This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft File: nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json) Hash identifier: tjoX7uTLBqF3OuUWLeqeDjeFQ09wUf/zwSh4EQRP1pk= Subject key identifier: 41:ED:EA:24:93:C5:A8:DA:35:D0:14:00:1D:0F:F8:98:7D:DB:76:C5 Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 Certificate issuer: /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft Manifest number: 063B Signing time: Mon 22 Dec 2025 21:52:17 +0000 Manifest this update: Mon 22 Dec 2025 21:52:16 +0000 Manifest next update: Mon 29 Dec 2025 21:52:16 +0000 Files and hashes: 1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: 64IrZl8GNhK+q/mZUjAyzwtZZfYN6t5/n99yx4afTHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Validity Not Before: Dec 22 21:52:16 2025 GMT Not After : Dec 29 21:52:16 2025 GMT Subject: CN=6949bd91-e4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:b8:c8:96:8b:80:73:50:7f:03:e6:75:ba: a7:da:e9:d6:c8:c2:7f:99:fb:75:e7:56:e4:0f:ee: 1e:df:1a:9d:a5:ab:a3:38:11:02:38:1a:27:9e:c2: bd:0a:9a:61:29:ef:14:a8:b5:5c:db:30:c8:ff:5f: a2:ee:b9:b8:b8:84:31:ec:10:83:11:a4:fd:58:b3: 73:2c:ee:18:f9:b5:03:3c:36:0d:dd:39:48:a5:4b: d6:44:56:42:94:93:ae:ed:be:6b:6a:af:4c:e5:f2: 88:78:aa:c7:b7:5a:52:e0:f0:65:22:4f:be:1c:d4: cd:21:73:0d:51:51:7b:62:9d:9a:ae:53:12:27:c8: 10:69:1e:5a:86:d2:08:31:9d:d1:a2:6a:50:7d:2f: d3:87:89:bf:d6:7d:44:5e:c1:e3:39:37:67:d5:47: ae:7d:07:05:e2:7f:83:35:9d:80:34:85:9a:84:13: 93:6e:dd:f6:ab:0d:60:75:a9:38:86:d7:37:8e:a1: 7e:1b:a0:f8:a5:0e:75:0c:e3:2a:04:50:88:49:70: 46:00:03:bb:fb:31:4d:d3:a9:1b:42:e9:e3:5a:02: 4c:97:56:19:9c:30:52:92:12:c4:87:bb:49:6e:c1: 79:78:6d:db:44:ef:77:6c:38:71:b4:d4:2f:a2:e4: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:EA:24:93:C5:A8:DA:35:D0:14:00:1D:0F:F8:98:7D:DB:76:C5 X509v3 Authority Key Identifier: keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e2:cc:a7:c1:56:c3:d1:a4:7f:bf:c3:0f:44:e6:36:2a:c9: 53:2d:2c:6b:fb:2a:79:6f:db:57:66:42:e0:7e:61:dd:32:fe: 75:97:55:05:8b:0a:1d:4b:f7:a3:ea:8a:8f:9e:38:56:02:f8: 19:6e:b7:e6:b1:bf:d1:d6:38:75:d7:d1:87:2a:dc:d4:e1:7f: 53:58:78:b8:80:7b:16:d1:18:c5:a0:1d:e5:47:36:31:68:d4: 9b:78:3b:6a:43:73:51:4c:2a:6e:96:70:43:71:56:d9:49:0c: 45:a2:ef:cf:76:d2:c5:ba:ac:dd:2a:31:e5:e9:ce:b1:80:89: 55:24:d1:eb:b1:20:0a:7c:58:92:50:27:06:26:ea:85:84:68: 98:0a:be:4d:5e:af:14:89:a2:aa:64:04:f7:03:01:60:ac:82: 11:9f:1d:76:04:11:b1:cc:c0:94:9e:e8:1d:9a:c5:97:40:a5: 99:47:57:17:ca:24:85:35:a2:ed:88:a0:ec:f5:ee:ac:14:c2: 60:f1:db:ea:01:79:fc:41:eb:9a:df:8b:6b:6a:b1:3f:53:36: 0a:1d:6c:54:a7:48:7c:70:cb:aa:86:fc:e1:f4:f5:13:fa:f3: c6:da:9c:2d:bc:f8:96:13:7f:fc:ed:29:9b:87:77:dc:a1:00: 6f:06:4f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQzExMTAvBgNVBAUTKDlDOUE3NDdERTAwQUY0NUI4OEY3ODQxMTI4RTg5REIx M0QyMzE3MjkwHhcNMjUxMjIyMjE1MjE2WhcNMjUxMjI5MjE1MjE2WjAYMRYwFAYD VQQDDA02OTQ5YmQ5MS1lNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykS4yJaLgHNQfwPmdbqn2unWyMJ/mft151bkD+4e3xqdpaujOBECOBonnsK9 CpphKe8UqLVc2zDI/1+i7rm4uIQx7BCDEaT9WLNzLO4Y+bUDPDYN3TlIpUvWRFZC lJOu7b5raq9M5fKIeKrHt1pS4PBlIk++HNTNIXMNUVF7Yp2arlMSJ8gQaR5ahtII MZ3RompQfS/Th4m/1n1EXsHjOTdn1UeufQcF4n+DNZ2ANIWahBOTbt32qw1gdak4 htc3jqF+G6D4pQ51DOMqBFCISXBGAAO7+zFN06kbQunjWgJMl1YZnDBSkhLEh7tJ bsF5eG3bRO93bDhxtNQvouQQEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHt6iST xajaNdAUAB0P+Jh923bFMB8GA1UdIwQYMBaAFJyadH3gCvRbiPeEESjonbE9Ixcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFDMS9GRTY4RDNDNEI5 OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlGdUk5NFFSS09pZHNUMGpG eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KcDBmZUFLOUZ1STk0UVJLT2lkc1QwakZ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFDMS9GRTY4RDNDNEI5OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlG dUk5NFFSS09pZHNUMGpGeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf4synwVbD0aR/v8MPROY2KslTLSxr+yp5b9tXZkLgfmHdMv51l1UF iwodS/ej6oqPnjhWAvgZbrfmsb/R1jh119GHKtzU4X9TWHi4gHsW0RjFoB3lRzYx aNSbeDtqQ3NRTCpulnBDcVbZSQxFou/PdtLFuqzdKjHl6c6xgIlVJNHrsSAKfFiS UCcGJuqFhGiYCr5NXq8UiaKqZAT3AwFgrIIRnx12BBGxzMCUnugdmsWXQKWZR1cX yiSFNaLtiKDs9e6sFMJg8dvqAXn8Qeua34trarE/UzYKHWxUp0h8cMuqhvzh9PUT +vPG2pwtvPiWE3/87Smbh3fcoQBvBk+f -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:25 2025 by rpki-client