This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: d3VNUHRLPvfI45yAHkFChrCERI6hc/FBylEFCLiym08= Subject key identifier: 7E:63:4F:98:66:BC:78:42:E4:36:E9:A6:FD:8F:CD:44:2E:0D:3A:13 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: 0154 Signing time: Tue 23 Dec 2025 03:30:15 +0000 Manifest this update: Tue 23 Dec 2025 03:30:15 +0000 Manifest next update: Tue 30 Dec 2025 03:30:15 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: YtGtRq52ViRqCRNW9CCUc+RMtm1QE7Y2w+D6kOmID+I=) 2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: CmgxaioZaqBmTAKdrvrQvMBUPzNHQbmNsCbdVyQjo74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Dec 23 03:30:15 2025 GMT Not After : Dec 30 03:30:15 2025 GMT Subject: CN=694a0cc7-f6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:c6:6a:ab:cb:2a:91:ce:26:a3:9a:6b:4f: ea:5a:e0:4a:ef:8d:78:2d:57:46:9d:a3:6d:c4:f5: 7a:5e:e6:85:b4:53:16:8b:f7:30:17:41:a6:ff:17: f6:15:2f:ad:ee:83:1d:37:f0:09:ec:1c:1c:6e:9e: 65:f7:ef:43:63:db:f2:86:64:eb:5f:80:4c:87:fb: 62:3e:c5:14:b8:f8:9a:11:8f:9e:69:75:ac:52:7c: 56:83:09:06:72:e2:a1:e4:88:7e:99:5b:91:c9:1d: 03:d3:4f:fc:06:41:49:9f:97:e6:99:bd:c8:f1:08: 25:31:17:ff:31:49:d0:64:ab:da:f2:ce:81:4b:28: b3:61:de:67:ac:ba:55:30:3b:1f:af:33:7b:69:17: c3:d2:f4:f8:c9:09:4c:ea:48:c6:82:06:1b:d6:fa: 9c:8a:94:33:c4:29:6d:1b:31:d8:1d:c5:1b:d2:3e: 53:91:83:28:0a:fd:fe:b3:9d:e9:04:d7:ff:5d:f4: 1d:6f:42:64:32:3f:b1:5e:b1:90:ac:d0:fc:27:7b: 15:06:41:bc:3d:16:d9:6c:63:2c:dd:4d:c6:1b:9c: 6b:ec:47:ef:7d:e8:6b:da:6a:c9:0d:73:2b:1f:02: 4d:25:f9:9f:6f:61:47:c3:11:db:43:e3:ef:e4:e7: cc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:4F:98:66:BC:78:42:E4:36:E9:A6:FD:8F:CD:44:2E:0D:3A:13 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:39:21:d6:e5:c2:90:46:34:32:f3:fa:f8:cb:66:76:6e:7f: 1e:e8:b5:2e:fc:7c:90:b9:c5:85:ba:2b:76:b4:55:53:3d:28: ef:e5:bc:94:be:8d:38:20:05:c9:70:34:50:74:27:99:35:ef: 76:7a:8c:16:55:18:48:63:0e:df:4b:f5:97:ba:73:2f:a3:d0: 04:ba:f4:f5:df:f9:2c:bb:8c:92:5d:ca:f6:59:60:8b:9b:47: da:9a:67:84:47:32:da:a9:0d:84:e6:38:5b:e2:7e:14:7e:d4: d4:a7:b7:1c:e2:f3:ea:e2:c9:be:57:f9:90:69:3b:cf:48:c1: 0f:2b:d5:f3:e8:81:57:0a:b7:af:68:07:49:93:39:22:1f:48: 9d:f0:e9:64:8d:0c:9a:fb:86:d2:32:8d:97:4f:db:0f:5d:80: df:af:f1:fc:42:b6:d5:ed:44:4b:24:d6:93:ca:00:55:fa:f5: 6a:6e:3c:77:e8:88:05:3c:11:b3:e1:9b:ba:ee:d8:4b:c1:ee: 62:55:ae:eb:ed:d9:0f:7b:e6:75:f8:c8:71:c6:f5:d9:a5:77: 48:ec:ed:67:c7:64:76:b1:cc:cc:e6:7b:a6:2b:3e:56:b5:4b: d0:c7:24:ae:76:28:a0:8e:c0:38:31:ca:39:6c:ae:af:3a:9b: 59:81:b4:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUxMjIzMDMzMDE1WhcNMjUxMjMwMDMzMDE1WjAYMRYwFAYD VQQDDA02OTRhMGNjNy1mNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMjGaqvLKpHOJqOaa0/qWuBK7414LVdGnaNtxPV6XuaFtFMWi/cwF0Gm/xf2 FS+t7oMdN/AJ7Bwcbp5l9+9DY9vyhmTrX4BMh/tiPsUUuPiaEY+eaXWsUnxWgwkG cuKh5Ih+mVuRyR0D00/8BkFJn5fmmb3I8QglMRf/MUnQZKva8s6BSyizYd5nrLpV MDsfrzN7aRfD0vT4yQlM6kjGggYb1vqcipQzxCltGzHYHcUb0j5TkYMoCv3+s53p BNf/XfQdb0JkMj+xXrGQrND8J3sVBkG8PRbZbGMs3U3GG5xr7Efvfehr2mrJDXMr HwJNJfmfb2FHwxHbQ+Pv5OfMkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5jT5hm vHhC5Dbppv2PzUQuDToTMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsOSHW5cKQRjQy8/r4y2Z2bn8e6LUu/HyQucWFuit2tFVTPSjv5byU vo04IAXJcDRQdCeZNe92eowWVRhIYw7fS/WXunMvo9AEuvT13/ksu4ySXcr2WWCL m0fammeERzLaqQ2E5jhb4n4UftTUp7cc4vPq4sm+V/mQaTvPSMEPK9Xz6IFXCrev aAdJkzkiH0id8OlkjQya+4bSMo2XT9sPXYDfr/H8QrbV7URLJNaTygBV+vVqbjx3 6IgFPBGz4Zu67thLwe5iVa7r7dkPe+Z1+MhxxvXZpXdI7O1nx2R2sczM5numKz5W tUvQxySudiigjsA4Mco5bK6vOptZgbSj -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:49 2025 by rpki-client