This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: ou3WA/Da+KtjfRF8yWIUVRFlFqAQOH27232iNw33Vl4= Subject key identifier: 05:4B:6A:2B:5B:D7:04:29:04:83:1B:08:CA:30:2D:21:6F:1E:7F:5B Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C9D Signing time: Sat 20 Dec 2025 18:06:01 +0000 Manifest this update: Sat 20 Dec 2025 18:06:01 +0000 Manifest next update: Sat 27 Dec 2025 18:06:01 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: wMic/5hvYscNzP4ZGSWQ71FiC2g0X7z6DrpFUKyE9/A=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: BkjDTlDXiLb184XcwheLXYHUcW7lSFDCL708YWhcDi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Dec 20 18:06:01 2025 GMT Not After : Dec 27 18:06:01 2025 GMT Subject: CN=6946e589-c5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:08:86:18:90:f6:1c:ec:c8:cf:9e:94:65: dd:46:3c:d8:05:6c:b4:40:db:4a:25:fb:92:7f:37: 0e:3b:de:66:c3:a3:86:b4:3c:68:15:10:b4:11:fc: 8b:b4:0d:65:e3:08:c1:d3:49:1e:55:d6:b9:ce:da: 56:d6:1e:54:66:42:aa:e2:0d:28:36:c8:02:ce:8c: 9c:fc:ce:59:63:7e:48:3e:25:4e:42:8c:9d:82:c1: b3:ba:74:56:1f:8a:13:80:a7:75:b4:25:36:26:5b: 62:99:91:a3:e7:b1:60:6f:15:73:a9:1d:54:3e:96: c4:dd:98:be:38:86:45:95:c7:16:c0:4e:23:61:87: 1c:bf:41:52:0f:23:76:64:ee:c7:d8:54:c9:42:af: 9d:31:0a:b0:a6:e2:84:f1:28:37:81:f2:5c:10:79: 28:e2:53:e7:cd:72:4b:45:f5:52:d7:0d:aa:81:db: 51:49:19:be:66:25:65:c5:b0:89:76:3c:2e:76:0a: 5d:d0:81:51:61:25:4c:3f:35:a1:8c:87:cb:d0:d9: 0d:02:dc:75:c0:f3:5d:0e:00:01:99:24:4a:48:ae: 42:af:1f:84:7a:7d:eb:ac:15:27:bd:f5:e6:22:16: 37:43:1b:37:48:e5:ce:cc:7f:01:4b:b5:cd:36:f9: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4B:6A:2B:5B:D7:04:29:04:83:1B:08:CA:30:2D:21:6F:1E:7F:5B X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:0d:c0:f7:39:b0:a8:30:e8:c5:2a:ed:4c:be:27:b3:e4:ad: 2c:3b:bb:0a:69:88:b3:69:b2:01:97:0b:27:39:f3:b1:b0:70: 91:6d:2d:7d:64:6b:be:0f:eb:94:30:bc:8a:b8:44:5d:db:cd: 40:71:f3:dc:a6:07:11:82:bb:90:6a:af:a0:85:99:8c:0f:cd: b7:20:f1:db:2e:39:f8:69:ea:ad:05:70:c7:43:fe:59:4e:c9: 21:27:76:45:6f:c7:f0:bd:01:6b:f0:7a:94:82:8f:29:0c:46: 68:e9:b1:b2:8d:30:40:83:70:ee:d6:f8:25:31:af:e9:d6:52: 75:6d:38:3f:5e:46:fc:fa:03:36:29:c1:9e:6f:d4:32:dc:f5: cf:c9:98:4c:cc:78:35:98:df:6b:23:a2:c3:4f:68:a5:ec:44: 85:39:64:83:7e:f2:52:fc:65:c3:9d:50:80:2f:fe:3f:bb:15: 84:10:e8:ef:34:c0:41:e3:e8:86:4e:49:f5:b3:ac:e1:e7:0d: 66:23:ec:6d:8f:26:67:19:c0:79:a3:8b:c0:d0:f5:52:28:c5: cb:19:cd:87:a3:93:15:87:40:ee:e9:c2:12:b0:26:f2:64:9f: f2:64:c2:1f:42:d0:22:18:7b:79:2e:e3:10:2e:08:91:ff:57: bb:2c:cd:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUxMjIwMTgwNjAxWhcNMjUxMjI3MTgwNjAxWjAYMRYwFAYD VQQDDA02OTQ2ZTU4OS1jNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZMIhhiQ9hzsyM+elGXdRjzYBWy0QNtKJfuSfzcOO95mw6OGtDxoFRC0EfyL tA1l4wjB00keVda5ztpW1h5UZkKq4g0oNsgCzoyc/M5ZY35IPiVOQoydgsGzunRW H4oTgKd1tCU2JltimZGj57FgbxVzqR1UPpbE3Zi+OIZFlccWwE4jYYccv0FSDyN2 ZO7H2FTJQq+dMQqwpuKE8Sg3gfJcEHko4lPnzXJLRfVS1w2qgdtRSRm+ZiVlxbCJ djwudgpd0IFRYSVMPzWhjIfL0NkNAtx1wPNdDgABmSRKSK5Crx+Een3rrBUnvfXm IhY3Qxs3SOXOzH8BS7XNNvm7vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVLaitb 1wQpBIMbCMowLSFvHn9bMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClDcD3ObCoMOjFKu1Mviez5K0sO7sKaYizabIBlwsnOfOxsHCRbS19 ZGu+D+uUMLyKuERd281AcfPcpgcRgruQaq+ghZmMD823IPHbLjn4aeqtBXDHQ/5Z TskhJ3ZFb8fwvQFr8HqUgo8pDEZo6bGyjTBAg3Du1vglMa/p1lJ1bTg/Xkb8+gM2 KcGeb9Qy3PXPyZhMzHg1mN9rI6LDT2il7ESFOWSDfvJS/GXDnVCAL/4/uxWEEOjv NMBB4+iGTkn1s6zh5w1mI+xtjyZnGcB5o4vA0PVSKMXLGc2Ho5MVh0Du6cISsCby ZJ/yZMIfQtAiGHt5LuMQLgiR/1e7LM1W -----END CERTIFICATE-----Generated at Mon Dec 22 07:25:05 2025 by rpki-client