This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: 9KdYdkDAHD4aOy/CRVV19brVDbH1QBNQUqE9UL4gvsI= Subject key identifier: 67:AA:AE:9D:94:E8:8D:B1:D4:28:27:9B:20:DC:89:10:AC:5B:A8:72 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0191 Signing time: Tue 23 Dec 2025 02:30:39 +0000 Manifest this update: Tue 23 Dec 2025 02:30:38 +0000 Manifest next update: Tue 30 Dec 2025 02:30:38 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: UoxaTOOJDj4BYaDwzv70D+f8+I6VuUZYRMA0AdrbSCk=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Dec 23 02:30:38 2025 GMT Not After : Dec 30 02:30:38 2025 GMT Subject: CN=6949fecf-93ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:18:18:60:9c:dd:2a:c7:e3:ba:d4:1b:88: 9e:fd:d9:4c:21:b6:36:52:4a:2a:60:f8:25:28:b2: 0c:28:3a:a2:e5:6f:94:70:73:f7:2c:d5:56:57:85: 19:4d:c7:35:d9:49:dc:42:6f:7f:48:27:de:a7:6a: 6a:6c:15:55:b1:20:1d:c8:2f:22:27:ea:22:21:05: 8c:51:4a:53:75:ac:b4:dc:95:82:7d:54:5a:36:a3: 8b:c3:f3:0a:5f:a5:af:3e:20:7f:2b:6a:33:ff:ba: a4:0e:ac:1f:80:7f:b0:db:ec:d9:3a:67:77:86:0b: a1:24:4a:d9:cd:72:0f:90:b9:76:8e:1b:53:e6:ef: ce:a6:ab:67:a2:3b:a3:00:75:a2:04:23:4d:d6:b4: 68:0e:86:6a:84:cb:0c:7a:65:1d:5e:2e:7c:29:fa: c4:f5:e8:80:82:7c:2f:6a:93:2c:22:58:b3:39:c0: 42:aa:04:38:22:74:2a:10:3e:c4:fe:f8:ac:0f:94: a3:04:6b:9b:ef:33:88:65:45:88:e4:1a:15:72:40: 12:14:7f:95:51:b2:83:75:64:4a:8d:f3:18:97:33: 8d:13:71:a7:81:f5:17:c0:0e:1e:bd:ae:08:08:5c: 08:02:c0:27:0d:36:ca:87:23:38:44:c4:1e:90:68: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:AE:9D:94:E8:8D:B1:D4:28:27:9B:20:DC:89:10:AC:5B:A8:72 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a1:80:e7:a6:9e:55:34:cc:47:8a:9e:7d:f8:86:9d:96:fe: 2e:67:0f:8d:6d:d1:00:77:d9:5a:be:08:a5:75:f8:cc:9c:8f: de:b6:ae:31:e5:c4:cf:af:e2:82:ec:8b:c8:6e:7c:ba:fc:b5: 46:a8:3f:95:c4:8d:86:05:f4:94:cd:c9:66:e0:35:04:df:0d: 87:19:c9:e7:de:36:c2:95:bb:8e:0d:c7:fa:ae:d6:4a:da:8d: 08:5f:c3:92:c6:28:46:41:26:33:42:c7:06:81:33:1f:ca:cb: a4:95:d4:31:95:37:90:bb:b7:07:c1:1a:d7:d9:3b:1f:ba:72: 50:71:e4:a5:7b:0d:c6:51:9b:f3:de:0a:1d:77:1b:6f:50:9d: 23:d7:c3:77:95:91:c1:48:15:27:39:d4:ea:21:8c:a3:60:9e: 7e:3c:2a:52:5e:6e:98:ea:86:1b:98:e8:19:4d:4a:b2:aa:51: d1:ec:24:75:bb:85:a7:31:c9:d8:95:b1:4b:24:b5:e5:40:6b: bb:fa:24:c3:a6:04:bd:99:eb:f2:19:74:a0:02:db:3d:a5:87: 39:56:f6:5f:d4:7c:29:fe:fb:19:d9:98:37:ae:6f:b4:f0:b6: 79:0c:82:73:de:dd:80:4e:ab:a7:07:99:0a:06:6a:61:67:7f: de:bf:31:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUxMjIzMDIzMDM4WhcNMjUxMjMwMDIzMDM4WjAYMRYwFAYD VQQDDA02OTQ5ZmVjZi05M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr4YGGCc3SrH47rUG4ie/dlMIbY2UkoqYPglKLIMKDqi5W+UcHP3LNVWV4UZ Tcc12UncQm9/SCfep2pqbBVVsSAdyC8iJ+oiIQWMUUpTday03JWCfVRaNqOLw/MK X6WvPiB/K2oz/7qkDqwfgH+w2+zZOmd3hguhJErZzXIPkLl2jhtT5u/Opqtnojuj AHWiBCNN1rRoDoZqhMsMemUdXi58KfrE9eiAgnwvapMsIlizOcBCqgQ4InQqED7E /visD5SjBGub7zOIZUWI5BoVckASFH+VUbKDdWRKjfMYlzONE3GngfUXwA4eva4I CFwIAsAnDTbKhyM4RMQekGj0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeqrp2U 6I2x1CgnmyDciRCsW6hyMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQoYDnpp5VNMxHip59+Iadlv4uZw+NbdEAd9lavgildfjMnI/etq4x 5cTPr+KC7IvIbny6/LVGqD+VxI2GBfSUzclm4DUE3w2HGcnn3jbClbuODcf6rtZK 2o0IX8OSxihGQSYzQscGgTMfysukldQxlTeQu7cHwRrX2TsfunJQceSlew3GUZvz 3goddxtvUJ0j18N3lZHBSBUnOdTqIYyjYJ5+PCpSXm6Y6oYbmOgZTUqyqlHR7CR1 u4WnMcnYlbFLJLXlQGu7+iTDpgS9mevyGXSgAts9pYc5VvZf1Hwp/vsZ2Zg3rm+0 8LZ5DIJz3t2ATqunB5kKBmphZ3/evzFw -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:12 2025 by rpki-client