This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: y1IxHCwuwAtOZR6+uD84CLy9JxhBXuBcrbEurr3p5fo= Subject key identifier: 0E:E4:0C:EC:07:74:A5:2F:DC:D9:7B:5B:4F:B2:34:2D:AC:31:12:58 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 08E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0A38 Signing time: Mon 22 Dec 2025 19:47:10 +0000 Manifest this update: Mon 22 Dec 2025 19:47:09 +0000 Manifest next update: Mon 29 Dec 2025 19:47:09 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: WfV3jMk9hCfGZYCSmtap2f7iNU5ogIqJhuMHdBVh0ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2275 (0x8e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Dec 22 19:47:09 2025 GMT Not After : Dec 29 19:47:09 2025 GMT Subject: CN=6949a03e-25d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:48:91:09:3c:5f:40:ba:5b:e9:1b:9b:3f: 39:8a:df:bb:8e:51:c7:dd:aa:02:a4:b8:63:61:ca: 91:82:ab:29:33:79:54:a8:34:04:fa:95:e5:3c:72: b7:49:35:a4:8e:30:46:42:94:49:6c:bc:d3:46:77: 0c:47:7c:ee:9c:fc:da:a3:ad:75:a5:6d:c6:7a:55: 4c:67:68:f0:40:2f:bd:35:c9:d4:11:0c:d7:53:09: 06:89:fe:cb:51:5e:3d:17:00:ab:64:85:a4:ae:a5: 00:1a:74:a4:ba:f9:82:62:88:7b:de:63:51:49:e4: df:2b:da:71:41:ce:a3:e4:44:97:b8:17:2d:e2:74: 1a:1b:df:97:ab:15:3b:b6:43:02:f5:fe:08:a3:94: 68:9c:3b:aa:42:b5:11:5b:61:02:94:09:c6:6c:5a: 8f:03:3f:81:54:f0:85:6f:a8:db:d5:10:ca:51:54: 15:88:ae:ba:c1:f9:f3:ec:e3:79:95:2c:e1:92:9a: b3:af:e9:6c:e5:95:a8:e0:79:0c:08:5f:4e:8e:0f: d9:08:5d:da:88:a3:77:24:35:cc:62:3d:ef:af:a2: 6b:ec:87:76:f8:f4:db:a2:ed:a0:27:6b:e0:43:2c: df:06:5d:d1:a4:66:9e:25:fd:10:52:ef:48:d2:13: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E4:0C:EC:07:74:A5:2F:DC:D9:7B:5B:4F:B2:34:2D:AC:31:12:58 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:02:72:15:a4:b1:d6:21:4f:6a:05:3e:68:d8:fc:f4:3b:e3: b9:b1:f7:da:9e:de:d6:ae:d3:40:0d:30:1d:ab:aa:30:69:55: e5:56:89:11:5b:64:46:45:3d:e1:e3:bb:fe:31:9e:78:24:dc: 9f:1a:66:b8:ef:01:97:a9:fc:ba:b5:ae:17:b3:c3:3d:f3:61: cd:56:16:e0:34:95:7d:34:ee:f4:3b:68:c5:0a:6d:59:64:82: cd:5c:af:55:98:6a:d8:1d:51:72:12:d0:e1:6e:49:31:a5:a1: 36:1c:da:3d:c1:9d:77:f1:e2:c4:9f:29:f5:14:fd:25:87:95: d7:61:b2:33:99:62:9f:98:79:3f:2d:e9:0b:9a:34:58:2a:50: 53:e3:d4:33:3f:6a:5a:64:9e:a9:b2:a3:1e:69:df:87:bf:87: 11:fe:ef:42:a8:3c:7f:48:88:10:fd:15:cd:9f:1d:a4:ae:7c: 86:9d:5a:1e:af:19:50:bd:73:48:e5:d0:b2:96:27:66:ea:f8: 36:75:ad:4f:61:c7:c2:92:37:aa:ee:62:26:24:ea:db:32:e4: 24:68:18:07:8b:8f:78:9a:58:dd:28:73:d7:83:7f:f6:05:e4: e6:d8:8e:06:93:5a:ea:33:cf:c6:3e:15:cc:1f:02:29:9f:79: d3:14:44:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUxMjIyMTk0NzA5WhcNMjUxMjI5MTk0NzA5WjAYMRYwFAYD VQQDDA02OTQ5YTAzZS0yNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvVIkQk8X0C6W+kbmz85it+7jlHH3aoCpLhjYcqRgqspM3lUqDQE+pXlPHK3 STWkjjBGQpRJbLzTRncMR3zunPzao611pW3GelVMZ2jwQC+9NcnUEQzXUwkGif7L UV49FwCrZIWkrqUAGnSkuvmCYoh73mNRSeTfK9pxQc6j5ESXuBct4nQaG9+XqxU7 tkMC9f4Io5RonDuqQrURW2EClAnGbFqPAz+BVPCFb6jb1RDKUVQViK66wfnz7ON5 lSzhkpqzr+ls5ZWo4HkMCF9Ojg/ZCF3aiKN3JDXMYj3vr6Jr7Id2+PTbou2gJ2vg QyzfBl3RpGaeJf0QUu9I0hOgewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7kDOwH dKUv3Nl7W0+yNC2sMRJYMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5AnIVpLHWIU9qBT5o2Pz0O+O5sffant7WrtNADTAdq6owaVXlVokR W2RGRT3h47v+MZ54JNyfGma47wGXqfy6ta4Xs8M982HNVhbgNJV9NO70O2jFCm1Z ZILNXK9VmGrYHVFyEtDhbkkxpaE2HNo9wZ138eLEnyn1FP0lh5XXYbIzmWKfmHk/ LekLmjRYKlBT49QzP2paZJ6psqMead+Hv4cR/u9CqDx/SIgQ/RXNnx2krnyGnVoe rxlQvXNI5dCylidm6vg2da1PYcfCkjeq7mImJOrbMuQkaBgHi494mljdKHPXg3/2 BeTm2I4Gk1rqM8/GPhXMHwIpn3nTFESY -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:26 2025 by rpki-client