This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: WXZfhYBeafJSo74Gt0kiRNebnPp1IZH6KT7bl4yseqs= Subject key identifier: 7B:59:62:DB:84:DC:6F:6E:15:47:82:F3:2D:7C:EB:75:50:79:A5:5B Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 0102 Signing time: Wed 03 Dec 2025 03:27:11 +0000 Manifest this update: Wed 03 Dec 2025 03:27:11 +0000 Manifest next update: Wed 10 Dec 2025 03:27:11 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: XqlHdS07Qv1dDE6wAElPIznAxtPLgQv14qxddJxNWCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Dec 3 03:27:11 2025 GMT Not After : Dec 10 03:27:11 2025 GMT Subject: CN=692fae0f-7d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:7d:39:f8:97:9e:87:8a:d2:bc:5a:26:fb: 83:26:38:a5:08:e5:37:c0:e7:68:2e:b7:7d:ff:c0: a3:72:c8:19:1d:a8:13:e1:b0:7b:44:ef:c0:59:fc: 6a:b4:13:c6:c8:79:9c:ba:72:ac:87:16:38:00:1b: e8:b3:64:38:af:f8:ba:32:19:a5:46:0f:d8:35:56: e2:e9:ec:5d:20:99:07:ff:db:a1:13:de:52:d4:28: 15:a1:f8:65:fe:9d:b8:f1:e0:c6:51:bc:2b:6e:e6: 6d:f3:88:ba:6c:ab:e5:f3:0b:2a:ae:b4:55:2f:e1: b3:28:ba:08:93:54:c4:f5:9e:53:a4:04:81:44:99: 6f:13:eb:de:93:06:f3:38:e2:31:2b:ef:d0:86:09: d7:1f:ea:89:e9:32:1c:9c:61:e4:67:1c:33:c7:42: 74:b4:34:b2:01:7e:c6:fe:25:7f:e2:92:47:46:6e: 07:bd:4e:a5:c0:16:8f:7b:1b:36:b7:8f:92:6a:20: 11:81:95:72:82:f9:6f:d6:d0:24:e1:e5:ed:c4:bf: 2e:f8:36:17:76:c0:f7:80:75:11:cf:0f:6d:94:fc: 16:3a:63:69:dc:f7:19:e2:f9:f5:95:2b:7d:f9:18: b2:b5:e7:7c:b5:0b:6b:5f:6e:df:72:97:a8:11:bb: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:62:DB:84:DC:6F:6E:15:47:82:F3:2D:7C:EB:75:50:79:A5:5B X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:c6:95:b3:d1:a6:00:a9:0c:ef:81:61:65:24:03:19:9f: a9:8e:0a:a9:fb:e6:63:05:a9:59:02:6b:65:ab:0d:aa:b2:75: 07:4e:ce:ef:58:19:83:51:e7:29:26:25:ed:8b:08:ce:59:10: c9:fd:fe:06:96:41:83:c7:c8:8e:ef:05:4e:96:76:3f:cf:24: 7f:b5:41:9d:3a:54:09:b7:c8:2e:11:2c:bd:9e:28:bb:38:aa: 1e:ba:36:f4:cf:4c:04:f9:57:26:16:00:54:8d:f5:5e:ce:b0: 04:01:6a:18:3f:73:81:bb:3c:44:7b:de:01:5a:cf:0b:6d:59: 10:5a:53:2a:4f:b8:9c:57:f3:4e:1d:0a:f6:f8:f0:66:35:d8: 58:f9:e8:e5:35:11:83:be:29:cb:21:e3:ad:ee:87:07:f2:c9: 4e:a9:89:92:8a:a7:ec:8b:8f:4b:f1:67:17:e2:97:eb:44:46: c4:c7:cf:8c:d5:52:b7:9b:25:f0:9b:eb:0d:3c:e1:02:bd:ae: a0:03:d8:59:2c:cc:4a:ce:a8:d0:5a:08:6f:87:47:52:2a:ae: 47:f7:34:29:6b:22:2a:00:13:4c:fd:cd:43:18:98:31:ef:50: a3:a5:47:88:23:2b:78:d8:e9:1b:c3:c1:c2:3f:76:ef:18:1e: 72:45:e3:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUxMjAzMDMyNzExWhcNMjUxMjEwMDMyNzExWjAYMRYwFAYD VQQDEw02OTJmYWUwZi03ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldJ9OfiXnoeK0rxaJvuDJjilCOU3wOdoLrd9/8CjcsgZHagT4bB7RO/AWfxq tBPGyHmcunKshxY4ABvos2Q4r/i6MhmlRg/YNVbi6exdIJkH/9uhE95S1CgVofhl /p248eDGUbwrbuZt84i6bKvl8wsqrrRVL+GzKLoIk1TE9Z5TpASBRJlvE+vekwbz OOIxK+/QhgnXH+qJ6TIcnGHkZxwzx0J0tDSyAX7G/iV/4pJHRm4HvU6lwBaPexs2 t4+SaiARgZVygvlv1tAk4eXtxL8u+DYXdsD3gHURzw9tlPwWOmNp3PcZ4vn1lSt9 +Riyted8tQtrX27fcpeoEbvhmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtZYtuE 3G9uFUeC8y1863VQeaVbMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBFMaVs9GmAKkM74FhZSQDGZ+pjgqp++ZjBalZAmtlqw2qsnUHTs7v WBmDUecpJiXtiwjOWRDJ/f4GlkGDx8iO7wVOlnY/zyR/tUGdOlQJt8guESy9nii7 OKoeujb0z0wE+VcmFgBUjfVezrAEAWoYP3OBuzxEe94BWs8LbVkQWlMqT7icV/NO HQr2+PBmNdhY+ejlNRGDvinLIeOt7ocH8slOqYmSiqfsi49L8WcX4pfrREbEx8+M 1VK3myXwm+sNPOECva6gA9hZLMxKzqjQWghvh0dSKq5H9zQpayIqABNM/c1DGJgx 71CjpUeIIyt42Okbw8HCP3bvGB5yReO7 -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:38 2025 by rpki-client