This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: W07Mv5K/lwk1lOW/FUb9mq3kedzYsAmatK8/3xizX/A= Subject key identifier: F6:BB:35:E8:28:3A:37:78:EF:A4:2D:06:57:EC:9E:2B:67:36:F8:D3 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 014B Signing time: Fri 05 Dec 2025 02:42:08 +0000 Manifest this update: Fri 05 Dec 2025 02:42:08 +0000 Manifest next update: Fri 12 Dec 2025 02:42:08 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: Pf3t82ObN9Y6jHIdEtj44LMybNm5y5ROumTfapD+P4s=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: TiDsN2FNPwgHeiELsvw5/2Nk6unCe1gkLq5nmI7beNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Dec 5 02:42:08 2025 GMT Not After : Dec 12 02:42:08 2025 GMT Subject: CN=69324680-eb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:b7:08:dc:3d:77:0a:4e:1d:c3:05:42:17: 42:9d:e3:d9:bd:5c:b8:e9:11:c7:e6:b6:7c:8f:95: 7d:be:40:4d:77:79:d2:42:2a:2b:1f:e5:62:95:f1: f1:e6:c0:c3:a0:7b:3e:a3:a0:5c:43:7b:e2:46:d3: 61:94:c8:74:e4:6c:c2:73:e7:5e:fb:eb:0d:ba:2a: 7e:e4:f5:43:48:b7:9a:9d:2d:06:a3:a2:fe:4e:c5: 1c:fc:84:28:2d:c4:ef:9e:6a:96:da:ed:5e:ce:5c: a1:d2:77:79:d6:c0:dc:c2:13:74:38:93:b6:6d:4c: 77:a1:32:7a:93:a5:02:67:36:f4:e8:51:95:7a:b2: d9:7d:1e:b2:56:dd:74:74:39:55:6c:34:70:8d:b6: b3:5b:a3:e4:78:a9:cb:8a:c5:f7:da:bf:ce:d1:b7: ab:6b:8d:95:be:fb:12:83:36:8a:06:72:7a:70:cb: 81:ce:f2:ec:f4:83:11:db:b3:8f:cd:a3:91:fd:75: 91:fc:95:fe:c0:67:ee:0c:98:bb:53:5e:c9:8a:84: 0c:2c:ab:11:82:96:e0:73:3d:ff:fd:79:33:c1:2b: 0a:3d:f5:17:01:2d:4b:33:cf:cb:d2:92:7e:fc:fe: d7:f5:62:cc:db:a5:33:3e:35:ff:94:32:37:c0:77: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:35:E8:28:3A:37:78:EF:A4:2D:06:57:EC:9E:2B:67:36:F8:D3 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a3:ae:71:e7:68:0d:92:1f:21:7e:57:9a:9c:f0:33:00:26: c4:4f:57:87:98:40:ce:bf:86:99:a7:cf:2f:55:ea:d2:4d:db: 97:6d:cc:10:cc:c3:91:aa:bf:01:77:ae:d8:b0:db:93:ae:fc: cf:2c:c6:4c:f1:bd:c9:62:84:13:36:cd:c6:5c:54:97:82:2f: 68:0e:c9:e6:25:af:e4:ef:cf:0b:25:9c:d2:e5:79:4d:b0:86: 14:59:07:94:c8:43:00:af:26:a9:8f:8b:83:f4:66:04:73:10: 9b:2d:63:e6:d4:8f:b6:d3:cb:fd:4a:0d:e5:09:28:60:0e:fb: 4c:9d:2c:43:b9:a1:94:50:45:7b:7f:39:3e:d9:c9:a6:90:fd: c6:6d:19:d8:12:84:3d:6d:21:67:06:e3:a6:55:6e:a9:e5:13: a1:98:a0:e0:c7:39:64:86:f5:af:ef:af:8b:01:35:70:2e:0a: a5:68:2e:81:0b:8a:89:1f:9c:64:d5:9f:b2:1f:c3:ce:26:d4: 42:58:35:cf:84:a6:99:63:34:41:49:b0:07:b0:d3:7b:3c:6e: 7c:1c:40:67:e8:26:00:32:87:3b:3d:f9:bb:bd:41:24:31:f8: 53:71:66:45:64:30:b0:ad:7a:ce:be:8c:32:68:45:81:f5:73: 39:28:a6:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUxMjA1MDI0MjA4WhcNMjUxMjEyMDI0MjA4WjAYMRYwFAYD VQQDEw02OTMyNDY4MC1lYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkO3CNw9dwpOHcMFQhdCnePZvVy46RHH5rZ8j5V9vkBNd3nSQiorH+VilfHx 5sDDoHs+o6BcQ3viRtNhlMh05GzCc+de++sNuip+5PVDSLeanS0Go6L+TsUc/IQo LcTvnmqW2u1ezlyh0nd51sDcwhN0OJO2bUx3oTJ6k6UCZzb06FGVerLZfR6yVt10 dDlVbDRwjbazW6PkeKnLisX32r/O0bera42VvvsSgzaKBnJ6cMuBzvLs9IMR27OP zaOR/XWR/JX+wGfuDJi7U17JioQMLKsRgpbgcz3//XkzwSsKPfUXAS1LM8/L0pJ+ /P7X9WLM26UzPjX/lDI3wHeDmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa7Nego Ojd476QtBlfsnitnNvjTMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxo65x52gNkh8hfleanPAzACbET1eHmEDOv4aZp88vVerSTduXbcwQ zMORqr8Bd67YsNuTrvzPLMZM8b3JYoQTNs3GXFSXgi9oDsnmJa/k788LJZzS5XlN sIYUWQeUyEMAryapj4uD9GYEcxCbLWPm1I+208v9Sg3lCShgDvtMnSxDuaGUUEV7 fzk+2cmmkP3GbRnYEoQ9bSFnBuOmVW6p5ROhmKDgxzlkhvWv76+LATVwLgqlaC6B C4qJH5xk1Z+yH8POJtRCWDXPhKaZYzRBSbAHsNN7PG58HEBn6CYAMoc7Pfm7vUEk MfhTcWZFZDCwrXrOvowyaEWB9XM5KKYf -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:40 2025 by rpki-client