This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: er2zfC1OniBCuks1NUvUaz5pU1JwWC1hytqCQEsaJo0= Subject key identifier: 12:58:FF:B6:28:F7:B8:3F:21:A6:3A:7B:8E:C9:0B:D0:FB:6C:76:4C Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 0415 Signing time: Mon 22 Dec 2025 23:27:33 +0000 Manifest this update: Mon 22 Dec 2025 23:27:33 +0000 Manifest next update: Mon 29 Dec 2025 23:27:33 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: C0LId2uqpD8HGa/YBg/rk3BGmGV0yF0+NPI30zcnbb0=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Dec 22 23:27:33 2025 GMT Not After : Dec 29 23:27:33 2025 GMT Subject: CN=6949d3e5-c0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:1b:77:70:9d:a3:ab:8a:47:44:ce:03:d1: 45:44:8d:50:36:58:ba:16:66:4b:87:35:67:41:d5: 72:45:5c:46:c5:e5:61:d9:69:24:fb:43:01:e3:2e: c6:12:91:fb:b2:70:d5:a5:f7:88:41:3e:b1:07:e1: 17:83:85:6b:2d:e4:3f:7b:0b:39:f9:7a:59:33:b3: 5e:11:92:21:58:34:48:6c:4c:9c:5d:d8:9b:3b:78: b9:c4:2a:2f:51:4b:5c:28:3b:a1:e0:7a:76:d6:bf: a1:bc:db:c9:0d:81:05:06:b1:c0:c9:51:c5:fe:f6: 17:9a:20:4f:fd:31:c8:b7:a1:6a:7c:ec:15:6b:2f: 80:04:4f:d3:2c:c9:3d:fe:39:15:06:ea:2b:bf:47: 7a:2f:63:f8:d0:b7:19:78:73:9a:19:38:f9:68:bd: 52:7f:b4:9a:5b:d4:c6:28:be:e9:6b:e0:a3:0f:42: 86:49:27:9a:35:d6:45:5f:65:46:2b:a9:80:3b:ba: 5b:aa:a6:d8:7b:10:40:4d:a2:86:d7:3b:70:3e:54: b2:a8:cb:d4:66:c8:c2:61:cb:a6:84:8f:32:1d:66: 49:d3:e6:72:4a:53:15:38:cd:fa:79:f5:ea:d1:59: 7b:74:09:4c:6c:bd:04:d1:0c:85:e5:47:08:7c:5a: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:58:FF:B6:28:F7:B8:3F:21:A6:3A:7B:8E:C9:0B:D0:FB:6C:76:4C X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:34:25:91:cc:9c:3c:05:c4:cd:20:27:24:da:c1:55:6c:ca: 70:f1:9f:f5:06:68:c5:2c:ee:cf:a1:a3:25:c3:df:93:3e:1a: 9a:7d:55:a7:00:12:f6:c2:8d:de:0e:0c:9a:fa:53:1b:82:c4: 81:a7:74:42:a8:41:0f:e6:0b:76:12:d1:a4:82:ae:68:ab:f2: 00:db:d8:7f:8d:84:b9:f1:96:bd:b6:bf:3e:b1:ff:9c:e5:98: bd:fa:53:72:eb:ca:41:d2:8c:0c:db:38:13:13:72:04:14:84: 70:00:2b:53:62:b9:75:57:8b:31:f9:fb:e7:4b:f7:76:57:a6: 58:94:08:8f:2c:77:47:6e:7d:c6:aa:57:20:52:3b:bf:6f:01: 31:86:b0:95:c9:bf:cd:39:b7:4f:23:22:4b:60:08:ae:28:c3: 4f:90:19:f9:ed:6e:b2:2e:eb:21:cc:ed:a2:19:7a:c7:e6:3f: dc:c3:26:5f:fc:56:15:01:eb:e3:37:a2:67:c3:93:3c:5e:da: 77:8c:28:89:ef:64:2c:f2:b6:b1:0d:6f:c5:12:d3:72:2b:39: 74:df:79:aa:72:17:32:0d:36:13:0e:f9:a0:d6:ff:4a:89:1d: 8c:c6:32:d0:5b:2d:98:39:57:9c:1f:9e:fd:ea:ec:3b:b6:54: 95:c6:87:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUxMjIyMjMyNzMzWhcNMjUxMjI5MjMyNzMzWjAYMRYwFAYD VQQDDA02OTQ5ZDNlNS1jMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJIbd3Cdo6uKR0TOA9FFRI1QNli6FmZLhzVnQdVyRVxGxeVh2Wkk+0MB4y7G EpH7snDVpfeIQT6xB+EXg4VrLeQ/ews5+XpZM7NeEZIhWDRIbEycXdibO3i5xCov UUtcKDuh4Hp21r+hvNvJDYEFBrHAyVHF/vYXmiBP/THIt6FqfOwVay+ABE/TLMk9 /jkVBuorv0d6L2P40LcZeHOaGTj5aL1Sf7SaW9TGKL7pa+CjD0KGSSeaNdZFX2VG K6mAO7pbqqbYexBATaKG1ztwPlSyqMvUZsjCYcumhI8yHWZJ0+ZySlMVOM36efXq 0Vl7dAlMbL0E0QyF5UcIfFpZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJY/7Yo 97g/IaY6e47JC9D7bHZMMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnNCWRzJw8BcTNICck2sFVbMpw8Z/1BmjFLO7PoaMlw9+TPhqafVWn ABL2wo3eDgya+lMbgsSBp3RCqEEP5gt2EtGkgq5oq/IA29h/jYS58Za9tr8+sf+c 5Zi9+lNy68pB0owM2zgTE3IEFIRwACtTYrl1V4sx+fvnS/d2V6ZYlAiPLHdHbn3G qlcgUju/bwExhrCVyb/NObdPIyJLYAiuKMNPkBn57W6yLushzO2iGXrH5j/cwyZf /FYVAevjN6Jnw5M8Xtp3jCiJ72Qs8raxDW/FEtNyKzl033mqchcyDTYTDvmg1v9K iR2MxjLQWy2YOVecH5796uw7tlSVxofl -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:18 2025 by rpki-client