This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: QCFY/X3w/FcKz4CYupafHhcAF4F6MeH+helJPo+Zsr0= Subject key identifier: 5A:13:36:FA:C0:27:13:58:A6:75:97:E8:FD:FA:ED:0F:A8:8F:64:E9 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 201E Signing time: Wed 24 Dec 2025 15:53:17 +0000 Manifest this update: Wed 24 Dec 2025 15:53:17 +0000 Manifest next update: Wed 31 Dec 2025 15:53:17 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: dpiZnaHnzk5/dMLREpa6US0Sili9ySsDwVtt1BeL9X4=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: aFxmstcvEMQ/qqQO/m7uR2Alk5KmIeuyGi0FUw+S+g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Dec 24 15:53:17 2025 GMT Not After : Dec 31 15:53:17 2025 GMT Subject: CN=694c0c6d-759c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:0c:12:83:8d:38:e3:c1:30:56:7f:a4:2e: 0e:c7:76:79:4a:fc:d1:cd:de:ad:94:92:29:df:ff: 4b:48:02:b6:95:d8:53:c7:c4:0e:45:08:93:7b:29: d6:6f:a3:87:79:19:55:eb:29:d0:4f:40:f6:09:1d: 18:35:8e:51:75:8a:5e:c8:2b:47:8a:cd:d9:6e:9a: b5:53:28:7b:d2:2d:cf:23:19:b0:10:d6:f7:3b:a3: e7:de:f4:f0:ef:05:36:40:a7:57:40:60:2e:c7:da: 94:37:f6:59:d0:6b:58:19:64:e0:c5:cd:5f:7f:fa: c4:71:fc:18:a0:7a:7b:84:b7:61:58:5b:f5:58:0f: ea:34:d7:8f:bf:ec:3f:53:33:6c:fe:b7:36:51:fa: a2:ef:79:10:ea:01:c7:57:cb:7a:3e:e1:71:e5:83: ce:71:ff:f6:6b:86:34:8b:16:20:7d:f7:ee:4c:ec: b6:0b:3a:f4:a6:4a:c1:87:c7:85:83:93:34:cf:ed: 7b:33:29:f9:8d:71:35:9f:df:da:c5:fb:95:44:dc: 44:03:5b:0c:a4:10:bd:2e:63:07:5a:17:d2:9a:3a: 7a:53:70:0b:cc:43:b1:f4:d4:db:d4:f6:a6:3c:ff: 7f:09:34:36:ab:85:07:87:73:56:0a:19:39:73:de: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:13:36:FA:C0:27:13:58:A6:75:97:E8:FD:FA:ED:0F:A8:8F:64:E9 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:17:6e:73:8d:1f:92:70:84:00:f5:7a:1c:d8:ff:5b:5b:19: 81:5e:12:3d:8d:72:2c:61:33:10:dc:bf:9a:bb:79:ae:b9:a2: 33:b2:6e:e9:6e:96:97:07:a4:6b:db:2b:b0:f0:79:7b:bf:5c: 72:92:22:64:56:fd:9f:02:d0:35:a5:8c:0c:18:af:a8:93:aa: 73:0b:19:c0:27:ee:a3:a5:2d:6d:4e:d2:f3:71:d0:2f:bc:93: 62:7e:64:86:21:77:78:8a:2f:f2:e3:2a:4b:b2:0d:9a:c2:33: a5:ae:7d:24:5f:e7:5e:9f:0a:f5:63:f9:36:6c:b4:9a:e1:0c: 7a:9b:72:d2:f1:67:62:72:29:7d:fd:03:06:fc:35:3f:6e:cc: 1e:21:69:fe:dd:4a:18:f6:a6:9c:05:53:1f:db:09:af:a8:2c: cd:94:23:a8:db:bd:62:e9:18:cd:26:d7:de:8a:ff:e9:b5:11: c7:6f:fd:92:12:cd:09:cc:70:8e:8d:fb:41:ce:57:cc:66:f2: cc:65:d0:6c:a2:84:46:a7:be:9a:2c:19:ce:68:56:f0:11:d7: 65:09:9a:c6:ce:57:2a:00:1d:e2:19:82:98:e8:e4:be:fe:9d: 01:18:31:a9:dd:24:8a:ac:5e:81:e0:86:ea:98:89:35:ed:92: 0d:9b:f9:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUxMjI0MTU1MzE3WhcNMjUxMjMxMTU1MzE3WjAYMRYwFAYD VQQDDA02OTRjMGM2ZC03NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7sMEoONOOPBMFZ/pC4Ox3Z5SvzRzd6tlJIp3/9LSAK2ldhTx8QORQiTeynW b6OHeRlV6ynQT0D2CR0YNY5RdYpeyCtHis3Zbpq1Uyh70i3PIxmwENb3O6Pn3vTw 7wU2QKdXQGAux9qUN/ZZ0GtYGWTgxc1ff/rEcfwYoHp7hLdhWFv1WA/qNNePv+w/ UzNs/rc2Ufqi73kQ6gHHV8t6PuFx5YPOcf/2a4Y0ixYgfffuTOy2Czr0pkrBh8eF g5M0z+17Myn5jXE1n9/axfuVRNxEA1sMpBC9LmMHWhfSmjp6U3ALzEOx9NTb1Pam PP9/CTQ2q4UHh3NWChk5c941mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoTNvrA JxNYpnWX6P367Q+oj2TpMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5F25zjR+ScIQA9Xoc2P9bWxmBXhI9jXIsYTMQ3L+au3muuaIzsm7p bpaXB6Rr2yuw8Hl7v1xykiJkVv2fAtA1pYwMGK+ok6pzCxnAJ+6jpS1tTtLzcdAv vJNifmSGIXd4ii/y4ypLsg2awjOlrn0kX+denwr1Y/k2bLSa4Qx6m3LS8Wdicil9 /QMG/DU/bsweIWn+3UoY9qacBVMf2wmvqCzNlCOo271i6RjNJtfeiv/ptRHHb/2S Es0JzHCOjftBzlfMZvLMZdBsooRGp76aLBnOaFbwEddlCZrGzlcqAB3iGYKY6OS+ /p0BGDGp3SSKrF6B4IbqmIk17ZINm/lc -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:15 2025 by rpki-client