This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: l0th4QX6SrfELiCxDiZOwcY6kwHtnc7FidNyUB1L1uE= Subject key identifier: E1:00:9E:A3:FB:B0:4B:2A:C5:5E:E5:52:E8:42:76:10:17:3F:74:34 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 0238 Signing time: Sun 21 Dec 2025 01:13:58 +0000 Manifest this update: Sun 21 Dec 2025 01:13:58 +0000 Manifest next update: Sun 28 Dec 2025 01:13:58 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: 3+qyXIDLTSBEMT+ClVhNGBPUWXb8i76PWMxvOKyURCY=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: iIeWWLVIFJDjrG1ibZP/xl+WAjIK44IJWqOkBlQGCcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Dec 21 01:13:58 2025 GMT Not After : Dec 28 01:13:58 2025 GMT Subject: CN=694749d6-458b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:9d:92:e7:03:48:f4:e7:95:25:cd:9f:61: 26:c9:cd:86:4f:80:c8:d7:80:02:ac:a6:76:91:13: 02:83:ed:00:af:f7:bb:b2:2a:58:03:a2:69:78:ae: 9c:19:72:1b:92:e0:98:28:96:1f:e3:3f:66:a0:13: 1b:98:a8:9d:9b:69:cb:4f:f6:08:8c:f7:6c:ef:19: 37:35:90:b7:f7:ee:3e:29:2c:33:01:cb:44:08:c3: 36:10:f5:65:7d:26:65:4a:55:39:2a:0e:77:63:b3: 88:c2:36:e4:cf:35:fa:83:cb:bb:b0:76:33:70:07: ad:b0:7e:ca:5d:06:73:16:f3:3f:1a:b2:4c:f7:8a: 5b:0b:66:e5:a8:20:c8:ce:54:ab:27:68:f9:3f:3b: 6f:f3:c0:c1:c9:d5:56:5f:d4:be:c9:9d:49:2f:8c: 03:49:5d:2b:db:29:82:66:32:e5:43:49:08:23:cf: c7:47:d3:17:b5:a6:ec:3c:a1:ca:cb:45:dc:00:3c: bc:34:5d:a1:12:a3:bd:bb:67:5a:e9:ab:e8:73:34: 19:94:b1:d4:df:08:ba:ee:56:62:58:47:20:1b:ea: bc:7e:f4:81:94:fc:72:f6:dc:0f:99:f9:da:fa:1c: 3b:e2:83:94:41:a4:9c:63:df:31:da:f0:81:5d:a6: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:9E:A3:FB:B0:4B:2A:C5:5E:E5:52:E8:42:76:10:17:3F:74:34 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:fb:4e:1b:41:a4:11:29:62:72:79:09:5f:98:30:15:c7:a3: bc:d7:a3:f6:39:f3:52:a8:34:c1:7e:b6:0b:a2:30:e5:5c:2a: a6:fc:c9:21:aa:70:26:26:bf:80:b7:87:fb:e3:e2:24:64:1e: af:0a:0f:7d:d7:1e:72:11:13:6a:a8:41:f8:90:b4:ca:0c:bf: f0:7d:61:d9:bd:d2:1c:9c:aa:ca:6f:8d:4f:1f:1d:9e:fb:15: 17:e6:0d:9c:c2:28:51:2b:c6:6a:6b:4c:1e:6b:17:ac:26:6d: 59:d3:93:bb:8e:05:08:d3:cd:ab:a0:ec:67:d5:a6:6d:07:8d: ed:6e:5c:04:66:11:7b:cc:c9:4e:c0:ca:5c:80:38:3b:b0:d1: 76:f7:75:be:7b:44:42:a4:22:7b:23:e0:3c:f2:29:81:cc:b1: aa:62:9e:65:b6:d9:91:1e:27:26:24:90:8f:3b:00:c7:27:93: a8:8e:08:b9:e7:7e:26:7b:fd:e7:b7:d7:bc:ee:0b:e4:f3:c6: 26:82:83:2d:88:16:92:91:5a:71:24:32:c0:bb:c5:66:cc:73: e0:5e:6c:37:5f:60:68:39:5f:bf:c7:6c:15:d3:91:50:33:18: 80:1e:76:fb:54:21:f6:aa:50:2e:a3:9a:59:2e:c8:ce:8b:21: d0:71:b0:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjUxMjIxMDExMzU4WhcNMjUxMjI4MDExMzU4WjAYMRYwFAYD VQQDDA02OTQ3NDlkNi00NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSidkucDSPTnlSXNn2Emyc2GT4DI14ACrKZ2kRMCg+0Ar/e7sipYA6JpeK6c GXIbkuCYKJYf4z9moBMbmKidm2nLT/YIjPds7xk3NZC39+4+KSwzActECMM2EPVl fSZlSlU5Kg53Y7OIwjbkzzX6g8u7sHYzcAetsH7KXQZzFvM/GrJM94pbC2blqCDI zlSrJ2j5Pztv88DBydVWX9S+yZ1JL4wDSV0r2ymCZjLlQ0kII8/HR9MXtabsPKHK y0XcADy8NF2hEqO9u2da6avoczQZlLHU3wi67lZiWEcgG+q8fvSBlPxy9twPmfna +hw74oOUQaScY98x2vCBXaa/5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEAnqP7 sEsqxV7lUuhCdhAXP3Q0MB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq+04bQaQRKWJyeQlfmDAVx6O816P2OfNSqDTBfrYLojDlXCqm/Mkh qnAmJr+At4f74+IkZB6vCg991x5yERNqqEH4kLTKDL/wfWHZvdIcnKrKb41PHx2e +xUX5g2cwihRK8Zqa0weaxesJm1Z05O7jgUI082roOxn1aZtB43tblwEZhF7zMlO wMpcgDg7sNF293W+e0RCpCJ7I+A88imBzLGqYp5lttmRHicmJJCPOwDHJ5Oojgi5 534me/3nt9e87gvk88YmgoMtiBaSkVpxJDLAu8VmzHPgXmw3X2BoOV+/x2wV05FQ MxiAHnb7VCH2qlAuo5pZLsjOiyHQcbDS -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:24 2025 by rpki-client