This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: HfUaHodjzHGRE4zFX8ILPrulTebiYEUaqZqTAIdAWWw= Subject key identifier: B4:73:30:58:A6:4B:D7:92:D9:22:A5:CE:E5:36:A7:F0:8F:8C:65:F3 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A95 Signing time: Mon 22 Dec 2025 19:00:15 +0000 Manifest this update: Mon 22 Dec 2025 19:00:15 +0000 Manifest next update: Mon 29 Dec 2025 19:00:15 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: /wf97QANHJdx20HcyOMVoXLYUGmlge7qJtSo9a519rE=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Dec 22 19:00:15 2025 GMT Not After : Dec 29 19:00:15 2025 GMT Subject: CN=6949953f-81a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:0f:8f:46:5f:17:fb:ca:bd:70:ac:36:03: f7:4e:aa:63:10:a3:ff:d2:66:ed:64:ec:f2:15:1a: 10:e7:be:aa:b6:45:52:15:20:31:b1:92:d3:1f:fb: b2:28:e3:29:2e:76:5d:6a:4f:39:5b:19:ad:30:e5: 9d:ef:42:f3:d9:bd:39:d6:3c:63:92:64:81:cb:73: 7d:9c:83:c8:22:a8:d4:12:77:4c:08:89:9f:31:9d: be:16:65:7d:2d:e3:37:42:a2:ba:7f:6c:5c:fd:12: 8d:b6:6a:4b:bf:ca:db:c4:9b:3a:23:8e:4d:eb:33: ff:a6:9a:5c:93:b5:d6:04:be:cb:e4:4d:5f:fd:1b: 34:e8:e5:62:59:c3:32:1d:a9:5a:c2:1f:7e:a9:8c: 28:9e:1f:ff:c9:17:b8:4a:2d:34:1e:0a:0a:da:a4: 9b:ba:ae:84:8e:48:0e:fb:69:a4:d1:8c:f3:72:fc: ee:bc:ca:3b:07:a0:8e:5d:bf:48:1c:d8:9f:8c:55: b1:87:7a:a6:b7:f4:0c:df:79:64:f9:29:c6:98:d4: b1:be:ab:43:14:3e:28:d7:77:d0:e6:fb:5e:7f:ba: 1c:f6:f7:fe:16:ab:5e:42:fb:a2:ab:4e:8e:9e:8d: e8:28:f1:5b:e8:19:c4:1c:2c:eb:ff:33:12:78:ab: 58:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:73:30:58:A6:4B:D7:92:D9:22:A5:CE:E5:36:A7:F0:8F:8C:65:F3 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:58:bf:83:6b:21:24:55:28:cb:d4:e5:e7:10:65:92:43:7c: 34:20:44:ce:a3:1a:be:ad:c7:9f:57:f6:16:b2:da:4a:e8:38: da:c6:ec:84:1a:e7:9e:23:67:dc:88:50:57:2d:89:2d:c1:1e: df:2d:67:51:2a:46:78:f1:14:45:95:03:9f:c7:22:33:a9:97: 9d:91:7c:aa:63:3d:ab:aa:49:fd:9f:0d:35:53:fa:3f:04:2a: 94:1a:cc:aa:77:96:f5:1e:dc:1d:40:dc:e6:55:bf:c0:61:8a: e7:e2:56:64:f7:51:b3:1e:77:e2:c7:8a:90:70:5a:67:3a:80: 51:d1:b5:d5:02:e2:c8:d3:07:cd:aa:1e:60:07:ac:b8:a9:f3: ec:79:15:ad:ed:24:3a:ca:12:39:df:a6:01:81:53:12:1a:69: 09:ff:64:fe:26:54:61:4b:66:79:fe:37:36:77:a4:83:f3:8b: 54:a0:af:8a:95:7d:07:dd:2f:21:ae:71:1f:9e:21:65:b7:79: 2f:d2:75:13:52:a4:2e:e1:fd:15:87:ea:7c:a2:d1:5c:13:5b: 5c:ed:38:1b:fc:4d:70:16:9c:e7:38:b5:1a:6b:8f:70:9b:82: b8:75:40:a4:e7:f5:f8:f2:af:7b:3d:7c:34:45:7d:9f:0c:f3: f7:41:ae:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUxMjIyMTkwMDE1WhcNMjUxMjI5MTkwMDE1WjAYMRYwFAYD VQQDDA02OTQ5OTUzZi04MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozsPj0ZfF/vKvXCsNgP3TqpjEKP/0mbtZOzyFRoQ576qtkVSFSAxsZLTH/uy KOMpLnZdak85WxmtMOWd70Lz2b051jxjkmSBy3N9nIPIIqjUEndMCImfMZ2+FmV9 LeM3QqK6f2xc/RKNtmpLv8rbxJs6I45N6zP/pppck7XWBL7L5E1f/Rs06OViWcMy Halawh9+qYwonh//yRe4Si00HgoK2qSbuq6EjkgO+2mk0YzzcvzuvMo7B6COXb9I HNifjFWxh3qmt/QM33lk+SnGmNSxvqtDFD4o13fQ5vtef7oc9vf+FqteQvuiq06O no3oKPFb6BnEHCzr/zMSeKtYfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRzMFim S9eS2SKlzuU2p/CPjGXzMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSWL+DayEkVSjL1OXnEGWSQ3w0IETOoxq+rcefV/YWstpK6DjaxuyE GueeI2fciFBXLYktwR7fLWdRKkZ48RRFlQOfxyIzqZedkXyqYz2rqkn9nw01U/o/ BCqUGsyqd5b1HtwdQNzmVb/AYYrn4lZk91GzHnfix4qQcFpnOoBR0bXVAuLI0wfN qh5gB6y4qfPseRWt7SQ6yhI536YBgVMSGmkJ/2T+JlRhS2Z5/jc2d6SD84tUoK+K lX0H3S8hrnEfniFlt3kv0nUTUqQu4f0Vh+p8otFcE1tc7Tgb/E1wFpznOLUaa49w m4K4dUCk5/X48q97PXw0RX2fDPP3Qa5V -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:18 2025 by rpki-client