This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: Kzv3mGV94eJcXXtQmX4WTE/UMRsb6nYMUalPfe8QpNU= Subject key identifier: F6:B2:0B:0B:76:BF:E6:C9:F2:8C:5B:B4:8C:F7:05:85:94:DB:0C:1F Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 0154 Signing time: Tue 23 Dec 2025 03:31:25 +0000 Manifest this update: Tue 23 Dec 2025 03:31:24 +0000 Manifest next update: Tue 30 Dec 2025 03:31:24 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: HKHxep7Q9fxdJVcaWZxfuGUCNnTLvSUSaXSX/F8bjEg=) 2: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: TiDsN2FNPwgHeiELsvw5/2Nk6unCe1gkLq5nmI7beNI=) 3: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Dec 23 03:31:24 2025 GMT Not After : Dec 30 03:31:24 2025 GMT Subject: CN=694a0d0d-a1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:83:73:48:85:de:68:41:84:67:65:a5:d7: 50:3a:b8:67:76:2c:16:e6:7d:2d:ab:a6:12:7d:b2: d4:4f:e2:25:4e:3b:11:4c:74:dd:a4:93:b8:bd:b2: 12:b5:70:fa:f3:98:1d:6e:dc:ec:ca:73:4e:b8:6b: eb:eb:72:17:14:28:e7:0d:dd:cd:69:e0:bf:d4:f3: 8f:51:8d:65:74:a9:d7:b4:a0:01:d6:90:47:fa:fa: cf:19:f1:fe:ea:85:41:9b:c7:db:78:83:c1:cd:28: c5:61:42:1a:8d:1a:f1:e3:9d:ec:d5:8a:5a:6f:1c: 2a:c8:0a:a5:df:f3:46:a2:a8:af:eb:3c:3a:d5:01: b3:3d:db:eb:aa:bd:34:2b:a9:83:34:f9:77:b0:39: 59:25:c0:aa:fd:6e:e5:03:8e:b2:45:85:9e:63:92: 3c:70:b3:d7:b8:57:31:a7:ec:11:85:54:27:35:ee: 8a:38:7e:6d:f0:66:98:48:58:17:e2:c8:93:9c:9f: 6e:39:1b:ce:7c:76:82:bd:6f:e3:b4:e3:17:93:8a: 28:82:22:ee:f0:62:1b:30:f5:bf:c0:4d:55:1e:37: fb:c6:8e:a7:b1:be:f8:13:61:6e:06:e7:2a:19:1b: 18:a8:67:8e:87:2b:80:f8:4b:bd:73:83:f3:73:51: f4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B2:0B:0B:76:BF:E6:C9:F2:8C:5B:B4:8C:F7:05:85:94:DB:0C:1F X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dd:32:45:96:2a:d7:f8:c9:a5:e8:db:cc:49:b1:8a:9e:c0: fc:5f:d3:70:36:19:7c:0d:28:c6:20:1b:4b:aa:15:57:31:10: 07:2b:12:90:d5:97:fe:76:78:62:d2:69:cc:2b:47:19:f7:2b: ee:47:9b:b3:32:4a:f3:71:d4:3c:d3:48:e2:9c:03:15:2f:58: 8a:2d:e9:29:1e:68:23:ff:01:96:74:76:a8:af:5a:71:f4:35: aa:d6:57:76:45:c8:de:a5:6a:7b:c7:f8:a2:a7:66:92:c3:82: 5c:d1:13:0c:dd:20:1a:51:2e:7e:02:bb:35:c4:72:aa:46:07: 79:49:42:f2:15:e2:ba:40:49:8b:8d:6e:75:2b:69:f4:32:d7: 8c:27:5d:97:e4:05:8c:34:a5:3d:ef:d4:55:9c:6d:d8:2e:f0: 67:c8:d0:3c:c7:ce:ee:61:5b:ea:10:a7:95:7a:28:ea:63:ad: ea:bd:4e:13:f5:6f:59:ed:0f:73:a9:82:03:e4:7b:c1:21:ec: 2c:d8:6f:60:f9:83:59:90:ed:e1:63:6a:d8:9f:5a:a8:9c:94: 7b:32:c0:ed:64:9e:6a:5c:19:81:3d:ba:d6:fe:1f:17:ba:c9: 9d:f9:c8:e5:4b:02:2c:58:fc:bc:74:8c:cb:80:6b:48:4f:85: 5e:8d:c6:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUxMjIzMDMzMTI0WhcNMjUxMjMwMDMzMTI0WjAYMRYwFAYD VQQDDA02OTRhMGQwZC1hMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eiDc0iF3mhBhGdlpddQOrhndiwW5n0tq6YSfbLUT+IlTjsRTHTdpJO4vbIS tXD685gdbtzsynNOuGvr63IXFCjnDd3NaeC/1POPUY1ldKnXtKAB1pBH+vrPGfH+ 6oVBm8fbeIPBzSjFYUIajRrx453s1YpabxwqyAql3/NGoqiv6zw61QGzPdvrqr00 K6mDNPl3sDlZJcCq/W7lA46yRYWeY5I8cLPXuFcxp+wRhVQnNe6KOH5t8GaYSFgX 4siTnJ9uORvOfHaCvW/jtOMXk4oogiLu8GIbMPW/wE1VHjf7xo6nsb74E2FuBucq GRsYqGeOhyuA+Eu9c4Pzc1H01QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPayCwt2 v+bJ8oxbtIz3BYWU2wwfMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt3TJFlirX+Mml6NvMSbGKnsD8X9NwNhl8DSjGIBtLqhVXMRAHKxKQ 1Zf+dnhi0mnMK0cZ9yvuR5uzMkrzcdQ800jinAMVL1iKLekpHmgj/wGWdHaor1px 9DWq1ld2RcjepWp7x/iip2aSw4Jc0RMM3SAaUS5+Ars1xHKqRgd5SULyFeK6QEmL jW51K2n0MteMJ12X5AWMNKU979RVnG3YLvBnyNA8x87uYVvqEKeVeijqY63qvU4T 9W9Z7Q9zqYID5HvBIews2G9g+YNZkO3hY2rYn1qonJR7MsDtZJ5qXBmBPbrW/h8X usmd+cjlSwIsWPy8dIzLgGtIT4VejcZT -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:09 2025 by rpki-client