This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft File: Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json) Hash identifier: KbDxk8l/adbq2d74Ot40lk7JWMOtRcKAfHRsuqNnRCA= Subject key identifier: 3E:75:B0:93:4C:A5:0C:C5:2C:E3:94:6C:68:2C:3E:64:7A:30:3F:FF Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 Certificate issuer: /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft Manifest number: 01B4 Signing time: Tue 23 Dec 2025 02:07:27 +0000 Manifest this update: Tue 23 Dec 2025 02:07:27 +0000 Manifest next update: Tue 30 Dec 2025 02:07:27 +0000 Files and hashes: 1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: u0Y/KuoBLmNo2CrAnveeh/NM/B43zUxn1T6aOvQ0ctc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Validity Not Before: Dec 23 02:07:27 2025 GMT Not After : Dec 30 02:07:27 2025 GMT Subject: CN=6949f95f-4ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:97:a0:83:53:6b:78:f3:6d:29:e9:b9:cd: 8d:6e:45:71:21:b0:a4:5d:0e:e8:47:7d:42:9f:45: 61:45:27:af:88:cf:f8:a5:ba:fe:b7:d2:a2:3d:c0: 43:7a:59:a0:13:c0:b1:ac:18:68:d0:51:32:56:e6: fb:23:a7:3a:74:b7:43:65:52:a5:9a:71:09:fc:05: e4:e5:e1:70:6e:c7:05:ee:80:22:82:82:21:39:43: 0b:37:41:da:60:2a:20:41:84:a6:2b:72:13:75:ee: c2:7a:1a:58:9d:6a:68:a9:b8:47:29:a0:21:20:8b: f0:64:d8:b2:f0:f4:37:e1:5d:ed:37:5f:5a:68:c6: 3f:34:78:37:e2:77:84:82:cb:07:32:00:4f:29:95: 80:49:f7:b5:d2:23:5c:f0:6a:a3:15:99:e2:be:95: eb:5c:43:07:df:ba:00:25:58:6f:63:75:f1:59:f8: 14:ed:f2:a3:fd:2b:57:78:a2:7e:73:c9:70:e5:97: e3:41:6a:23:a9:56:52:80:6d:87:17:82:da:63:84: 6e:1b:ad:43:ab:44:f0:92:13:92:67:23:d4:77:fb: cd:ff:ab:6a:bc:86:f3:76:f3:5d:f4:6a:e9:54:22: 2b:b3:26:b7:d7:4b:fe:69:28:65:4b:a3:73:ea:92: 80:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:B0:93:4C:A5:0C:C5:2C:E3:94:6C:68:2C:3E:64:7A:30:3F:FF X509v3 Authority Key Identifier: keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6e:58:96:f5:40:e5:78:0c:b8:a5:9a:ac:bb:98:69:bf:1a: 52:79:d7:44:45:2e:e3:52:97:19:7a:7f:86:1d:cb:27:8d:5a: fa:04:2f:18:a0:23:ab:cc:0b:19:8a:a6:61:f1:44:61:18:f2: a3:d8:a4:6b:43:1c:80:1b:57:6b:5a:b5:eb:c2:f6:2c:51:33: 30:b4:44:1f:9a:2f:20:42:66:6e:f3:f0:8e:11:e4:38:74:6c: c3:ce:e1:a5:5c:4b:b1:5c:e1:1f:94:25:2f:13:00:68:be:d1: d2:f5:fc:e1:df:87:53:ee:4b:98:53:d3:75:56:0c:76:bc:2e: 8e:72:a2:62:17:a7:eb:d7:4e:9e:53:7f:73:1a:06:c8:2b:73: 3b:c4:ea:54:06:fa:8c:f6:80:31:f4:b8:08:77:2b:a2:22:34: 77:ce:1d:7f:a7:e3:3b:45:9f:1f:cc:bd:1b:b1:c0:a9:f5:23: db:b4:e3:5a:af:c5:93:48:cb:9d:63:ac:85:b0:e6:f3:0b:21: 1d:d6:a8:a9:8b:00:67:37:44:31:34:22:10:d2:12:6f:9c:22: fe:6b:b9:c4:ba:e4:fc:ee:4f:a1:54:05:36:65:15:fc:74:7b: ef:cf:43:71:09:48:cd:84:72:f3:a5:25:71:73:8a:db:6b:d9: 42:6b:be:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M2MzYxMTAvBgNVBAUTKDM2RjdGNURCNzAzNUI5MEZEQjI5Mjg1OEUyRkNGOEU2 Qjk5MTgxNzgwHhcNMjUxMjIzMDIwNzI3WhcNMjUxMjMwMDIwNzI3WjAYMRYwFAYD VQQDDA02OTQ5Zjk1Zi00ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSmXoINTa3jzbSnpuc2NbkVxIbCkXQ7oR31Cn0VhRSeviM/4pbr+t9KiPcBD elmgE8CxrBho0FEyVub7I6c6dLdDZVKlmnEJ/AXk5eFwbscF7oAigoIhOUMLN0Ha YCogQYSmK3ITde7CehpYnWpoqbhHKaAhIIvwZNiy8PQ34V3tN19aaMY/NHg34neE gssHMgBPKZWASfe10iNc8GqjFZnivpXrXEMH37oAJVhvY3XxWfgU7fKj/StXeKJ+ c8lw5ZfjQWojqVZSgG2HF4LaY4RuG61Dq0TwkhOSZyPUd/vN/6tqvIbzdvNd9Grp VCIrsya310v+aShlS6Nz6pKAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD51sJNM pQzFLOOUbGgsPmR6MD//MB8GA1UdIwQYMBaAFDb39dtwNbkP2ykoWOL8+Oa5kYF4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzYzNi81NEQyN0UyMDQy MzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVRX2JLU2hZNHZ6NDVybVJn WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052ZjEyM0ExdVFfYktTaFk0dno0NXJtUmdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzYzNi81NEQyN0UyMDQyMzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVR X2JLU2hZNHZ6NDVybVJnWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJbliW9UDleAy4pZqsu5hpvxpSeddERS7jUpcZen+GHcsnjVr6BC8Y oCOrzAsZiqZh8URhGPKj2KRrQxyAG1drWrXrwvYsUTMwtEQfmi8gQmZu8/COEeQ4 dGzDzuGlXEuxXOEflCUvEwBovtHS9fzh34dT7kuYU9N1Vgx2vC6OcqJiF6fr106e U39zGgbIK3M7xOpUBvqM9oAx9LgIdyuiIjR3zh1/p+M7RZ8fzL0bscCp9SPbtONa r8WTSMudY6yFsObzCyEd1qipiwBnN0QxNCIQ0hJvnCL+a7nEuuT87k+hVAU2ZRX8 dHvvz0NxCUjNhHLzpSVxc4rba9lCa76+ -----END CERTIFICATE-----Generated at Tue Dec 23 22:43:34 2025 by rpki-client