This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: agiIlOy0CojdQ1iOzKOsrErUkkRh5qVR5x6wxr/DAlA= Subject key identifier: F2:75:F1:AB:9C:7C:78:65:DB:E6:A0:41:DF:71:E1:81:4F:CF:A3:42 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 12A3 Signing time: Mon 22 Dec 2025 18:39:18 +0000 Manifest this update: Mon 22 Dec 2025 18:39:18 +0000 Manifest next update: Mon 29 Dec 2025 18:39:18 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: 0j0HGyEutkPt95nPAojBoGvlMR0lai2cmJH4a9JY368=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Dec 22 18:39:18 2025 GMT Not After : Dec 29 18:39:18 2025 GMT Subject: CN=69499056-74da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:bf:c1:ae:7b:ed:58:dd:2f:e1:a9:36:62: b2:83:0e:72:17:52:34:5a:d4:b8:59:71:3c:bb:ca: 89:da:b1:89:fd:f5:b4:d9:58:ef:a7:88:93:1b:f8: cc:fb:79:60:98:9b:7f:30:23:8c:69:51:1b:7a:bd: 51:ff:8b:ad:bc:7c:34:4a:c6:11:86:e5:c7:79:84: c0:90:a2:44:dd:92:c0:45:ee:d8:14:aa:04:28:9f: 05:03:e0:74:da:c4:a2:76:dc:c9:0f:5b:7d:a2:f6: fc:e9:56:c4:1b:7c:73:68:f6:8f:92:26:14:95:7b: 11:00:3e:a5:7e:62:3e:b5:d6:cd:ab:40:79:a2:56: ec:2f:57:54:8d:a9:86:6d:e6:cd:d4:1f:1d:df:fb: 64:6f:05:a6:18:6e:00:1a:14:25:0a:5f:27:d2:d3: 98:18:88:dc:6f:e3:10:a5:11:11:0c:bf:15:12:d0: e0:61:9c:dc:2f:cc:45:95:e8:bc:4d:31:37:4a:70: 61:72:65:62:08:8a:da:c6:38:6f:67:c7:f3:2d:7d: bc:de:fb:6d:91:00:29:cd:e7:ab:f5:40:4a:c5:d5: 1c:89:22:23:0f:37:06:5e:90:43:dd:28:2b:7c:3e: a7:a5:99:21:e2:ff:6e:9d:b8:24:af:97:4a:5f:02: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:75:F1:AB:9C:7C:78:65:DB:E6:A0:41:DF:71:E1:81:4F:CF:A3:42 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0e:e2:52:72:f2:eb:53:7f:34:06:db:c9:bd:13:2a:08:42: 7c:23:6c:a9:67:ac:c5:16:70:3f:2a:3f:22:f7:b0:bc:53:e1: 5f:ea:73:74:96:22:b3:fb:a6:ba:50:45:49:43:50:59:48:47: f8:de:9c:65:96:3b:b0:24:56:42:4b:ba:55:e9:43:46:f9:ba: 12:d6:da:f3:f2:8f:74:96:9f:4e:39:73:59:f9:0e:ba:a6:77: c7:73:8b:39:d0:e0:b8:28:5f:16:a5:04:a2:3d:8b:29:23:29: ff:d2:19:b1:60:18:32:ae:7b:28:25:d6:a9:36:85:3e:27:e2: 40:d6:43:77:06:fb:f7:63:b4:0a:0b:c5:30:43:ee:83:77:11: fb:70:c4:32:67:c9:05:77:f8:bc:da:0a:ee:21:10:c9:90:e0: 11:30:e5:04:43:77:e8:59:07:47:97:58:0c:f6:01:b8:32:24: 3d:5c:4c:f9:f4:af:6b:91:ff:23:d4:03:86:09:e5:c7:13:6a: 14:bf:46:89:a8:55:70:b0:95:e3:8b:f2:25:42:55:64:8e:3d: 64:dd:f2:1b:b1:38:af:9d:a0:4f:1c:0a:7d:bc:6a:55:d8:b1: c1:4c:2d:ba:cf:3b:4c:2e:60:7f:3c:02:2e:14:5c:9c:a6:3c: 3b:34:e3:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUxMjIyMTgzOTE4WhcNMjUxMjI5MTgzOTE4WjAYMRYwFAYD VQQDDA02OTQ5OTA1Ni03NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQK/wa577VjdL+GpNmKygw5yF1I0WtS4WXE8u8qJ2rGJ/fW02Vjvp4iTG/jM +3lgmJt/MCOMaVEber1R/4utvHw0SsYRhuXHeYTAkKJE3ZLARe7YFKoEKJ8FA+B0 2sSidtzJD1t9ovb86VbEG3xzaPaPkiYUlXsRAD6lfmI+tdbNq0B5olbsL1dUjamG bebN1B8d3/tkbwWmGG4AGhQlCl8n0tOYGIjcb+MQpRERDL8VEtDgYZzcL8xFlei8 TTE3SnBhcmViCIraxjhvZ8fzLX283vttkQApzeer9UBKxdUciSIjDzcGXpBD3Sgr fD6npZkh4v9unbgkr5dKXwI96wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ18auc fHhl2+agQd9x4YFPz6NCMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsDuJScvLrU380BtvJvRMqCEJ8I2ypZ6zFFnA/Kj8i97C8U+Ff6nN0 liKz+6a6UEVJQ1BZSEf43pxlljuwJFZCS7pV6UNG+boS1trz8o90lp9OOXNZ+Q66 pnfHc4s50OC4KF8WpQSiPYspIyn/0hmxYBgyrnsoJdapNoU+J+JA1kN3Bvv3Y7QK C8UwQ+6DdxH7cMQyZ8kFd/i82gruIRDJkOARMOUEQ3foWQdHl1gM9gG4MiQ9XEz5 9K9rkf8j1AOGCeXHE2oUv0aJqFVwsJXji/IlQlVkjj1k3fIbsTivnaBPHAp9vGpV 2LHBTC26zztMLmB/PAIuFFycpjw7NOMe -----END CERTIFICATE-----Generated at Tue Dec 23 22:43:24 2025 by rpki-client