This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json) Hash identifier: JETVIY/9n32MMRENBLhRxzIDPOWd7mWox6lcwReR37s= Subject key identifier: 77:A4:9E:04:45:EF:A5:D3:67:53:4F:43:5B:F9:2F:68:35:93:1C:AD Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft Manifest number: 014C Signing time: Tue 23 Dec 2025 03:14:30 +0000 Manifest this update: Tue 23 Dec 2025 03:14:30 +0000 Manifest next update: Tue 30 Dec 2025 03:14:30 +0000 Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: SByYiLgjjw9B6JU5MaakojUP0GRE2YJvM7tsRNWKHDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Validity Not Before: Dec 23 03:14:30 2025 GMT Not After : Dec 30 03:14:30 2025 GMT Subject: CN=694a0916-2e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:ed:ea:51:c3:06:a8:6d:38:d5:f7:25:5b: 9a:6b:bf:72:bc:b6:f2:3b:e5:a8:07:77:92:2a:8d: ee:94:cc:6c:c5:ac:35:24:b6:fe:18:4a:cd:3c:be: 93:cb:25:90:ba:62:56:a1:f9:35:97:c8:68:15:0d: b2:70:fa:ae:b5:8a:2d:92:cd:1d:69:82:9f:a5:be: cf:49:af:a8:c4:99:1c:0d:92:e0:10:5d:df:ed:31: 67:09:b9:c2:5f:b9:57:f0:5d:cd:6f:b9:b3:a8:dd: fe:2f:bf:69:80:c6:06:62:ab:16:b6:48:e0:7b:4b: 07:59:3d:dd:af:34:c3:82:6a:45:b0:52:5d:97:dd: 96:64:1c:5e:75:f6:8a:21:9c:b5:58:80:76:f5:3b: e4:46:9c:f3:6b:f4:6e:71:fe:44:20:24:7c:ac:5b: ad:b3:12:3b:ba:b0:98:fe:55:ea:a6:c8:e9:35:46: 35:61:28:e0:3d:9c:55:21:45:10:68:ca:e6:c2:a3: 43:38:f9:a4:bc:ab:74:b7:0c:10:87:8d:a4:81:f6: a5:f1:dc:d5:0a:64:75:03:24:c0:44:7c:84:03:4c: f4:ff:b0:5d:a5:55:b7:5a:ed:c5:9e:f5:27:54:58: 57:7a:3d:be:c0:c9:01:6a:70:e4:06:79:a6:64:a7: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A4:9E:04:45:EF:A5:D3:67:53:4F:43:5B:F9:2F:68:35:93:1C:AD X509v3 Authority Key Identifier: keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f9:c1:ff:72:3f:34:6e:9d:8b:40:55:61:83:67:c5:6a:e2: b7:d8:c5:c4:c1:f0:d9:98:43:fe:12:81:34:e9:d6:0b:c8:15: fc:61:3e:f3:7f:f8:e2:ff:6c:0a:e3:48:de:4f:79:8b:7c:77: be:16:23:8e:13:d5:80:d1:f3:9c:5e:e5:99:d1:56:43:76:fd: 00:02:73:cf:eb:c6:92:d9:c9:79:68:76:eb:15:2b:99:8d:f8: 45:dc:6c:c2:e0:ad:e5:9a:a0:b2:53:9c:ba:46:c6:48:06:61: 9b:e4:3f:84:d1:f6:0f:99:ce:dd:b6:b7:8e:c9:b5:27:3e:3f: 0b:e4:65:b0:c4:54:bb:bb:d5:43:52:17:ed:f9:62:a1:2e:4c: a8:42:ee:86:6b:35:e3:ae:be:ae:57:f3:d9:42:95:89:0d:b4: e7:bc:6f:a7:87:82:4f:f6:c5:da:ac:5d:d7:a7:ca:47:5b:cd: 36:fa:d2:11:7e:fa:b7:d3:eb:4e:9a:c0:6f:5d:7c:c7:52:5f: 1a:ab:14:39:2e:4b:d0:94:d3:da:1f:8e:92:2b:bd:d6:ce:b2: 43:fb:67:f6:72:20:05:2f:76:d9:81:fa:cd:53:97:02:00:93: 36:3e:4f:75:3a:06:a4:4e:d3:c5:1e:91:eb:a6:2b:dd:23:e6: 3c:10:15:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDREQxMTAvBgNVBAUTKDlENDYwNDQwNjBGQTk2RTk0QTIzMUUwMzBBMzBFM0Q2 NTRGNDExQUUwHhcNMjUxMjIzMDMxNDMwWhcNMjUxMjMwMDMxNDMwWjAYMRYwFAYD VQQDDA02OTRhMDkxNi0yZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWTt6lHDBqhtONX3JVuaa79yvLbyO+WoB3eSKo3ulMxsxaw1JLb+GErNPL6T yyWQumJWofk1l8hoFQ2ycPqutYotks0daYKfpb7PSa+oxJkcDZLgEF3f7TFnCbnC X7lX8F3Nb7mzqN3+L79pgMYGYqsWtkjge0sHWT3drzTDgmpFsFJdl92WZBxedfaK IZy1WIB29TvkRpzza/Rucf5EICR8rFutsxI7urCY/lXqpsjpNUY1YSjgPZxVIUUQ aMrmwqNDOPmkvKt0twwQh42kgfal8dzVCmR1AyTARHyEA0z0/7BdpVW3Wu3FnvUn VFhXej2+wMkBanDkBnmmZKfEoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHekngRF 76XTZ1NPQ1v5L2g1kxytMB8GA1UdIwQYMBaAFJ1GBEBg+pbpSiMeAwow49ZU9BGu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NERC85MzZCMzFFMERE MEQxMUVFOUQyOTJENkFDNEY5QUUwMi9uVVlFUUdENmx1bEtJeDREQ2pEajFsVDBF YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25VWUVRR0Q2bHVsS0l4NERDakRqMWxUMEVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NERC85MzZCMzFFMEREMEQxMUVFOUQyOTJENkFDNEY5QUUwMi9uVVlFUUdENmx1 bEtJeDREQ2pEajFsVDBFYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ+cH/cj80bp2LQFVhg2fFauK32MXEwfDZmEP+EoE06dYLyBX8YT7z f/ji/2wK40jeT3mLfHe+FiOOE9WA0fOcXuWZ0VZDdv0AAnPP68aS2cl5aHbrFSuZ jfhF3GzC4K3lmqCyU5y6RsZIBmGb5D+E0fYPmc7dtreOybUnPj8L5GWwxFS7u9VD Uhft+WKhLkyoQu6GazXjrr6uV/PZQpWJDbTnvG+nh4JP9sXarF3Xp8pHW802+tIR fvq30+tOmsBvXXzHUl8aqxQ5LkvQlNPaH46SK73WzrJD+2f2ciAFL3bZgfrNU5cC AJM2Pk91OgakTtPFHpHrpivdI+Y8EBVO -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:13 2025 by rpki-client