This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: JVq3wzmfHzRAZ4KNXIXr3hTWnOK+FziAjvVv45bHN7w= Subject key identifier: 15:C9:B9:B3:18:F8:91:5C:9E:82:9B:B6:78:FF:F7:62:C4:F3:E4:A6 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 019F Signing time: Fri 05 Dec 2025 01:38:32 +0000 Manifest this update: Fri 05 Dec 2025 01:38:31 +0000 Manifest next update: Fri 12 Dec 2025 01:38:31 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: iP9OhyfNSiNa8klNikl2eDMkeK01/Ww0pyBah/GpwvU=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: Yi/JWAwchMRWPqpLJdHipgAcW0bADt8JjtD1zk/5zPg=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: 6zc+rZhJnF4vpcd6GmjdYSDq7wBWKRzyhnCBcHAGEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Dec 5 01:38:31 2025 GMT Not After : Dec 12 01:38:31 2025 GMT Subject: CN=69323797-e4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:ff:64:9d:06:20:97:b1:80:6c:c5:85:77: 09:0e:10:63:22:4a:a7:2b:91:4d:5c:52:89:d9:9e: ab:3e:1e:02:c9:64:af:cb:60:9d:3f:d9:90:33:f3: 45:88:6a:87:d3:aa:3a:6e:08:9e:fb:f5:f1:36:fa: 68:3f:e4:00:16:c8:ec:9e:0f:70:d1:ca:1e:d0:98: a4:98:9c:67:a6:8a:fe:86:ad:19:52:57:80:99:f7: d1:6d:f2:94:7d:fc:95:b7:f7:a2:0b:12:d4:71:7b: 31:5b:5e:d5:06:37:43:31:3f:7f:ec:25:3b:27:16: a8:f6:22:5b:b3:53:58:0d:55:df:f4:47:df:cc:22: b1:f4:2f:ef:3d:42:e5:69:0e:ae:f6:2d:cf:ad:7c: bc:a6:a0:2f:60:b7:63:ec:01:01:2e:7a:2b:d9:95: f9:9f:15:b8:13:03:b1:65:0a:ec:43:e9:15:44:49: ec:be:80:a5:a0:f3:e1:0a:07:3e:af:38:22:4d:42: 6b:20:1c:12:31:5b:c0:31:63:03:bb:58:d3:56:dc: ed:9a:2a:66:2f:9e:39:77:ef:7a:a9:4e:77:ec:26: 9d:78:80:e2:74:27:8c:e2:e2:4b:e4:d4:41:1b:d3: e5:58:e3:de:69:63:d2:b0:03:4a:a9:58:2d:74:d5: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:B9:B3:18:F8:91:5C:9E:82:9B:B6:78:FF:F7:62:C4:F3:E4:A6 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:12:e5:fe:4e:37:59:f1:59:61:1b:a5:b1:2e:33:70:ab:97: 0c:3e:fc:3a:df:8d:23:c1:e4:ab:a8:ed:d9:00:ce:ac:2d:33: f9:21:43:d0:bf:53:b4:16:09:44:37:0d:d6:0e:1f:a1:f0:72: 5c:09:27:a4:ac:0f:29:8b:e1:6a:15:25:2f:cc:52:40:ab:af: 8f:13:e5:18:85:4a:f7:96:f6:47:77:31:cd:41:a2:c6:40:b7: f4:a3:bb:ff:a2:25:98:91:df:d7:f3:77:f3:e8:c7:b5:47:c2: 35:6e:cc:eb:5d:ce:09:1a:a8:9b:3f:6c:b9:89:f8:b9:06:61: 04:89:28:b0:99:f2:c2:08:a5:41:8a:b3:af:69:4f:58:33:ab: 7d:78:8a:ef:cf:0d:65:83:b5:cc:fc:ea:9a:40:60:b0:be:a0: db:e1:cb:69:a6:3e:32:2d:05:8e:c3:f6:dd:72:e9:f0:aa:d5: 38:4f:93:0f:ff:eb:a2:58:15:75:65:b5:77:0f:6f:c3:9c:2a: 0a:b3:96:0b:cf:d9:43:f1:99:5d:c0:ff:28:ec:17:eb:09:ff: 9e:cc:29:5b:9b:20:8c:3f:e3:22:88:72:cd:05:c1:ff:07:de: 86:c2:38:3d:02:17:8f:10:24:30:5a:ba:78:28:ee:73:b9:1a: 9f:0e:98:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUxMjA1MDEzODMxWhcNMjUxMjEyMDEzODMxWjAYMRYwFAYD VQQDEw02OTMyMzc5Ny1lNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCL/ZJ0GIJexgGzFhXcJDhBjIkqnK5FNXFKJ2Z6rPh4CyWSvy2CdP9mQM/NF iGqH06o6bgie+/XxNvpoP+QAFsjsng9w0coe0JikmJxnpor+hq0ZUleAmffRbfKU ffyVt/eiCxLUcXsxW17VBjdDMT9/7CU7Jxao9iJbs1NYDVXf9EffzCKx9C/vPULl aQ6u9i3PrXy8pqAvYLdj7AEBLnor2ZX5nxW4EwOxZQrsQ+kVREnsvoCloPPhCgc+ rzgiTUJrIBwSMVvAMWMDu1jTVtztmipmL545d+96qU537CadeIDidCeM4uJL5NRB G9PlWOPeaWPSsANKqVgtdNVWywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXJubMY +JFcnoKbtnj/92LE8+SmMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEEuX+TjdZ8VlhG6WxLjNwq5cMPvw6340jweSrqO3ZAM6sLTP5IUPQ v1O0FglENw3WDh+h8HJcCSekrA8pi+FqFSUvzFJAq6+PE+UYhUr3lvZHdzHNQaLG QLf0o7v/oiWYkd/X83fz6Me1R8I1bszrXc4JGqibP2y5ifi5BmEEiSiwmfLCCKVB irOvaU9YM6t9eIrvzw1lg7XM/OqaQGCwvqDb4ctppj4yLQWOw/bdcunwqtU4T5MP /+uiWBV1ZbV3D2/DnCoKs5YLz9lD8ZldwP8o7BfrCf+ezClbmyCMP+MiiHLNBcH/ B96Gwjg9AhePECQwWrp4KO5zuRqfDphF -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:39 2025 by rpki-client