This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: EXUdSWmnlgOq+SOamf9ACKGul+OdeJqgPTCbIFFgy8E= Subject key identifier: 3D:BC:2F:EF:34:FE:2B:CA:4F:1E:13:2B:DB:52:49:5E:EE:37:62:43 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 96 Signing time: Tue 23 Dec 2025 05:21:16 +0000 Manifest this update: Tue 23 Dec 2025 05:21:16 +0000 Manifest next update: Tue 30 Dec 2025 05:21:16 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: L3ViKMLz/x53lzkgk3NdU7sDnCmLr4ExeQQ60ZklsYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Dec 23 05:21:16 2025 GMT Not After : Dec 30 05:21:16 2025 GMT Subject: CN=694a26cc-07cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:02:9f:81:8d:76:5d:b6:ad:ea:a0:0d:97: 4b:94:1a:e6:6e:c1:3d:ad:5c:f5:da:b9:42:85:07: 0c:b1:3b:fc:a6:aa:41:68:e8:aa:8b:93:99:df:cb: 27:fb:40:f1:2d:32:dd:61:cc:78:30:95:23:a6:07: 6b:45:29:b5:73:70:a4:9d:b2:87:6a:0c:49:80:35: b9:3d:5e:0e:3b:b4:79:87:05:7c:5c:3b:7f:e0:10: 44:ba:76:82:ba:df:11:3d:d7:f6:65:dc:e0:21:ba: 48:a5:9d:2f:b0:35:75:29:4e:5e:e7:d8:29:ad:83: 3d:9a:da:c2:c0:4b:53:fd:62:b7:f5:84:cb:c5:f4: dd:57:1d:a3:8d:55:1d:8c:08:b5:1a:bb:05:09:5a: 4e:36:b1:91:4c:24:00:36:fb:ad:8f:3c:cb:cc:28: 48:ed:f5:e7:54:9f:6d:c1:90:fe:b2:40:7c:e9:f3: b4:5c:18:0c:82:78:d2:a9:f1:3b:96:11:77:81:9c: d6:39:18:8c:3f:5b:db:fd:74:7d:93:9c:33:24:a7: a4:4f:e8:36:22:1b:33:f3:ce:a7:20:f7:92:a4:79: df:cf:e7:0d:9b:2d:d2:c1:cd:85:99:6f:57:7e:39: c1:0d:86:42:1f:5e:ee:ad:34:38:38:b5:2d:1a:af: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BC:2F:EF:34:FE:2B:CA:4F:1E:13:2B:DB:52:49:5E:EE:37:62:43 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2a:5d:cd:91:af:72:f4:ff:b1:af:bf:3c:08:4e:43:28:a5: dd:a6:b7:09:5f:26:96:99:6a:97:d5:e6:1e:7d:a2:56:42:70: af:db:d5:19:6d:29:5c:2b:98:1a:94:75:90:54:2d:de:45:e4: 42:7e:e0:2a:72:ca:9d:f3:ff:00:23:03:7a:9f:7e:d7:2d:dd: ed:df:02:5e:54:38:e2:24:c9:c4:d8:48:cb:19:88:e7:23:7a: f0:66:08:cf:f0:65:01:e5:11:8a:ef:f1:67:0b:27:21:c5:36: 9d:44:4e:ee:76:86:85:59:09:f5:9f:73:95:8f:bf:19:29:83: d0:39:5b:06:b9:25:2c:36:10:3c:4c:e3:67:9b:90:f1:d5:24: 8e:03:d3:4e:f0:f6:6e:3c:b6:07:28:9e:70:1a:70:f6:89:9f: f8:59:3c:1e:30:53:c0:f9:32:68:8b:d2:74:3d:92:93:04:2c: 6b:d8:d7:54:b8:98:15:e5:57:14:a7:f3:69:04:7c:bc:d8:ce: 21:08:42:40:4b:45:57:00:90:7b:39:76:4d:41:16:a8:df:64: dc:f4:49:e2:36:b0:e3:9f:dd:05:f0:3f:63:e6:fe:b9:ab:93: bb:4e:5c:1d:60:35:9c:9a:48:9a:6d:d2:2f:0c:9f:f2:10:22: df:0a:f4:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKDlFNzFGQjcxQjY3MDBDNDA0NUE1QzM0MEMxOEYxMzBG MDg2MEFBMzkwHhcNMjUxMjIzMDUyMTE2WhcNMjUxMjMwMDUyMTE2WjAYMRYwFAYD VQQDDA02OTRhMjZjYy0wN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SACn4GNdl22reqgDZdLlBrmbsE9rVz12rlChQcMsTv8pqpBaOiqi5OZ38sn +0DxLTLdYcx4MJUjpgdrRSm1c3CknbKHagxJgDW5PV4OO7R5hwV8XDt/4BBEunaC ut8RPdf2ZdzgIbpIpZ0vsDV1KU5e59gprYM9mtrCwEtT/WK39YTLxfTdVx2jjVUd jAi1GrsFCVpONrGRTCQANvutjzzLzChI7fXnVJ9twZD+skB86fO0XBgMgnjSqfE7 lhF3gZzWORiMP1vb/XR9k5wzJKekT+g2Ihsz886nIPeSpHnfz+cNmy3Swc2FmW9X fjnBDYZCH17urTQ4OLUtGq8CEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD28L+80 /ivKTx4TK9tSSV7uN2JDMB8GA1UdIwQYMBaAFJ5x+3G2cAxARaXDQMGPEw8IYKo5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy81NDY2NkIzQ0Y5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RFQkZwY05Bd1k4VER3aGdx amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy81NDY2NkIzQ0Y5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RF QkZwY05Bd1k4VER3aGdxamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADKl3Nka9y9P+xr788CE5DKKXdprcJXyaWmWqX1eYefaJWQnCv29UZ bSlcK5galHWQVC3eReRCfuAqcsqd8/8AIwN6n37XLd3t3wJeVDjiJMnE2EjLGYjn I3rwZgjP8GUB5RGK7/FnCychxTadRE7udoaFWQn1n3OVj78ZKYPQOVsGuSUsNhA8 TONnm5Dx1SSOA9NO8PZuPLYHKJ5wGnD2iZ/4WTweMFPA+TJoi9J0PZKTBCxr2NdU uJgV5VcUp/NpBHy82M4hCEJAS0VXAJB7OXZNQRao32Tc9EniNrDjn90F8D9j5v65 q5O7TlwdYDWcmkiabdIvDJ/yECLfCvSC -----END CERTIFICATE-----Generated at Tue Dec 23 18:05:40 2025 by rpki-client