This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: PI5LFEVExPVP5M6swxDqdTwLlAubXnNs+IofSk2BV+Q= Subject key identifier: 0E:9B:13:53:EF:BF:02:91:AF:39:8C:51:DE:D3:D9:7B:4A:7F:BC:6D Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 5D Signing time: Tue 23 Dec 2025 05:58:50 +0000 Manifest this update: Tue 23 Dec 2025 05:58:49 +0000 Manifest next update: Tue 30 Dec 2025 05:58:49 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: a2dhTjwRY2L83CwSA9UMVEE5eIZ67VUpwlAFaPg06QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Dec 23 05:58:49 2025 GMT Not After : Dec 30 05:58:49 2025 GMT Subject: CN=694a2f9a-a8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:e9:9a:84:c0:b8:83:7c:7a:b0:d6:31:19: 11:a6:65:e5:68:89:d8:44:b2:64:0e:92:34:33:78: 70:6c:23:d9:b5:1c:f7:7a:94:c4:1b:71:92:c6:f3: 1a:61:8e:ff:64:02:ff:a0:11:df:41:e7:18:f3:c6: 88:9f:ae:6e:62:24:48:fe:03:52:96:cd:b3:80:20: 36:72:34:b7:78:ff:79:7e:f6:9f:93:c5:66:f9:5a: 74:7d:e3:61:7e:57:01:a9:fc:f7:15:90:e3:79:f5: e6:b1:95:9f:35:1d:0e:5a:b0:a7:9a:7b:33:b5:d5: 65:19:10:71:26:95:62:e7:69:1b:68:b4:9b:e0:e3: 8a:7a:a1:47:fa:47:dc:3b:9b:d0:91:fc:97:f1:f2: e8:5b:ee:6d:86:8f:02:75:40:93:88:4e:9c:8e:9a: d1:cd:b0:09:ff:d2:55:cb:ec:55:9e:9f:66:be:c4: ba:2e:d6:ba:44:88:72:7a:3e:ab:fe:b2:d2:30:2a: d0:62:ba:87:d4:6b:80:df:51:21:0b:6b:ea:94:dc: ff:fc:ef:fa:b0:cd:5e:7a:15:f6:92:a9:a7:c5:b0: cc:cd:55:8d:64:9f:5e:04:1a:cc:97:ec:36:10:50: 54:8b:12:ee:d6:bc:fd:b1:1f:48:35:da:ad:3e:85: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9B:13:53:EF:BF:02:91:AF:39:8C:51:DE:D3:D9:7B:4A:7F:BC:6D X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3b:96:ca:3c:4b:12:a5:ff:5d:d3:91:9a:fb:54:1c:36:e4: 95:e2:03:ad:a9:e2:e7:8b:2e:05:01:cb:14:f2:cf:79:11:d8: ea:46:93:16:fd:60:34:ab:8f:28:3a:9e:91:5a:a8:86:76:83: 9e:f0:c1:53:9b:4c:ef:d9:71:ae:42:34:fa:d2:0e:21:be:55: 3b:92:1b:eb:98:b2:a1:48:b4:01:89:31:43:14:2a:1e:d6:d3: 40:fe:f3:1f:2a:02:86:94:35:53:94:44:8a:9b:89:76:9c:a5: 54:29:61:91:8d:19:cd:8b:70:d1:7a:43:43:bf:24:07:13:b6: 92:88:d6:bd:3b:86:c1:f9:b6:f6:50:c3:5f:f9:32:61:27:10: 1e:37:8c:18:89:f7:6e:f3:72:0a:63:dd:c2:ab:e0:d7:88:85: ae:41:95:53:1d:13:a5:b6:0b:7a:84:9f:d8:2d:77:b2:3a:7d: a2:71:b9:dd:bc:43:f8:7f:ce:6b:9b:86:57:95:5d:92:4d:fc: f9:06:a0:1d:6e:8f:63:d8:d3:ba:88:89:a3:08:5d:04:26:11: ca:6c:5e:0a:21:37:6e:f5:4f:d4:0c:21:12:ad:33:e0:5f:22: 82:e3:e8:ba:46:f8:c5:8c:db:3d:a7:0c:e3:b9:42:23:f9:fd: bc:e5:b1:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTEyMjMwNTU4NDlaFw0yNTEyMzAwNTU4NDlaMBgxFjAUBgNV BAMMDTY5NGEyZjlhLWE4ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV7umahMC4g3x6sNYxGRGmZeVoidhEsmQOkjQzeHBsI9m1HPd6lMQbcZLG8xph jv9kAv+gEd9B5xjzxoifrm5iJEj+A1KWzbOAIDZyNLd4/3l+9p+TxWb5WnR942F+ VwGp/PcVkON59eaxlZ81HQ5asKeaezO11WUZEHEmlWLnaRtotJvg44p6oUf6R9w7 m9CR/Jfx8uhb7m2GjwJ1QJOITpyOmtHNsAn/0lXL7FWen2a+xLou1rpEiHJ6Pqv+ stIwKtBiuofUa4DfUSELa+qU3P/87/qwzV56FfaSqafFsMzNVY1kn14EGsyX7DYQ UFSLEu7WvP2xH0g12q0+hbhVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDpsTU++/ ApGvOYxR3tPZe0p/vG0wHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAo7lso8SxKl/13TkZr7VBw25JXiA62p4ueLLgUByxTyz3kR2OpGkxb9 YDSrjyg6npFaqIZ2g57wwVObTO/Zca5CNPrSDiG+VTuSG+uYsqFItAGJMUMUKh7W 00D+8x8qAoaUNVOURIqbiXacpVQpYZGNGc2LcNF6Q0O/JAcTtpKI1r07hsH5tvZQ w1/5MmEnEB43jBiJ927zcgpj3cKr4NeIha5BlVMdE6W2C3qEn9gtd7I6faJxud28 Q/h/zmubhleVXZJN/PkGoB1uj2PY07qIiaMIXQQmEcpsXgohN271T9QMIRKtM+Bf IoLj6LpG+MWM2z2nDOO5QiP5/bzlsco= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:47 2025 by rpki-client