This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: H8K861yu5602daDp9T0riQTJQI1nGgDI4btYeSvrsNY= Subject key identifier: 21:8C:05:25:61:19:87:14:08:C4:6C:1D:B4:BD:BF:E6:3C:68:40:34 Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 63 Signing time: Tue 23 Dec 2025 05:55:20 +0000 Manifest this update: Tue 23 Dec 2025 05:55:19 +0000 Manifest next update: Tue 30 Dec 2025 05:55:19 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: NunFTVTMgKj2wVrUy5Okr14gYtOB4fCrb5qMbVW+tlU=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2Lm246NHiIIsj3yU5G9cofOj46hOe93SJKM95sww3VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Dec 23 05:55:19 2025 GMT Not After : Dec 30 05:55:19 2025 GMT Subject: CN=694a2ec8-8b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:cf:0c:2a:02:49:81:91:5c:39:94:c7:45: 1b:b8:3e:fe:45:fe:0b:19:d3:fe:27:25:d4:28:82: 4a:27:73:e6:39:1a:67:00:82:51:f1:fd:31:0e:6e: 67:ae:ab:44:71:d9:51:e9:07:5e:8d:4a:ae:95:5e: 17:a6:85:77:9c:09:23:dd:b4:6e:d0:14:c5:e1:aa: 8f:72:b2:68:97:65:bc:a1:b7:f4:8e:cd:d4:5b:48: a7:59:4e:98:98:08:52:68:66:97:ca:59:a7:77:a9: b8:69:4e:99:12:50:62:56:a1:cc:49:a6:bd:44:fa: 92:7d:12:20:50:40:39:2d:22:f1:16:a9:c9:84:8f: 8f:38:8e:5f:d8:7d:ea:a5:bf:a1:02:ce:0b:6d:36: 58:8d:78:b2:c5:e1:0d:09:a6:f6:cf:49:46:85:49: 97:55:8b:44:95:6e:c2:91:ae:1a:a0:ec:fd:a6:e9: 2f:4c:d3:a4:5b:ac:32:e5:64:95:d6:9a:20:1a:61: f9:1d:3a:6c:d6:45:7b:c4:a2:66:00:d4:11:fc:2f: 0b:96:d0:39:24:f2:dd:55:49:55:ac:7f:72:ea:e2: d9:1c:cd:f8:6b:7c:37:dd:05:e4:75:36:88:ec:f9: e3:72:b3:ed:62:9c:82:7b:9d:4e:a3:54:22:8d:92: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:05:25:61:19:87:14:08:C4:6C:1D:B4:BD:BF:E6:3C:68:40:34 X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:98:81:ab:ed:a6:42:dd:17:4b:ac:1f:b6:ba:7a:fc:98:76: 83:1c:35:6b:2f:ff:51:56:e7:92:7c:c9:89:39:9b:89:f7:02: 57:51:2d:d9:cc:6e:eb:2f:8d:a5:7c:1c:12:91:25:fe:26:87: 7b:d4:0f:93:34:03:cd:c3:16:9d:58:3a:70:1a:be:df:50:ef: 06:00:85:f1:ed:c3:dd:be:e3:84:ba:10:60:12:14:1e:80:45: 10:d1:d5:c0:21:7c:91:e2:5e:e1:04:e7:c8:b7:db:2b:05:7e: 12:87:08:32:f2:b5:00:ce:ca:a0:65:10:5c:a7:e3:22:2a:59: 7a:6f:94:2a:09:4f:91:5c:ca:d9:99:eb:c5:6f:3a:45:98:e1: 52:2e:47:90:6f:12:71:0d:ac:8a:4d:22:60:0f:fe:02:ea:62: 65:fd:89:53:29:b0:0f:4b:53:61:0a:df:8c:95:72:ce:5c:7b: 4e:b7:92:c8:fa:b0:05:97:ad:d1:97:71:66:37:01:7f:17:92: 50:ac:94:a5:6f:30:0f:0d:ef:37:17:1a:fb:38:ac:f8:d2:1e: b7:04:26:62:b9:f1:f9:81:ce:f7:9e:28:ef:29:9c:a5:ad:d9: 30:01:aa:c2:4b:eb:95:78:74:1b:1b:78:53:fc:13:52:c0:9d: 13:45:e1:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkVGRjExMC8GA1UEBRMoMzU0MzNDOUVDNDA4MDk5RjcwMThCQzUxNDQxRDIyQzRD MTFGQzM4NTAeFw0yNTEyMjMwNTU1MTlaFw0yNTEyMzAwNTU1MTlaMBgxFjAUBgNV BAMMDTY5NGEyZWM4LThiMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxrM8MKgJJgZFcOZTHRRu4Pv5F/gsZ0/4nJdQogkonc+Y5GmcAglHx/TEObmeu q0Rx2VHpB16NSq6VXhemhXecCSPdtG7QFMXhqo9ysmiXZbyht/SOzdRbSKdZTpiY CFJoZpfKWad3qbhpTpkSUGJWocxJpr1E+pJ9EiBQQDktIvEWqcmEj484jl/Yfeql v6ECzgttNliNeLLF4Q0JpvbPSUaFSZdVi0SVbsKRrhqg7P2m6S9M06RbrDLlZJXW miAaYfkdOmzWRXvEomYA1BH8LwuW0Dkk8t1VSVWsf3Lq4tkczfhrfDfdBeR1Nojs +eNys+1inIJ7nU6jVCKNkpQHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIYwFJWEZ hxQIxGwdtL2/5jxoQDQwHwYDVR0jBBgwFoAUNUM8nsQICZ9wGLxRRB0ixMEfw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRUZGL0FCOTc1QkNFNDg0 OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVNOG5zUUlDWjl3R0x4UlJCMGl4TUVmdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RUZGL0FCOTc1QkNFNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5 d0dMeFJSQjBpeE1FZnc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiYgavtpkLdF0usH7a6evyYdoMcNWsv/1FW55J8yYk5m4n3AldRLdnM busvjaV8HBKRJf4mh3vUD5M0A83DFp1YOnAavt9Q7wYAhfHtw92+44S6EGASFB6A RRDR1cAhfJHiXuEE58i32ysFfhKHCDLytQDOyqBlEFyn4yIqWXpvlCoJT5FcytmZ 68VvOkWY4VIuR5BvEnENrIpNImAP/gLqYmX9iVMpsA9LU2EK34yVcs5ce063ksj6 sAWXrdGXcWY3AX8XklCslKVvMA8N7zcXGvs4rPjSHrcEJmK58fmBzveeKO8pnKWt 2TABqsJL65V4dBsbeFP8E1LAnRNF4VM= -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:06 2025 by rpki-client