This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json) Hash identifier: yWnoWWeRS2rK4SW9KuQ4g6zD02xhXh5mGroAdbKHyc0= Subject key identifier: 87:7B:CA:7F:3C:54:AA:A5:34:F1:96:7E:4C:92:9F:74:5A:D3:EB:96 Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft Manifest number: 0891 Signing time: Mon 22 Dec 2025 19:54:35 +0000 Manifest this update: Mon 22 Dec 2025 19:54:34 +0000 Manifest next update: Mon 29 Dec 2025 19:54:34 +0000 Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: I5K3x0L2Bt0hoFGeNMguksFMxvgC67hvhc01bCYLKYM=) 2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: Z5/8qd37pxiVEd17B5Xs6cF+7DG4nU3iU1y8K9Miig0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Validity Not Before: Dec 22 19:54:34 2025 GMT Not After : Dec 29 19:54:34 2025 GMT Subject: CN=6949a1fa-2404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:79:fd:d5:3f:4a:40:d9:59:31:d2:9d:f6:9a: 76:75:0d:6b:e4:c5:20:62:3b:2f:4d:38:bd:a9:35: f3:66:57:4b:97:c6:fa:70:43:91:26:2b:c2:1b:2d: 89:c6:0e:d6:7b:c7:51:fc:8e:fa:0f:0e:a7:f3:3c: 27:19:03:b2:ea:ef:61:94:7a:73:01:c1:96:fe:a5: 31:ff:c0:e3:62:a3:84:a7:49:2a:13:54:6b:f6:40: 0f:d4:79:d9:f2:28:18:04:5a:5a:93:51:9f:a0:f1: 12:0a:d0:25:22:2b:25:38:59:55:ee:5b:49:fa:b2: 59:9c:97:d6:9b:f7:5b:94:ea:04:25:28:e4:fb:6f: d4:8c:68:23:ef:66:90:8d:6a:91:f7:b4:d8:b2:16: 44:77:f6:15:e3:47:aa:3b:56:18:0b:5e:66:e2:07: 19:4e:a3:ca:f4:58:c0:b3:c7:03:74:4b:41:ce:31: 47:7b:3d:e6:e4:fd:86:82:56:ce:1c:00:88:1e:5d: b7:2c:b6:fb:df:77:b7:da:0f:b3:48:fa:3b:53:58: fc:29:0c:89:19:7a:02:ac:3f:8f:2d:f2:bc:50:b2: b7:f4:c3:66:ef:b5:2e:6c:25:8b:ab:a0:11:a1:ac: da:bd:c0:9a:73:f4:7c:1f:ae:82:b6:e0:2d:e2:59: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:CA:7F:3C:54:AA:A5:34:F1:96:7E:4C:92:9F:74:5A:D3:EB:96 X509v3 Authority Key Identifier: keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8f:1b:c0:ef:d2:19:ee:0b:71:cf:d5:09:6d:6c:f5:ec:84: 0a:3a:5a:ef:bc:40:f3:e1:ec:3e:9d:f8:c0:ec:c3:e5:7c:be: be:b7:1d:4e:3c:93:1c:57:83:86:ae:93:a3:b9:52:cf:6b:d9: 43:42:92:65:dd:fc:b9:de:c9:7e:de:1f:c0:29:23:12:00:bf: 86:43:c7:12:9e:bf:f2:18:74:86:0b:d8:3e:10:aa:75:5a:91: de:93:d0:53:4f:e0:a6:b9:b8:67:9b:16:e8:5f:c9:c8:72:89: d0:25:26:6e:4c:3e:47:13:d2:50:83:46:3a:52:f2:9d:91:b9: 2c:b5:78:22:b5:50:49:e4:59:7a:d2:09:86:a0:0e:84:1a:7c: fc:92:c3:2a:70:c9:77:f3:60:63:63:77:c0:4b:d6:62:77:31: 3c:79:7f:2f:02:09:6c:8e:66:60:37:bf:22:dd:9f:32:2a:e6: 7b:c3:3d:6d:9c:e2:dd:19:f1:40:c7:ff:53:c7:70:1b:bd:99: f9:86:04:15:ed:7f:70:20:6e:48:2e:a7:04:e4:5d:48:23:f9: 87:8b:fe:ac:e7:09:20:86:da:1a:13:87:bf:a1:a9:36:b5:5f: 0d:56:14:ce:bb:2c:70:49:6b:61:5b:4b:50:d3:9a:08:ab:f8: 91:b8:3b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2 NjI3NjFFNEIwHhcNMjUxMjIyMTk1NDM0WhcNMjUxMjI5MTk1NDM0WjAYMRYwFAYD VQQDDA02OTQ5YTFmYS0yNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53n91T9KQNlZMdKd9pp2dQ1r5MUgYjsvTTi9qTXzZldLl8b6cEORJivCGy2J xg7We8dR/I76Dw6n8zwnGQOy6u9hlHpzAcGW/qUx/8DjYqOEp0kqE1Rr9kAP1HnZ 8igYBFpak1GfoPESCtAlIislOFlV7ltJ+rJZnJfWm/dblOoEJSjk+2/UjGgj72aQ jWqR97TYshZEd/YV40eqO1YYC15m4gcZTqPK9FjAs8cDdEtBzjFHez3m5P2GglbO HACIHl23LLb733e32g+zSPo7U1j8KQyJGXoCrD+PLfK8ULK39MNm77UubCWLq6AR oazavcCac/R8H66CtuAt4lnNEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId7yn88 VKqlNPGWfkySn3Ra0+uWMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0 RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy YTFqMmF5SktidlZtSjJIa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZjxvA79IZ7gtxz9UJbWz17IQKOlrvvEDz4ew+nfjA7MPlfL6+tx1O PJMcV4OGrpOjuVLPa9lDQpJl3fy53sl+3h/AKSMSAL+GQ8cSnr/yGHSGC9g+EKp1 WpHek9BTT+CmubhnmxboX8nIconQJSZuTD5HE9JQg0Y6UvKdkbkstXgitVBJ5Fl6 0gmGoA6EGnz8ksMqcMl382BjY3fAS9ZidzE8eX8vAglsjmZgN78i3Z8yKuZ7wz1t nOLdGfFAx/9Tx3AbvZn5hgQV7X9wIG5ILqcE5F1II/mHi/6s5wkghtoaE4e/oak2 tV8NVhTOuyxwSWthW0tQ05oIq/iRuDsP -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:50 2025 by rpki-client