This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: ZsXdU1z/qUqo0RoRs/KIMPzB5KIoaEhrwXril9drpB8= Subject key identifier: FC:4E:CC:D7:B0:11:25:88:79:29:E0:8C:C6:DC:E8:AA:C3:53:B9:8C Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 04FC Signing time: Mon 22 Dec 2025 22:47:59 +0000 Manifest this update: Mon 22 Dec 2025 22:47:59 +0000 Manifest next update: Mon 29 Dec 2025 22:47:59 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: Ipsp+Mj1EqigEYOEEF/3ctcKscFRR40hpdXYIt+oo9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: Dec 22 22:47:59 2025 GMT Not After : Dec 29 22:47:59 2025 GMT Subject: CN=6949ca9f-6815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:d0:42:0c:9a:08:b1:a9:3c:56:01:ec:c1: 9e:b0:7b:b8:a9:e5:c4:99:57:83:b4:02:30:8b:8b: a1:e8:d0:7f:f2:eb:cd:02:ab:c1:c3:8e:c2:2a:57: 10:1b:20:3d:f9:82:08:02:d0:cb:69:6c:81:ea:72: 21:fb:52:c0:1a:83:03:90:d4:8e:33:e9:2d:1b:e4: 6b:c9:92:9f:b0:8c:e3:61:bd:58:82:12:86:77:bf: e8:ce:90:b9:86:2f:cb:5a:6b:2e:89:10:8a:8e:2a: 3b:d6:9e:0d:47:bb:ea:54:56:d3:19:83:e2:98:76: 44:5f:ee:16:d2:aa:29:d2:ef:9e:e3:73:b6:cb:75: 01:d8:b2:0d:8b:99:f3:41:d0:bf:50:51:f5:66:e5: ac:01:e5:4c:a9:cd:05:2b:11:62:be:fa:2e:fb:c4: 57:c4:d1:3c:eb:cb:9c:5e:9e:37:1d:d5:c1:94:f5: d6:4c:e7:4e:10:17:50:22:15:b9:d8:74:3c:dd:13: 5f:2f:27:05:9b:fd:09:47:a6:37:c0:7a:0a:0f:33: 46:8e:c0:15:d0:bf:08:80:65:4a:e2:c9:1c:1b:3f: 2e:10:51:25:26:56:6e:7f:dd:f5:c5:e8:b3:7d:de: e8:74:a3:a7:d1:0c:06:10:5f:a1:56:70:14:be:85: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4E:CC:D7:B0:11:25:88:79:29:E0:8C:C6:DC:E8:AA:C3:53:B9:8C X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:47:15:45:ed:eb:45:33:57:97:86:fa:61:5e:06:af:35:9b: 48:03:da:06:ea:cf:80:57:00:ae:e3:80:56:f5:9a:4b:43:0c: bc:2c:2a:e5:68:8d:a3:38:c9:11:6e:bf:75:e9:a0:04:45:d4: 3c:26:5f:2c:09:f7:35:96:8a:f4:06:66:e4:89:76:48:d2:7e: d6:ba:97:72:bc:26:f5:9c:b4:e9:68:61:65:3e:d2:f5:64:80: b5:7b:d7:38:4b:ed:4e:fa:3f:de:a3:11:35:0d:de:3b:aa:08: 47:5b:a4:c7:7c:ed:a2:01:c9:fa:ca:0a:91:17:da:9f:ff:e2: 7d:65:70:12:33:74:25:e0:ff:1d:7e:59:fa:39:38:71:53:fa: 89:dc:1a:41:8f:e2:f6:3f:37:92:7d:84:00:40:b8:36:5d:9b: 57:8d:bd:8e:d7:d9:cf:11:74:60:dd:fb:a6:a7:b0:c5:c6:17: d2:01:d5:a1:75:02:05:02:2c:86:79:69:73:46:4e:f7:55:09: b2:6a:a5:d9:78:a0:77:1a:9e:87:51:af:17:71:61:6f:eb:d4: f6:a9:83:f8:9c:c4:5c:03:a5:d7:1a:64:ad:c5:1f:89:d1:85: 9e:6b:bc:aa:39:c7:56:33:9d:a2:61:62:c0:1e:b5:5c:76:06: c0:83:56:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUxMjIyMjI0NzU5WhcNMjUxMjI5MjI0NzU5WjAYMRYwFAYD VQQDDA02OTQ5Y2E5Zi02ODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl43QQgyaCLGpPFYB7MGesHu4qeXEmVeDtAIwi4uh6NB/8uvNAqvBw47CKlcQ GyA9+YIIAtDLaWyB6nIh+1LAGoMDkNSOM+ktG+RryZKfsIzjYb1YghKGd7/ozpC5 hi/LWmsuiRCKjio71p4NR7vqVFbTGYPimHZEX+4W0qop0u+e43O2y3UB2LINi5nz QdC/UFH1ZuWsAeVMqc0FKxFivvou+8RXxNE868ucXp43HdXBlPXWTOdOEBdQIhW5 2HQ83RNfLycFm/0JR6Y3wHoKDzNGjsAV0L8IgGVK4skcGz8uEFElJlZuf931xeiz fd7odKOn0QwGEF+hVnAUvoVJBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxOzNew ESWIeSngjMbc6KrDU7mMMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpRxVF7etFM1eXhvphXgavNZtIA9oG6s+AVwCu44BW9ZpLQwy8LCrl aI2jOMkRbr916aAERdQ8Jl8sCfc1lor0BmbkiXZI0n7WupdyvCb1nLTpaGFlPtL1 ZIC1e9c4S+1O+j/eoxE1Dd47qghHW6THfO2iAcn6ygqRF9qf/+J9ZXASM3Ql4P8d fln6OThxU/qJ3BpBj+L2PzeSfYQAQLg2XZtXjb2O19nPEXRg3fump7DFxhfSAdWh dQIFAiyGeWlzRk73VQmyaqXZeKB3Gp6HUa8XcWFv69T2qYP4nMRcA6XXGmStxR+J 0YWea7yqOcdWM52iYWLAHrVcdgbAg1ah -----END CERTIFICATE-----Generated at Tue Dec 23 16:13:02 2025 by rpki-client