This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: gr36jzvA6trK5dQUMF72/00sELFIMbk/n8uBa9Q3JWk= Subject key identifier: 34:81:2B:1F:C6:91:59:A4:E1:EE:8C:2E:25:9B:5A:D9:DF:FA:C8:92 Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: BA Signing time: Tue 23 Dec 2025 04:56:18 +0000 Manifest this update: Tue 23 Dec 2025 04:56:17 +0000 Manifest next update: Tue 30 Dec 2025 04:56:17 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: homUQrK5yira/cbGOvXhnxm+HHIxgZzhzLgJiR1SDfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Dec 23 04:56:17 2025 GMT Not After : Dec 30 04:56:17 2025 GMT Subject: CN=694a20f1-029a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:b9:3b:56:ce:74:f0:ed:22:93:97:3a:a2: 34:76:7b:56:4a:0a:7f:5e:fd:e2:c5:bf:03:90:44: ae:2d:f3:e2:9e:d1:72:1c:a1:84:9a:84:4c:34:b7: 26:f1:92:3f:33:9c:45:d7:80:73:70:8d:78:5c:5c: 6e:11:8d:38:d1:63:b8:5d:ae:36:1e:7b:c1:c6:7e: fe:37:fb:9f:1e:bb:e0:5e:da:5f:2e:2c:06:41:f9: b2:10:e8:0b:0e:e2:81:99:ba:49:48:83:ea:4c:b6: 6f:66:6a:22:26:e4:c7:26:ee:ec:a0:19:2b:aa:5b: 03:5e:20:3c:83:98:d9:84:c2:99:95:98:0b:8c:72: 1b:41:c5:59:a4:63:4c:c3:10:68:d0:ed:9c:df:23: 2e:e3:2b:08:f2:b9:19:27:44:79:8a:7d:eb:71:41: ea:3d:1d:d5:89:b2:de:16:34:84:bb:1e:0c:96:d3: 0e:1b:34:6c:b2:a6:2f:d0:96:19:4a:c0:82:f8:35: aa:ad:82:ae:e5:46:4c:78:3d:5f:88:f3:23:c7:7f: 2b:c8:cd:b2:60:54:9e:69:9c:18:ca:3f:6b:ae:d7: 34:32:e8:72:5b:d5:e7:9c:5b:c0:db:01:c4:0c:ea: da:ad:af:af:51:40:c1:f7:3d:26:80:29:46:a1:62: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:81:2B:1F:C6:91:59:A4:E1:EE:8C:2E:25:9B:5A:D9:DF:FA:C8:92 X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:83:9e:10:b9:ea:30:5a:7a:c1:1e:4c:b7:22:3e:f4:28:c3: be:af:ad:67:e6:6c:1c:39:f5:cd:20:5d:2f:4d:be:cb:22:6f: 1b:a4:b2:38:dd:e9:80:1e:8a:64:19:db:32:fd:c0:29:e5:79: 38:3b:2d:49:17:d2:56:58:43:b2:31:1e:b9:80:05:5f:6c:54: a5:05:95:a7:b7:db:e5:af:3d:74:19:be:4d:55:88:7b:fe:00: ac:f8:e8:03:47:f0:57:f2:6c:ad:af:e7:80:f9:9f:65:ed:5a: 33:df:42:a1:8a:46:9a:98:f3:71:f3:96:ab:af:5f:b9:8b:af: d0:c7:e7:68:06:ba:01:eb:c2:82:6f:dd:fa:e4:1d:81:00:b5: cf:01:56:83:98:15:ee:1f:44:35:0a:e3:4b:e6:34:47:1f:48: db:c7:0c:6a:44:04:b3:19:4a:21:e8:dd:6c:03:86:ab:a8:b7: f6:f6:b2:2a:6e:ce:1b:5d:53:d7:07:1e:ba:32:ae:e4:31:90: 17:ea:e8:6d:a2:01:4c:c1:5c:92:74:90:03:95:c4:56:23:16: b5:36:5d:9c:d9:9c:d4:f0:1c:86:0d:ad:fe:38:7b:22:37:11: b1:80:e2:c5:79:9a:91:25:82:e3:7c:d2:3f:e6:bf:3a:8d:03: ad:ce:74:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1 QUVGQTRDQUEwHhcNMjUxMjIzMDQ1NjE3WhcNMjUxMjMwMDQ1NjE3WjAYMRYwFAYD VQQDDA02OTRhMjBmMS0wMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+C5O1bOdPDtIpOXOqI0dntWSgp/Xv3ixb8DkESuLfPintFyHKGEmoRMNLcm 8ZI/M5xF14BzcI14XFxuEY040WO4Xa42HnvBxn7+N/ufHrvgXtpfLiwGQfmyEOgL DuKBmbpJSIPqTLZvZmoiJuTHJu7soBkrqlsDXiA8g5jZhMKZlZgLjHIbQcVZpGNM wxBo0O2c3yMu4ysI8rkZJ0R5in3rcUHqPR3VibLeFjSEux4MltMOGzRssqYv0JYZ SsCC+DWqrYKu5UZMeD1fiPMjx38ryM2yYFSeaZwYyj9rrtc0MuhyW9XnnFvA2wHE DOrara+vUUDB9z0mgClGoWICwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSBKx/G kVmk4e6MLiWbWtnf+siSMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS R0M2NkZMZU1oSXBhNzZUS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBg54QueowWnrBHky3Ij70KMO+r61n5mwcOfXNIF0vTb7LIm8bpLI4 3emAHopkGdsy/cAp5Xk4Oy1JF9JWWEOyMR65gAVfbFSlBZWnt9vlrz10Gb5NVYh7 /gCs+OgDR/BX8mytr+eA+Z9l7Voz30KhikaamPNx85arr1+5i6/Qx+doBroB68KC b9365B2BALXPAVaDmBXuH0Q1CuNL5jRHH0jbxwxqRASzGUoh6N1sA4arqLf29rIq bs4bXVPXBx66Mq7kMZAX6uhtogFMwVySdJADlcRWIxa1Nl2c2ZzU8ByGDa3+OHsi NxGxgOLFeZqRJYLjfNI/5r86jQOtznSv -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:18 2025 by rpki-client