This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft File: nxMMOdAwdvSok0-jNJXO2TfiMKs.mft (raw, json) Hash identifier: jKgEsqXgOZkKk5xjaDzCrppRCNYjwMgiZ6HHmGOUJLE= Subject key identifier: E0:BD:B2:13:E3:7C:82:D0:24:2F:57:CB:F9:D8:97:BE:50:C5:8B:A5 Authority key identifier: 9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB Certificate issuer: /CN=A91430D6/serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft Manifest number: 54 Signing time: Tue 23 Dec 2025 06:05:20 +0000 Manifest this update: Tue 23 Dec 2025 06:05:19 +0000 Manifest next update: Tue 30 Dec 2025 06:05:19 +0000 Files and hashes: 1: nxMMOdAwdvSok0-jNJXO2TfiMKs.crl (hash: qqPWGp4TBkDPllmWmUwwYPuVbJ/dkzRkS+koIivRTD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB Validity Not Before: Dec 23 06:05:19 2025 GMT Not After : Dec 30 06:05:19 2025 GMT Subject: CN=694a3120-9e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5c:2e:ad:9b:06:42:af:6c:ff:f3:d9:5a:6e: 2b:38:89:66:70:18:71:3d:c9:df:a7:84:9a:17:42: 2f:8a:b0:c9:18:1e:a3:09:53:96:aa:6c:1e:de:73: a9:00:90:e9:16:57:ee:0d:31:e5:97:56:31:93:b0: 81:50:03:44:fe:bc:f6:30:55:c5:ae:57:18:a0:a6: e9:0b:36:38:41:30:2b:bf:a6:26:b0:00:40:26:38: f0:34:66:77:43:ec:06:7c:f7:fb:01:33:43:ad:ac: 1f:8a:43:cf:98:fc:5e:34:ec:aa:5b:e7:46:03:05: 96:64:64:81:41:d9:e9:4c:c3:fa:c2:d8:5e:a7:33: 8c:18:78:74:e8:af:93:48:de:e1:8f:1d:aa:af:b4: 13:c2:52:36:09:1d:00:60:3d:84:14:98:d8:07:07: de:dc:37:f0:f0:e7:d7:13:e6:1a:cd:d4:5f:4e:58: 2f:92:40:ef:90:31:af:67:a9:4f:8d:9f:d7:49:51: bd:d2:11:cd:ee:02:82:dc:98:d4:df:38:84:06:a0: e4:f6:8b:43:f0:57:3a:cc:f7:a5:4c:b6:53:19:bd: cf:56:35:03:38:28:d9:dc:11:14:99:64:86:d9:7a: 4f:bb:3c:be:43:dd:81:8f:0d:38:ac:25:20:5f:74: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:B2:13:E3:7C:82:D0:24:2F:57:CB:F9:D8:97:BE:50:C5:8B:A5 X509v3 Authority Key Identifier: keyid:9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:00:a3:f9:c4:fc:6a:50:51:22:fd:75:d1:ee:57:74:d2:81: f3:56:55:22:41:30:28:c1:a1:51:58:b5:98:45:2b:f7:1e:7b: 85:f7:d0:be:2e:e0:b9:95:66:ec:fb:35:44:db:77:f6:7e:d6: 98:d2:bb:58:51:c5:b5:3e:da:34:15:be:d9:d0:c8:d5:ab:f4: aa:b8:f6:f0:8e:fb:96:74:ef:42:57:47:e0:b6:a2:e4:dc:fd: f7:ce:d8:ff:7c:e1:eb:d2:64:ff:ca:a9:1c:6e:2c:84:dc:39: c3:1a:01:e5:7f:73:68:e1:63:1f:9a:16:c2:99:42:e5:6d:cb: ff:1e:51:ef:4c:79:97:0c:f7:ac:a5:85:03:95:c3:8f:91:f3: bf:24:36:7f:e5:02:ba:ea:4e:08:ba:8f:15:22:a2:e6:81:21: 0d:52:f0:1b:5e:af:ee:04:81:5a:ef:4c:b0:87:b7:6c:aa:10: 38:c4:d2:53:9d:85:c5:75:a8:d5:85:3e:a5:dd:12:a1:18:ae: e0:e7:9c:5b:25:99:02:33:e3:ec:6b:29:fe:7a:c1:ea:b5:53: d8:48:95:01:2e:25:80:6b:aa:7d:55:25:14:c1:36:ab:30:86: 03:1f:01:5e:e0:69:9e:d6:d0:aa:1e:45:b4:47:ea:9e:bc:db: 01:03:e6:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoOUYxMzBDMzlEMDMwNzZGNEE4OTM0RkEzMzQ5NUNFRDkz N0UyMzBBQjAeFw0yNTEyMjMwNjA1MTlaFw0yNTEyMzAwNjA1MTlaMBgxFjAUBgNV BAMMDTY5NGEzMTIwLTllNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYXC6tmwZCr2z/89labis4iWZwGHE9yd+nhJoXQi+KsMkYHqMJU5aqbB7ec6kA kOkWV+4NMeWXVjGTsIFQA0T+vPYwVcWuVxigpukLNjhBMCu/piawAEAmOPA0ZndD 7AZ89/sBM0OtrB+KQ8+Y/F407Kpb50YDBZZkZIFB2elMw/rC2F6nM4wYeHTor5NI 3uGPHaqvtBPCUjYJHQBgPYQUmNgHB97cN/Dw59cT5hrN1F9OWC+SQO+QMa9nqU+N n9dJUb3SEc3uAoLcmNTfOIQGoOT2i0PwVzrM96VMtlMZvc9WNQM4KNncERSZZIbZ ek+7PL5D3YGPDTisJSBfdFZzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4L2yE+N8 gtAkL1fL+diXvlDFi6UwHwYDVR0jBBgwFoAUnxMMOdAwdvSok0+jNJXO2TfiMKsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzIwRjlGM0IwNUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL254TU1PZEF3ZHZTb2swLWpOSlhPMlRmaU1L cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnhNTU9kQXdkdlNvazAtak5KWE8yVGZpTUtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzIwRjlGM0IwNUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL254TU1PZEF3ZHZT b2swLWpOSlhPMlRmaU1Lcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAAo/nE/GpQUSL9ddHuV3TSgfNWVSJBMCjBoVFYtZhFK/cee4X30L4u 4LmVZuz7NUTbd/Z+1pjSu1hRxbU+2jQVvtnQyNWr9Kq49vCO+5Z070JXR+C2ouTc /ffO2P984evSZP/KqRxuLITcOcMaAeV/c2jhYx+aFsKZQuVty/8eUe9MeZcM96yl hQOVw4+R878kNn/lArrqTgi6jxUiouaBIQ1S8Bter+4EgVrvTLCHt2yqEDjE0lOd hcV1qNWFPqXdEqEYruDnnFslmQIz4+xrKf56weq1U9hIlQEuJYBrqn1VJRTBNqsw hgMfAV7gaZ7W0KoeRbRH6p682wED5hw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:27 2025 by rpki-client