This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: JZQGPbjW2WmnXy+LFZ75xX54vCSZSyb2ejHcTvOrzto= Subject key identifier: 92:7D:C9:B5:59:D6:2B:81:8F:EF:6E:49:81:45:F0:E1:56:94:E3:6E Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01A0 Signing time: Sun 07 Dec 2025 01:47:48 +0000 Manifest this update: Sun 07 Dec 2025 01:47:48 +0000 Manifest next update: Sun 14 Dec 2025 01:47:48 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: HaCsUUeBzlltwI74ntAoyzu5daaj6FLP4hZB32glWi0=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 0taDnwo0qjXesfO3FrAvUEEfUHs3YxCMYz8QGg31osQ=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: xPqI8byEZA0kbH+t1Ot9il53KHXLD5VMa8Lng8oAAuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Dec 7 01:47:48 2025 GMT Not After : Dec 14 01:47:48 2025 GMT Subject: CN=6934dcc4-3855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9a:fc:d4:f4:18:8b:9b:9a:09:61:c4:da:bf: 7f:10:c6:f7:53:bd:aa:d7:79:66:c3:78:58:ca:dd: a4:5d:ad:78:79:f9:78:7d:4d:54:46:ab:90:2a:0d: 7d:5a:47:95:80:54:b4:52:a6:5e:e1:46:43:68:f2: b2:d7:c0:11:a6:91:56:c7:e3:6a:c8:bb:e7:b0:47: 62:a8:af:5e:78:2c:9b:f8:cc:e1:ae:07:2e:77:ee: da:d5:62:75:da:2b:92:2e:f3:79:92:b1:56:76:68: 80:a4:c1:11:50:c6:05:00:f8:15:9c:67:1b:f1:64: de:40:d6:c1:df:01:2f:90:68:67:2d:2a:8f:3f:d6: 72:12:ab:d0:42:b1:3b:fd:f7:7c:61:67:6d:e6:14: 31:5f:a8:d2:10:f6:57:4e:6f:69:e5:26:5c:fd:46: f9:2e:88:11:5e:b2:8d:16:f7:00:91:91:94:27:84: 83:9e:63:6c:9c:32:34:c8:03:52:3f:4d:8a:e8:4d: e8:62:11:1f:bc:cd:e7:27:6d:91:91:10:9d:ed:2f: ae:2a:e7:23:71:ce:85:3d:86:e9:5f:4a:52:67:f3: 67:0b:e7:4e:ee:12:84:70:55:12:53:a4:15:05:f5: 1f:92:dc:09:c1:18:3c:19:37:0a:43:85:f8:29:f4: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:C9:B5:59:D6:2B:81:8F:EF:6E:49:81:45:F0:E1:56:94:E3:6E X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3e:77:ad:9f:ac:4f:c1:3f:39:ee:a6:3e:ce:39:b2:e0:a0: ca:fa:d4:53:f7:e0:9a:6f:17:ca:6b:5c:99:4d:bf:a5:6a:35: 26:73:42:fb:cc:ff:92:3e:c9:df:64:0d:63:76:24:95:7a:57: 73:7f:65:ee:30:e9:3c:35:a6:19:25:04:3b:24:05:86:e9:fa: d0:33:3b:bb:61:76:2b:c8:28:9b:f0:a4:92:9b:a5:45:9b:d8: 55:23:98:c5:e6:57:ba:28:d7:3d:05:13:84:3b:8a:01:3d:ee: 85:f5:4d:21:65:cc:07:32:bd:41:7e:e2:b2:78:62:02:8c:b2: 8f:2e:ab:c3:03:4f:a4:81:9e:b6:27:34:a6:f7:d9:12:ac:41: ee:dd:fb:aa:52:3c:90:e8:cd:8b:c3:31:28:54:a5:12:ec:fc: 57:e5:3e:1c:1e:dc:3c:00:97:02:bb:36:5e:48:a4:ac:3c:4f: 5f:25:73:5d:4f:67:00:df:9d:eb:1f:02:d9:d4:d4:83:a7:16: 14:a4:47:9a:e4:8e:52:fa:52:10:54:f1:12:66:8b:cd:a7:33: 92:d3:0c:ee:53:9f:5b:ca:0f:00:58:82:45:49:aa:db:0b:83: 43:0d:a0:d4:ad:af:84:60:45:b1:77:3c:eb:f2:06:81:7b:2a: 79:0d:4b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUxMjA3MDE0NzQ4WhcNMjUxMjE0MDE0NzQ4WjAYMRYwFAYD VQQDEw02OTM0ZGNjNC0zODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Jr81PQYi5uaCWHE2r9/EMb3U72q13lmw3hYyt2kXa14efl4fU1URquQKg19 WkeVgFS0UqZe4UZDaPKy18ARppFWx+NqyLvnsEdiqK9eeCyb+Mzhrgcud+7a1WJ1 2iuSLvN5krFWdmiApMERUMYFAPgVnGcb8WTeQNbB3wEvkGhnLSqPP9ZyEqvQQrE7 /fd8YWdt5hQxX6jSEPZXTm9p5SZc/Ub5LogRXrKNFvcAkZGUJ4SDnmNsnDI0yANS P02K6E3oYhEfvM3nJ22RkRCd7S+uKucjcc6FPYbpX0pSZ/NnC+dO7hKEcFUSU6QV BfUfktwJwRg8GTcKQ4X4KfQq4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ9ybVZ 1iuBj+9uSYFF8OFWlONuMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Pnetn6xPwT857qY+zjmy4KDK+tRT9+CabxfKa1yZTb+lajUmc0L7 zP+SPsnfZA1jdiSVeldzf2XuMOk8NaYZJQQ7JAWG6frQMzu7YXYryCib8KSSm6VF m9hVI5jF5le6KNc9BROEO4oBPe6F9U0hZcwHMr1BfuKyeGICjLKPLqvDA0+kgZ62 JzSm99kSrEHu3fuqUjyQ6M2LwzEoVKUS7PxX5T4cHtw8AJcCuzZeSKSsPE9fJXNd T2cA353rHwLZ1NSDpxYUpEea5I5S+lIQVPESZovNpzOS0wzuU59byg8AWIJFSarb C4NDDaDUra+EYEWxdzzr8gaBeyp5DUuz -----END CERTIFICATE-----Generated at Mon Dec 8 03:58:56 2025 by rpki-client