This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: jZ/CET375SDq9sr07Bls44lXf80ePS2oDJaAGF3GZ5A= Subject key identifier: FA:3A:88:5D:F6:29:E9:86:7E:25:2E:B3:21:FB:93:93:39:00:D0:AE Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C87 Signing time: Wed 10 Dec 2025 17:43:18 +0000 Manifest this update: Wed 10 Dec 2025 17:43:18 +0000 Manifest next update: Wed 17 Dec 2025 17:43:18 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: Es/rxobER4KXBK4vb2q88I++4L7qSeu/yLHaim1/BdM=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Dec 10 17:43:18 2025 GMT Not After : Dec 17 17:43:18 2025 GMT Subject: CN=6939b136-2d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f8:5b:56:b4:75:c8:51:2c:dd:20:75:21:d8: 17:1f:ef:8b:f8:a0:d2:25:58:f7:3d:a2:91:c3:25: 5f:ec:a2:9b:0f:07:eb:0a:35:ac:2c:93:b2:d0:44: 71:6b:87:ff:ff:81:25:a4:15:1e:55:58:1c:13:8b: be:59:7c:fc:53:02:7f:8c:a7:11:64:18:9a:3b:c1: bf:78:56:e7:ec:bc:41:4e:1c:b9:29:0e:7a:f6:88: 8d:c0:d6:03:5f:67:a1:c7:d7:90:45:5d:bc:40:2a: ab:64:aa:29:69:5b:6d:e6:91:b5:e2:f4:38:2e:d9: 96:78:61:4e:78:e2:4a:f1:08:f5:a5:39:77:f5:7b: 65:04:c4:a7:53:a8:03:4a:6d:01:1d:01:13:09:92: 50:60:0d:2c:9b:f7:60:3c:63:93:49:9a:14:ee:52: 90:fc:69:01:cf:2b:cd:d6:7d:d0:90:ca:23:ce:67: 1d:77:63:2e:7d:e3:c5:5e:b2:da:33:a8:cc:6c:e9: fd:8e:6c:59:e4:e2:4d:d6:5d:a7:8f:94:1c:4b:0e: 38:dd:67:19:d4:68:6b:2b:f4:f0:32:9a:5b:5d:ae: 40:52:7e:ef:db:18:ef:ac:38:67:a2:13:4c:52:b7: 3a:01:20:4b:a5:7c:61:af:09:3b:f5:2d:6d:5f:9f: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:88:5D:F6:29:E9:86:7E:25:2E:B3:21:FB:93:93:39:00:D0:AE X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:6e:ea:3d:f7:39:d0:36:d3:cb:c7:30:af:c6:28:38:2f: 62:15:c7:9d:7e:30:de:af:b6:a4:c4:09:5a:a5:91:cd:5c:b4: e9:38:e0:08:ae:cf:1d:30:f0:31:d0:cd:62:f6:a3:ee:92:08: 3a:d2:6a:9b:0a:aa:96:22:e3:39:d7:8b:a2:74:44:70:c7:a6: 9b:39:26:1e:ef:d3:76:90:c5:5b:57:69:dd:fb:21:42:99:97: 3e:ef:9e:90:16:a5:a1:c6:73:5c:f5:41:ea:ef:9b:bc:22:4f: e6:a6:25:85:08:1c:98:0b:23:4c:a7:80:ea:0d:4b:e2:2f:53: 18:f0:4f:08:80:cc:a8:4a:77:9e:0a:6d:c2:2c:0d:fb:b9:aa: b7:b2:92:ad:f4:78:fa:d1:8a:a4:da:57:c5:10:0d:21:78:db: 6d:d5:25:18:c9:76:99:fb:0b:7e:7c:87:81:71:09:21:d0:69: b3:38:40:8f:da:29:80:e2:0a:19:a0:26:8d:e4:ed:15:b1:5b: 22:95:87:db:25:b6:ea:1a:fa:17:82:40:b8:46:82:1e:86:fc: 41:c5:40:b2:e0:1c:59:75:3e:ed:68:e2:88:46:2b:84:ff:a0: 2a:d1:71:08:e3:fa:0b:c0:fc:9c:aa:77:12:6e:71:3d:17:73: af:1c:62:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUxMjEwMTc0MzE4WhcNMjUxMjE3MTc0MzE4WjAYMRYwFAYD VQQDEw02OTM5YjEzNi0yZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PhbVrR1yFEs3SB1IdgXH++L+KDSJVj3PaKRwyVf7KKbDwfrCjWsLJOy0ERx a4f//4ElpBUeVVgcE4u+WXz8UwJ/jKcRZBiaO8G/eFbn7LxBThy5KQ569oiNwNYD X2ehx9eQRV28QCqrZKopaVtt5pG14vQ4LtmWeGFOeOJK8Qj1pTl39XtlBMSnU6gD Sm0BHQETCZJQYA0sm/dgPGOTSZoU7lKQ/GkBzyvN1n3QkMojzmcdd2MufePFXrLa M6jMbOn9jmxZ5OJN1l2nj5QcSw443WcZ1GhrK/TwMppbXa5AUn7v2xjvrDhnohNM Urc6ASBLpXxhrwk79S1tX5/RMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo6iF32 KemGfiUusyH7k5M5ANCuMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpKG7qPfc50DbTy8cwr8YoOC9iFcedfjDer7akxAlapZHNXLTpOOAI rs8dMPAx0M1i9qPukgg60mqbCqqWIuM514uidERwx6abOSYe79N2kMVbV2nd+yFC mZc+756QFqWhxnNc9UHq75u8Ik/mpiWFCByYCyNMp4DqDUviL1MY8E8IgMyoSnee Cm3CLA37uaq3spKt9Hj60Yqk2lfFEA0heNtt1SUYyXaZ+wt+fIeBcQkh0GmzOECP 2imA4goZoCaN5O0VsVsilYfbJbbqGvoXgkC4RoIehvxBxUCy4BxZdT7taOKIRiuE /6Aq0XEI4/oLwPycqncSbnE9F3OvHGJY -----END CERTIFICATE-----Generated at Fri Dec 12 02:15:27 2025 by rpki-client