This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json) Hash identifier: L05lxuYAhcbrkT4NBctZslYGwfkjYCUYNvaVn40L8xQ= Subject key identifier: AD:3D:DF:CB:7D:1E:F4:FD:F8:75:69:BB:CB:56:78:5B:99:CE:FC:AF Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft Manifest number: 06 Signing time: Tue 23 Dec 2025 04:18:44 +0000 Manifest this update: Tue 23 Dec 2025 04:18:44 +0000 Manifest next update: Tue 30 Dec 2025 04:18:44 +0000 Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: AuDLtuA+8BXZhFzNnM/pPpjpKvCoctNLTP7wcWY51tc=) 2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: sle3VjtmMU5Kr440i5EaiPNQxmWUedMl6NxF8wN8YnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Validity Not Before: Dec 23 04:18:44 2025 GMT Not After : Dec 30 04:18:44 2025 GMT Subject: CN=694a1824-6c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7e:b3:6c:00:8c:bc:c4:b5:64:22:92:10:66: fb:39:98:b7:cc:62:95:c6:57:73:c0:85:eb:9c:fa: f0:a1:9f:ef:66:9c:b2:60:2d:9b:78:07:62:d3:6b: b8:fd:18:bd:7e:c1:6e:a8:20:91:0d:0c:4a:a0:5d: fe:9e:6e:39:56:7c:0d:ee:25:2e:42:38:33:b5:2b: 50:8c:1f:36:5d:eb:25:06:f5:c2:a5:9b:9c:cc:ad: a7:3a:44:99:21:44:b9:31:51:64:5d:99:19:09:7c: af:77:53:4c:8a:9d:31:f4:ce:87:97:85:b6:16:eb: ab:d7:d2:f2:7b:74:a5:7f:66:75:04:2f:5d:06:7b: 3a:2a:7f:92:b2:18:f6:35:cf:72:16:9c:45:d0:5a: 2e:4a:10:1b:61:c5:b7:73:ac:08:f5:ad:97:df:99: 3f:93:1d:e1:69:d4:16:0b:53:ef:0d:e6:81:9a:76: 3d:ba:0a:86:d2:7a:4f:87:e9:3d:02:27:fb:db:44: a5:21:5f:0f:be:23:9d:91:49:c9:0f:b3:5e:e9:35: 2b:04:2c:a4:6e:67:0d:7f:c3:54:0a:67:65:29:c6: bb:41:1c:af:47:b2:53:48:99:79:1d:00:cc:a0:e0: d5:35:08:0c:0d:18:e2:12:47:2e:b5:b8:c9:42:61: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3D:DF:CB:7D:1E:F4:FD:F8:75:69:BB:CB:56:78:5B:99:CE:FC:AF X509v3 Authority Key Identifier: keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:87:80:a0:f4:6d:09:a2:6e:fc:92:73:fb:12:c2:2d:e4: be:b9:ee:7f:2c:ed:35:21:96:b3:97:a2:bb:73:39:fe:fb:7a: 6d:6d:94:ab:1f:3b:4b:31:50:05:76:db:e9:9c:90:8c:be:cb: 9f:3b:61:03:09:a2:96:35:16:0b:a2:99:d3:a9:66:3b:bf:d4: 2a:65:21:f4:b1:86:b2:fa:05:b4:a3:e7:3d:44:18:00:f8:0e: 6c:cd:0f:ab:31:ce:35:bf:ec:c7:00:6b:48:2d:16:ee:c5:73: 46:8c:27:f4:d0:44:53:dc:29:47:47:55:0c:7d:0f:bf:c1:ef: 67:47:4a:c3:15:8c:c4:2e:ef:3d:e7:ee:e4:95:76:3f:24:8d: 06:8e:02:db:61:70:4a:72:bb:0e:61:48:0c:fd:3d:a8:f6:7c: 15:06:a6:cb:5c:c8:8c:56:6d:00:63:f9:d2:c0:f0:97:a8:9c: 66:b0:b3:39:23:b5:0c:0b:34:6c:40:9f:36:a6:67:84:98:50: c1:2a:35:49:c9:dd:68:05:97:38:f5:b2:04:e5:9b:cc:73:e4: 97:df:99:14:71:37:3c:e8:d4:61:ba:bf:6b:5c:f7:af:97:c8: b2:32:28:dc:87:2c:57:61:b9:7c:eb:4d:b7:95:9f:8e:c5:2b: 70:04:fc:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE1 MTkzMjExMC8GA1UEBRMoMzYzOERGQTNCOTg1NkExNUFEOUQ1NDMwNkI1QkY3MDYz MEY2MzY0NjAeFw0yNTEyMjMwNDE4NDRaFw0yNTEyMzAwNDE4NDRaMBgxFjAUBgNV BAMMDTY5NGExODI0LTZjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCHfrNsAIy8xLVkIpIQZvs5mLfMYpXGV3PAheuc+vChn+9mnLJgLZt4B2LTa7j9 GL1+wW6oIJENDEqgXf6ebjlWfA3uJS5CODO1K1CMHzZd6yUG9cKlm5zMrac6RJkh RLkxUWRdmRkJfK93U0yKnTH0zoeXhbYW66vX0vJ7dKV/ZnUEL10Gezoqf5KyGPY1 z3IWnEXQWi5KEBthxbdzrAj1rZffmT+THeFp1BYLU+8N5oGadj26CobSek+H6T0C J/vbRKUhXw++I52RSckPs17pNSsELKRuZw1/w1QKZ2UpxrtBHK9HslNImXkdAMyg 4NU1CAwNGOISRy61uMlCYVgTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrT3fy30e 9P34dWm7y1Z4W5nO/K8wHwYDVR0jBBgwFoAUNjjfo7mFahWtnVQwa1v3BjD2NkYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzJBNUU4QjAyREM5 MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21GYWhXdG5WUXdhMXYzQmpEMk5r WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmpqZm83bUZhaFd0blZRd2ExdjNCakQyTmtZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzJBNUU4QjAyREM5MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21GYWhX dG5WUXdhMXYzQmpEMk5rWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADqIh4Cg9G0Jom78knP7EsIt5L657n8s7TUhlrOXortzOf77em1tlKsf O0sxUAV22+mckIy+y587YQMJopY1FguimdOpZju/1CplIfSxhrL6BbSj5z1EGAD4 DmzND6sxzjW/7McAa0gtFu7Fc0aMJ/TQRFPcKUdHVQx9D7/B72dHSsMVjMQu7z3n 7uSVdj8kjQaOAtthcEpyuw5hSAz9Paj2fBUGpstcyIxWbQBj+dLA8JeonGawszkj tQwLNGxAnzamZ4SYUMEqNUnJ3WgFlzj1sgTlm8xz5JffmRRxNzzo1GG6v2tc96+X yLIyKNyHLFdhuXzrTbeVn47FK3AE/G8= -----END CERTIFICATE-----Generated at Thu Dec 25 00:34:14 2025 by rpki-client