:a1:e8:3c:e3:f0:7d: 27:b7:ae:ba:9a:ed:ea:09:27:dd:af:d1:eb:bb:38:14:06:77: a2:1a:bb:ed:41:b9:4f:42:c5:2c:44:aa:43:14:ef:0f:14:ae: 48:a5:d5:90:fe:d7:ab:19:c8:22:36:15:6d:8e:fd:02:c7:98: 2f:a4:3b:f2:c9:16:4a:12:21:68:a1:21:4f:29:2a:c1:f2:17: 2a:84:cf:1b:dd:68:93:90:51:a7:33:95:d4:27:42:90:c0:a7: a1:7a:5e:15:4f:2b:e2:bc:1c:f6:73:5a:9a:e0:7e:aa:e3:46: 51:5a:25:4e:d1:d0:62:07:ac:16:c6:47:f0:f0:8c:d1:f4:6c: 67:a9:a5:d6:70:32:ba:85:06:ad:34:49:7a:08:84:3c:bf:70: 3b:af:cc:8b:be:38:37:15:6d:ea:67:c3:99:38:c5:e2:06:8a: 56:92:1e:4f:be:8c:e5:e8:6e:7c:ab:a1:6c:88:23:08:94:27: 11:c6:d9:b3:9c:91:b6:e1:8a:71:77:7f:0e:04:b0:05:8f:3f: 21:ed:ef:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUxMjA1MDEzNTAwWhcNMjUxMjEyMDEzNTAwWjAYMRYwFAYD VQQDEw02OTMyMzZjNC01OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkT8EdYLdSZk65QjksBM84aekJ/5iLIcOQNiFGQNfYOUQ14TWqm7w0UHP1dPg EfRK20V2+bBBadlzvRyDAq9rt68o+xlShGoqyR7GXsjRATPe55N4TsOSSZHUhQoU IxA9A8/6j1GZ6XqBYvpd/Ch8wqoF20+QalS0GuyV8v/+j82tNcuU7ldAqRdFLEPj r/9LtigPU374h9TZ6GTPh1mtIbtXgRcGnAwRnxIvbQbvTzEqImP8S58tcevTEuTy oawXKd5OzJ+WwfzajlgazhAnzukfrijH5Eu6bq7tjjJSN0s0Rdqr16za2POTrSMX AvMHnl1vVWifaLtPRtohn8wXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf/Qr3+ +qketG6GVapquMss/6WEMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE8RTsRbfNubXbQfqGP721u8NwX0dvOXKcJAbaqtXtEDdH+gRtrAn8 07yI/R6kZIGh6Dzj8H0nt666mu3qCSfdr9HruzgUBneiGrvtQblPQsUsRKpDFO8P FK5IpdWQ/terGcgiNhVtjv0Cx5gvpDvyyRZKEiFooSFPKSrB8hcqhM8b3WiTkFGn M5XUJ0KQwKehel4VTyvivBz2c1qa4H6q40ZRWiVO0dBiB6wWxkfw8IzR9GxnqaXW cDK6hQatNEl6CIQ8v3A7r8yLvjg3FW3qZ8OZOMXiBopWkh5Pvozl6G58q6FsiCMI lCcRxtmznJG24Ypxd38OBLAFjz8h7e+k -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:03 2025 by rpki-client