This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: 7rCpk0dHPs1FVMO3GIlONr/LL5j2ch6azk+5uaiT4nM= Subject key identifier: A4:C0:66:17:19:29:F3:3E:BE:BA:45:A9:B4:D2:C9:B7:D8:E1:36:57 Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: 9A Signing time: Tue 23 Dec 2025 05:18:25 +0000 Manifest this update: Tue 23 Dec 2025 05:18:25 +0000 Manifest next update: Tue 30 Dec 2025 05:18:25 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: aWlD9HDt/0+Jcdq4k/GZFaf3pYrVTyQ/RZ5sZ58bvIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: Dec 23 05:18:25 2025 GMT Not After : Dec 30 05:18:25 2025 GMT Subject: CN=694a2621-81df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:e2:bf:98:e5:4e:1c:65:6f:40:c9:e9:9a: 1f:bd:ad:44:9e:cd:26:98:ea:64:c9:8a:ff:f7:e2: df:a9:6a:eb:38:c2:bc:3c:35:6d:47:b7:d6:e4:87: 15:f4:6b:fe:72:91:af:85:21:fc:7b:0e:03:37:04: b4:4b:33:4d:49:ea:bd:b9:52:be:38:2c:95:35:95: e1:b6:dd:cd:00:2c:5f:b0:e0:58:2c:2c:86:19:c5: 50:6e:30:5d:1c:8a:2a:99:37:5e:1e:68:56:c1:96: 77:71:e6:84:eb:c2:4f:bc:a3:fa:01:54:f0:1b:00: 7d:15:e6:88:8c:12:2d:ff:54:2f:66:26:73:56:77: 9b:5c:6e:36:66:83:0b:fb:9b:2b:52:e4:58:c2:56: ee:16:c4:90:be:dc:5f:69:3e:b2:c7:98:1b:ee:ac: ac:56:60:37:2c:6b:85:82:da:ea:d5:01:f4:e8:aa: c5:52:91:ee:fb:64:42:42:dd:ab:46:ad:a8:7c:39: 85:0f:9f:6e:a1:2a:6f:48:37:a5:ae:7e:b8:55:95: 43:9c:30:60:63:0b:9a:eb:ab:9f:0f:1a:0f:b8:69: 90:36:36:80:52:38:cf:7e:5d:3e:77:3b:91:4b:d5: b8:be:2a:d7:8a:cb:c4:d5:53:1b:d5:6f:c3:1a:73: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C0:66:17:19:29:F3:3E:BE:BA:45:A9:B4:D2:C9:B7:D8:E1:36:57 X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:93:11:22:3f:87:89:24:02:d2:68:0a:d7:62:c6:4f:6f:c5: f1:7d:ce:2a:da:43:e2:88:8d:5e:0a:24:b7:b3:b4:9d:8c:c8: b6:88:e5:9a:9e:ac:88:87:bf:2a:26:63:89:39:eb:52:ea:17: b1:c4:9e:a0:56:d1:d9:64:81:53:49:91:ae:4a:b6:7e:d8:69: 31:e6:b2:7f:db:3a:ae:93:d0:50:33:f5:64:2c:86:93:8a:9a: ee:5a:1e:32:79:09:20:1d:44:46:5b:4f:fe:f4:b9:4a:67:f9: a5:f0:08:29:7e:26:84:20:85:d9:e3:ca:8c:28:41:12:0f:6e: 9f:8d:e0:51:53:04:85:b1:47:4e:bb:1a:de:08:e1:e2:07:1e: 24:9c:8f:2c:17:27:d6:aa:6a:7a:66:7d:46:aa:cc:e2:50:2a: 20:be:ac:5e:3c:56:c6:86:05:96:d0:d0:15:e0:2d:07:dc:67: 8c:ab:17:48:6c:0e:08:2b:b8:76:a4:84:24:6b:ea:50:f0:f4: e2:48:ec:cd:f2:6f:b7:df:1f:66:ce:13:6f:a7:da:a3:9e:ac: ac:c5:b4:7f:c1:de:c3:8d:52:26:fd:75:ea:68:43:71:e9:d2: 26:e1:d6:51:4d:c6:69:e0:66:ef:12:85:63:05:be:d8:55:bf: ce:3e:89:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBQzcxMTAvBgNVBAUTKDM1MkQ0Q0VDMzZGOEVGQ0UwRDg1MTIwRDk3RDkxRTIy QTM1OEY1OEIwHhcNMjUxMjIzMDUxODI1WhcNMjUxMjMwMDUxODI1WjAYMRYwFAYD VQQDDA02OTRhMjYyMS04MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi0Tiv5jlThxlb0DJ6Zofva1Ens0mmOpkyYr/9+LfqWrrOMK8PDVtR7fW5IcV 9Gv+cpGvhSH8ew4DNwS0SzNNSeq9uVK+OCyVNZXhtt3NACxfsOBYLCyGGcVQbjBd HIoqmTdeHmhWwZZ3ceaE68JPvKP6AVTwGwB9FeaIjBIt/1QvZiZzVnebXG42ZoML +5srUuRYwlbuFsSQvtxfaT6yx5gb7qysVmA3LGuFgtrq1QH06KrFUpHu+2RCQt2r Rq2ofDmFD59uoSpvSDelrn64VZVDnDBgYwua66ufDxoPuGmQNjaAUjjPfl0+dzuR S9W4virXisvE1VMb1W/DGnMo6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTAZhcZ KfM+vrpFqbTSybfY4TZXMB8GA1UdIwQYMBaAFDUtTOw2+O/ODYUSDZfZHiKjWPWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUFDNy80MUE0NkI1MEYz OTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4NE5oUklObDlrZUlxTlk5 WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUFDNy80MUE0NkI1MEYzOTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4 NE5oUklObDlrZUlxTlk5WXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8kxEiP4eJJALSaArXYsZPb8Xxfc4q2kPiiI1eCiS3s7SdjMi2iOWa nqyIh78qJmOJOetS6hexxJ6gVtHZZIFTSZGuSrZ+2Gkx5rJ/2zquk9BQM/VkLIaT ipruWh4yeQkgHURGW0/+9LlKZ/ml8AgpfiaEIIXZ48qMKEESD26fjeBRUwSFsUdO uxreCOHiBx4knI8sFyfWqmp6Zn1GqsziUCogvqxePFbGhgWW0NAV4C0H3GeMqxdI bA4IK7h2pIQka+pQ8PTiSOzN8m+33x9mzhNvp9qjnqysxbR/wd7DjVIm/XXqaENx 6dIm4dZRTcZp4GbvEoVjBb7YVb/OPomS -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:12 2025 by rpki-client