This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: yARG7d6aK9ppKv92f1rgeGtEQRHAuGnOEQ1jOOlaojU= Subject key identifier: D2:14:F4:40:FE:0C:99:29:4C:AF:7D:D2:41:14:10:5A:21:80:EF:44 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 0868 Signing time: Mon 22 Dec 2025 20:16:45 +0000 Manifest this update: Mon 22 Dec 2025 20:16:44 +0000 Manifest next update: Mon 29 Dec 2025 20:16:44 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: plAJuxLm83cAKhz0xcUDzPp/NgU6qkDp03NA2dOcXKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Dec 22 20:16:44 2025 GMT Not After : Dec 29 20:16:44 2025 GMT Subject: CN=6949a72c-540a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:90:e5:5d:2b:3f:d9:b6:f3:c1:54:a1:fc: 41:54:f9:1a:f8:3a:ce:cd:50:45:86:67:92:d1:1c: f9:6e:e5:3a:08:8b:f2:1b:31:da:95:38:63:c6:10: 44:8f:ae:cc:cd:94:c2:82:50:70:fe:5e:42:58:62: b7:63:40:ae:82:83:bd:66:49:b3:a1:84:64:42:26: 9d:ca:b5:60:ff:38:5a:98:4b:c2:3c:12:c7:fb:59: d5:fc:07:30:f3:83:c8:ec:39:ad:1c:1a:b3:b1:a6: bc:54:ce:c0:aa:da:cb:4e:e2:e8:49:ec:f8:e7:27: 34:b7:8c:9a:d4:26:d4:09:25:5f:16:63:3f:02:ed: 96:8e:51:32:29:c9:5b:04:99:8a:fa:03:38:6e:df: 70:e3:69:7f:e4:13:53:4d:e8:f3:c3:05:de:62:e1: 0f:6f:21:0e:57:5c:95:34:f6:36:c2:fe:91:d4:e1: d8:ed:00:ab:8f:71:2d:42:ff:30:08:d6:a4:b9:7f: 4c:ea:1a:a6:76:c3:f8:3f:9f:1f:fa:94:32:06:7c: 19:c0:f7:8b:cc:87:51:cc:8b:a3:9e:99:7a:ac:d1: e9:1d:0c:ee:6c:84:a3:6c:1e:76:44:dc:01:e1:44: 1a:76:ca:9b:e6:68:68:39:3e:4c:1e:0d:38:65:69: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:F4:40:FE:0C:99:29:4C:AF:7D:D2:41:14:10:5A:21:80:EF:44 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e3:cd:24:f7:10:96:26:3b:bf:a7:93:13:28:c2:44:da:e2: 71:36:a0:6c:39:31:55:1c:64:ab:f4:ae:62:dc:63:31:16:b2: a1:9f:2a:20:59:84:a6:72:03:4f:19:e4:5c:4b:55:2d:3b:9a: ec:09:40:17:c5:e3:2f:d2:10:db:5b:58:ed:2b:59:b8:06:67: 2a:0c:62:2f:6f:53:b1:f6:d0:45:76:b5:16:d3:b8:62:bc:bc: 2e:ba:98:6e:7e:de:f5:e8:44:a7:de:b6:b0:a7:75:d6:96:2a: dd:12:a6:2f:83:1d:b3:b2:12:12:38:30:98:f9:b0:94:3f:d6: 80:4f:18:9c:db:7b:b9:ae:e4:1a:95:0b:4d:94:84:91:34:22: b7:91:ca:01:4a:8e:08:e9:18:9c:3b:2e:fa:aa:55:a1:09:a8: 42:6e:24:68:30:16:11:53:af:2f:3e:71:19:2d:c6:bc:3a:6a: f3:eb:36:29:6f:57:5c:ee:36:4b:3f:6f:c2:19:82:0c:74:73: 41:30:f7:10:ae:29:b0:a2:bf:90:10:e8:9f:f9:51:19:08:0d: 2d:82:5b:12:50:0d:58:a1:b7:55:87:04:e5:d9:40:c8:58:97: 07:2e:5c:c6:8a:57:e7:1d:55:cc:6e:91:1e:ca:f0:02:bc:53: bf:c1:60:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUxMjIyMjAxNjQ0WhcNMjUxMjI5MjAxNjQ0WjAYMRYwFAYD VQQDDA02OTQ5YTcyYy01NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8+Q5V0rP9m288FUofxBVPka+DrOzVBFhmeS0Rz5buU6CIvyGzHalThjxhBE j67MzZTCglBw/l5CWGK3Y0CugoO9ZkmzoYRkQiadyrVg/zhamEvCPBLH+1nV/Acw 84PI7DmtHBqzsaa8VM7AqtrLTuLoSez45yc0t4ya1CbUCSVfFmM/Au2WjlEyKclb BJmK+gM4bt9w42l/5BNTTejzwwXeYuEPbyEOV1yVNPY2wv6R1OHY7QCrj3EtQv8w CNakuX9M6hqmdsP4P58f+pQyBnwZwPeLzIdRzIujnpl6rNHpHQzubISjbB52RNwB 4UQadsqb5mhoOT5MHg04ZWkTqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIU9ED+ DJkpTK990kEUEFohgO9EMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4480k9xCWJju/p5MTKMJE2uJxNqBsOTFVHGSr9K5i3GMxFrKhnyog WYSmcgNPGeRcS1UtO5rsCUAXxeMv0hDbW1jtK1m4BmcqDGIvb1Ox9tBFdrUW07hi vLwuuphuft716ESn3rawp3XWlirdEqYvgx2zshISODCY+bCUP9aATxic23u5ruQa lQtNlISRNCK3kcoBSo4I6RicOy76qlWhCahCbiRoMBYRU68vPnEZLca8Omrz6zYp b1dc7jZLP2/CGYIMdHNBMPcQrimwor+QEOif+VEZCA0tglsSUA1YobdVhwTl2UDI WJcHLlzGilfnHVXMbpEeyvACvFO/wWC0 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:24 2025 by rpki-client