This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: dZCCWcfpWpmo9YlKVqMFbEES58s6Y0nBcGnvtxX36wg= Subject key identifier: BE:B7:61:92:B1:96:68:64:83:DF:6B:FA:BC:31:AD:A8:F2:7D:7E:1F Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 34E2 Signing time: Sat 06 Dec 2025 14:53:30 +0000 Manifest this update: Sat 06 Dec 2025 14:53:29 +0000 Manifest next update: Sat 13 Dec 2025 14:53:29 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: adrx/h2JgQBMnCkYmq0OD0/YhlySGGI5kmNtdMvcLUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Dec 6 14:53:29 2025 GMT Not After : Dec 13 14:53:29 2025 GMT Subject: CN=69344369-0b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:04:82:7f:2e:c5:c0:63:d2:25:f8:8e:b3: 3d:03:5d:f0:82:de:1a:03:0b:08:de:f4:d3:88:0f: 53:ab:8a:e2:0e:f9:36:b8:c9:19:83:65:5d:eb:56: 3d:a2:55:63:85:4b:98:c4:dd:fe:02:39:bf:ce:44: d7:c3:5d:2d:7f:d8:56:db:3b:21:a6:fe:cf:7a:61: 55:1c:e3:d9:94:a6:9e:1d:80:6f:c7:0b:63:57:cf: 8b:39:a1:e6:1a:2a:57:41:4d:b9:63:99:d1:ff:60: 73:24:d4:dd:60:56:c3:d6:67:c3:65:dd:78:4f:57: 83:7a:05:73:ce:8c:6d:97:f7:b5:0a:87:6b:0f:5b: a5:24:bd:95:70:85:6a:41:09:66:cd:3e:d7:da:82: f1:2a:ba:54:51:0e:15:27:c5:a8:4e:ca:2f:29:20: bb:ba:11:ba:8d:e2:6c:e2:fe:07:84:86:8b:7e:7f: 27:50:3a:03:e3:3d:62:c8:3f:66:d7:7f:65:66:98: 23:3a:eb:73:38:06:61:34:44:58:cb:4c:3a:16:d0: 5e:91:35:ee:9c:46:4d:28:7c:2b:10:a7:1f:92:e2: 54:87:76:9d:29:da:41:36:64:2e:47:40:3f:0b:9e: b2:0c:72:2c:6f:50:5e:b5:03:19:41:c2:87:7d:21: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:61:92:B1:96:68:64:83:DF:6B:FA:BC:31:AD:A8:F2:7D:7E:1F X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:16:36:70:d2:48:95:05:db:c2:7e:b5:14:f0:a6:53:df:17: f3:33:e5:3a:38:03:9f:13:0d:cd:fb:14:d1:af:8c:02:88:4d: 58:68:3b:c6:3c:35:79:74:81:39:51:7d:6c:7c:fe:41:5e:ae: ad:73:5f:bb:63:d8:ae:e3:9e:31:79:1d:8d:66:38:45:00:32: b7:6b:b5:63:84:de:2f:d0:f5:3d:3c:08:83:16:26:8a:03:c8: bc:29:03:a0:97:6d:93:9a:78:43:4e:f2:34:40:03:32:35:45: 3e:96:b9:4d:ad:bd:7e:5f:18:72:d5:ff:c2:7d:5f:bb:7e:9b: 46:af:7c:44:d7:d4:72:4a:60:b2:22:a5:9b:93:1b:fa:0f:f4: 75:1f:df:02:77:7c:dd:5a:bf:2d:45:55:10:cf:b9:c2:c6:84: 5e:91:af:b3:4a:b3:7f:a4:e3:9a:16:91:33:87:bf:ca:e4:22: 5f:77:0a:79:ef:95:ba:dd:3c:41:31:47:ab:44:bc:f9:3a:fd: 50:1d:05:e0:3c:26:eb:6a:79:01:cf:8e:46:57:53:f5:43:4f: ec:6c:7a:8f:1e:1c:6f:67:9b:b7:25:be:b6:db:78:5c:d7:f0: cc:52:99:0f:9f:cc:cb:e1:2e:b9:d9:18:92:ab:09:a8:2e:69: 33:1e:62:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUxMjA2MTQ1MzI5WhcNMjUxMjEzMTQ1MzI5WjAYMRYwFAYD VQQDEw02OTM0NDM2OS0wYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJwEgn8uxcBj0iX4jrM9A13wgt4aAwsI3vTTiA9Tq4riDvk2uMkZg2Vd61Y9 olVjhUuYxN3+Ajm/zkTXw10tf9hW2zshpv7PemFVHOPZlKaeHYBvxwtjV8+LOaHm GipXQU25Y5nR/2BzJNTdYFbD1mfDZd14T1eDegVzzoxtl/e1CodrD1ulJL2VcIVq QQlmzT7X2oLxKrpUUQ4VJ8WoTsovKSC7uhG6jeJs4v4HhIaLfn8nUDoD4z1iyD9m 139lZpgjOutzOAZhNERYy0w6FtBekTXunEZNKHwrEKcfkuJUh3adKdpBNmQuR0A/ C56yDHIsb1BetQMZQcKHfSGkgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL63YZKx lmhkg99r+rwxrajyfX4fMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcFjZw0kiVBdvCfrUU8KZT3xfzM+U6OAOfEw3N+xTRr4wCiE1YaDvG PDV5dIE5UX1sfP5BXq6tc1+7Y9iu454xeR2NZjhFADK3a7VjhN4v0PU9PAiDFiaK A8i8KQOgl22TmnhDTvI0QAMyNUU+lrlNrb1+Xxhy1f/CfV+7fptGr3xE19RySmCy IqWbkxv6D/R1H98Cd3zdWr8tRVUQz7nCxoReka+zSrN/pOOaFpEzh7/K5CJfdwp5 75W63TxBMUerRLz5Ov1QHQXgPCbrankBz45GV1P1Q0/sbHqPHhxvZ5u3Jb6223hc 1/DMUpkPn8zL4S652RiSqwmoLmkzHmI5 -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:01 2025 by rpki-client