This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json) Hash identifier: SR+oKYeTPmFAAXNhO+m48DQmrlHmjy6RUinbrDpH48k= Subject key identifier: ED:5A:CA:07:F8:F8:E9:48:AF:C8:B8:98:D8:35:4D:2D:FC:7C:6D:C1 Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft Manifest number: 04EF Signing time: Mon 22 Dec 2025 23:37:22 +0000 Manifest this update: Mon 22 Dec 2025 23:37:21 +0000 Manifest next update: Mon 29 Dec 2025 23:37:21 +0000 Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: rysJCmwcg2nJ7i0CCl0SyN7dBefDB92J1s+N2NGFgyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Validity Not Before: Dec 22 23:37:21 2025 GMT Not After : Dec 29 23:37:21 2025 GMT Subject: CN=6949d632-fa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:d1:de:1f:21:b0:ea:06:59:6b:5c:e4:c1: 4b:c8:dc:fb:6b:96:05:2e:e4:df:9d:27:18:92:3f: 55:5b:f5:30:93:01:db:0e:44:96:f6:c4:03:84:6f: 2e:7c:53:d0:66:76:0d:35:5b:73:42:aa:25:b5:28: 6b:b1:1b:3d:f2:6d:55:d7:c5:87:7f:8b:e7:e9:d6: 78:e9:dd:06:86:cf:bf:9c:07:d3:17:a5:fb:3b:51: d6:53:df:08:1e:01:10:a7:a6:b2:bc:96:83:12:26: cc:17:45:b5:f1:87:e1:3d:96:f1:d3:a6:3c:88:10: b9:51:62:7a:d5:1a:3a:12:27:53:7b:c4:0f:9a:73: e9:c9:74:d1:b6:ad:85:8f:bd:73:c2:db:78:b9:52: 5e:f5:f1:4c:7c:17:2b:9e:42:d7:cb:47:ea:bc:fc: 38:84:9d:97:b8:f5:e1:b0:fc:c0:dc:f8:1d:26:b2: 35:da:36:03:0a:67:4c:b7:d2:d4:9b:f4:15:cf:c4: 35:e5:44:34:d2:17:ff:71:f9:22:af:1f:42:82:c5: 2b:5a:4e:39:bb:35:73:26:48:e6:71:06:d1:04:92: 8c:92:44:c0:e9:07:ee:3d:75:6b:03:86:f4:44:d5: e9:31:bb:9f:d8:fe:c6:4b:9f:dd:73:7a:ab:8e:63: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5A:CA:07:F8:F8:E9:48:AF:C8:B8:98:D8:35:4D:2D:FC:7C:6D:C1 X509v3 Authority Key Identifier: keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1f:bd:0e:93:3a:01:39:6f:a4:d6:d1:5d:31:41:3b:48:ef: e0:5f:79:1e:20:f2:94:4b:21:06:8f:3e:b2:10:b4:6e:69:78: 2a:17:8b:29:42:bd:c1:61:e7:3d:1a:c7:0a:13:e1:5d:6b:98: 89:45:b9:1d:6f:cf:dc:20:70:e0:ce:15:5a:e0:62:91:79:df: 38:5d:5c:99:71:93:89:b5:ef:34:4c:c6:73:f2:4a:b9:e8:15: f6:f0:f0:05:21:b5:7a:fe:70:59:ef:e4:e9:0b:f1:20:43:a9: ae:98:74:82:36:11:7c:63:2e:ef:46:4f:74:4b:b3:2c:ac:37: a3:b6:06:5e:3e:f8:8a:ef:bb:f5:7c:69:88:a6:19:ac:4e:99: 60:e4:ca:4f:31:08:cd:a9:39:8a:3f:be:1a:e6:a6:ee:f4:02: 0a:8e:2a:d0:44:90:fe:9c:83:2c:a8:67:e6:42:f1:a1:7c:2b: 97:31:b0:7a:cc:05:97:f3:7f:e4:12:f1:fe:4a:20:f9:3b:b6: c1:99:a4:1b:8d:19:f3:0c:c3:d5:2b:cb:95:dd:04:be:f1:dd: ba:6e:8d:51:98:dc:76:a4:23:83:84:94:eb:9b:4c:d1:e6:de: 83:d2:cc:78:21:c8:3a:83:d1:57:ec:1b:ad:35:44:ec:a9:ab: 0c:c5:4f:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF NDIzMjkxNjcwHhcNMjUxMjIyMjMzNzIxWhcNMjUxMjI5MjMzNzIxWjAYMRYwFAYD VQQDDA02OTQ5ZDYzMi1mYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjTR3h8hsOoGWWtc5MFLyNz7a5YFLuTfnScYkj9VW/UwkwHbDkSW9sQDhG8u fFPQZnYNNVtzQqoltShrsRs98m1V18WHf4vn6dZ46d0Ghs+/nAfTF6X7O1HWU98I HgEQp6ayvJaDEibMF0W18YfhPZbx06Y8iBC5UWJ61Ro6EidTe8QPmnPpyXTRtq2F j71zwtt4uVJe9fFMfBcrnkLXy0fqvPw4hJ2XuPXhsPzA3PgdJrI12jYDCmdMt9LU m/QVz8Q15UQ00hf/cfkirx9CgsUrWk45uzVzJkjmcQbRBJKMkkTA6QfuPXVrA4b0 RNXpMbuf2P7GS5/dc3qrjmPMfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1aygf4 +OlIr8i4mNg1TS38fG3BMB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuH70OkzoBOW+k1tFdMUE7SO/gX3keIPKUSyEGjz6yELRuaXgqF4sp Qr3BYec9GscKE+Fda5iJRbkdb8/cIHDgzhVa4GKRed84XVyZcZOJte80TMZz8kq5 6BX28PAFIbV6/nBZ7+TpC/EgQ6mumHSCNhF8Yy7vRk90S7MsrDejtgZePviK77v1 fGmIphmsTplg5MpPMQjNqTmKP74a5qbu9AIKjirQRJD+nIMsqGfmQvGhfCuXMbB6 zAWX83/kEvH+SiD5O7bBmaQbjRnzDMPVK8uV3QS+8d26bo1RmNx2pCODhJTrm0zR 5t6D0sx4Icg6g9FX7ButNUTsqasMxU8o -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:51 2025 by rpki-client