This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: 0SwlyypZYDtepQyV3ZLCyig7vS1nb+PRPil0OWeUttU= Subject key identifier: A4:7C:5B:C1:40:A7:85:D2:01:7E:E3:B9:C3:DE:18:65:20:68:A6:E5 Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 23 Signing time: Tue 23 Dec 2025 06:36:11 +0000 Manifest this update: Tue 23 Dec 2025 06:36:10 +0000 Manifest next update: Tue 30 Dec 2025 06:36:10 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: p44oIiFdMHe1XCrlgUKkri3/eD+4ny//q9YuUfwt1dw=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: jehIFKXQzxSa2naNE6wehGEUSZh95Rm5N+knZ8mynTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Dec 23 06:36:10 2025 GMT Not After : Dec 30 06:36:10 2025 GMT Subject: CN=694a385b-dfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ef:28:76:97:77:18:06:91:18:a0:56:86:f7: c5:8e:59:40:f8:ff:ab:8a:d8:1c:90:c6:49:32:1f: 66:7d:26:f2:02:c9:46:f7:ff:63:15:f3:24:bb:38: a4:75:52:3e:ae:a7:40:20:58:f9:55:38:79:11:25: a9:9c:08:df:50:ea:1d:96:4d:5d:ce:c1:8a:73:dd: 53:9c:84:dd:1a:29:c0:1b:ca:af:ea:c2:99:ba:44: e4:8a:f0:c8:b6:90:b9:4f:8c:ee:47:6f:a3:d3:f8: 03:e7:d6:47:f0:a5:bd:0e:49:f7:79:d7:da:2c:1f: c2:8b:a5:bd:c9:83:e3:64:48:f3:c3:dc:d1:df:07: a0:13:e9:78:c0:33:32:2d:63:28:28:8d:96:be:e2: 9b:c9:7d:2b:99:21:9b:59:d1:99:74:73:11:92:b8: 50:3f:f8:d1:1a:a5:aa:3c:7a:e9:1e:23:8e:6d:9a: 53:2e:ea:e5:b8:3e:ca:f5:10:6f:35:0b:a9:b0:16: f3:5c:04:3b:34:4d:60:27:85:ae:98:ba:b8:e9:b4: 5c:d8:c3:b0:c0:7e:9a:13:18:3f:75:e5:5c:98:b1: 81:a4:a4:0c:8b:69:74:59:10:c7:a7:cf:98:bf:30: e4:fe:01:3e:a8:11:04:56:73:a4:3c:e0:42:85:e8: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7C:5B:C1:40:A7:85:D2:01:7E:E3:B9:C3:DE:18:65:20:68:A6:E5 X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:dd:ab:3c:fb:59:6d:7d:9b:0c:d6:dd:3a:a5:c7:6b:6d:df: 78:80:66:42:df:9a:35:a4:77:1b:1c:4f:0d:2f:8d:89:21:6a: 71:28:e2:63:ba:40:63:55:18:bb:89:68:41:6c:38:32:84:90: 6a:84:bc:a5:d9:7e:76:20:b9:d6:76:d8:bf:ab:e6:39:ab:8f: f9:16:87:fb:b3:3b:8e:a6:8d:c8:a2:82:2c:34:ad:a3:e0:bc: 91:4f:e8:59:d2:81:58:cd:0a:1a:d7:37:f1:49:4f:24:4b:bd: c0:6f:ae:d8:27:0c:2b:73:60:0d:6c:6d:23:24:d0:eb:80:d7: c5:47:f5:0b:89:de:96:b8:48:e9:e8:bb:53:ca:f2:e9:cc:0b: f1:ac:c2:8b:aa:f1:be:f8:d3:81:2b:91:cd:56:96:71:87:f1: a8:19:10:be:c1:a8:dc:7f:e6:00:f8:19:d9:03:ef:26:96:3e: fa:85:1b:df:4d:fe:94:83:5c:4c:71:a3:17:41:ef:7b:2c:30: 28:a4:e8:19:6c:ca:0d:91:6f:7f:57:ec:61:49:95:4c:71:e1: 98:a9:09:d7:ea:9c:d2:bb:fe:bb:66:3b:dd:c9:7c:55:db:4e: e3:93:6f:8e:1b:99:0b:ac:38:a6:64:13:7b:b7:1e:93:88:b2: 17:f7:d6:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkE3NjExMC8GA1UEBRMoQTYyRkNENjQ1NEE2OEEwODY1RjZCOTVDQzBFODc3NDQ5 RUYzRUZBOTAeFw0yNTEyMjMwNjM2MTBaFw0yNTEyMzAwNjM2MTBaMBgxFjAUBgNV BAMMDTY5NGEzODViLWRmZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk7yh2l3cYBpEYoFaG98WOWUD4/6uK2ByQxkkyH2Z9JvICyUb3/2MV8yS7OKR1 Uj6up0AgWPlVOHkRJamcCN9Q6h2WTV3OwYpz3VOchN0aKcAbyq/qwpm6ROSK8Mi2 kLlPjO5Hb6PT+APn1kfwpb0OSfd519osH8KLpb3Jg+NkSPPD3NHfB6AT6XjAMzIt YygojZa+4pvJfSuZIZtZ0Zl0cxGSuFA/+NEapao8eukeI45tmlMu6uW4Psr1EG81 C6mwFvNcBDs0TWAnha6YurjptFzYw7DAfpoTGD915VyYsYGkpAyLaXRZEMenz5i/ MOT+AT6oEQRWc6Q84EKF6Hv3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpHxbwUCn hdIBfuO5w94YZSBopuUwHwYDVR0jBBgwFoAUpi/NZFSmighl9rlcwOh3RJ7z76kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQTc2LzA4N0NDN0EwQjBD MDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGlfTlpGU21pZ2hsOXJsY3dPaDNSSjd6NzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC QTc2LzA4N0NDN0EwQjBDMDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdo bDlybGN3T2gzUko3ejc2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM/dqzz7WW19mwzW3Tqlx2tt33iAZkLfmjWkdxscTw0vjYkhanEo4mO6 QGNVGLuJaEFsODKEkGqEvKXZfnYgudZ22L+r5jmrj/kWh/uzO46mjciigiw0raPg vJFP6FnSgVjNChrXN/FJTyRLvcBvrtgnDCtzYA1sbSMk0OuA18VH9QuJ3pa4SOno u1PK8unMC/Gswouq8b7404Erkc1WlnGH8agZEL7BqNx/5gD4GdkD7yaWPvqFG99N /pSDXExxoxdB73ssMCik6Blsyg2Rb39X7GFJlUxx4ZipCdfqnNK7/rtmO93JfFXb TuOTb44bmQusOKZkE3u3HpOIshf31nY= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:50 2025 by rpki-client