This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: 6LtB/bSlWQngQ3B0Yx8+B2rtrmFnN4ADZ6E0Lorx6lM= Subject key identifier: 49:79:9F:EC:54:93:66:22:03:E9:55:B4:70:E2:E0:41:4D:03:2C:66 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0172 Signing time: Tue 23 Dec 2025 02:58:09 +0000 Manifest this update: Tue 23 Dec 2025 02:58:09 +0000 Manifest next update: Tue 30 Dec 2025 02:58:09 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: AHtC1R2GlxTgz7MuTmr2u+sGtXMMTWQ/0lDacRyFd1I=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Dec 23 02:58:09 2025 GMT Not After : Dec 30 02:58:09 2025 GMT Subject: CN=694a0541-2aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:f5:d3:37:d5:55:e2:02:c9:13:00:36:7d: aa:39:64:cc:68:75:77:87:e9:09:96:9c:80:c2:c2: 79:d1:f2:3a:05:f8:c3:f9:cc:3e:83:60:f5:39:72: 0d:24:81:98:89:4a:8e:4b:98:f7:a4:24:52:19:f2: 26:c1:70:d2:0a:a1:27:69:08:b9:e9:4f:c7:80:67: 4e:00:be:e2:84:38:5a:dd:e2:64:64:e6:0a:2a:58: 03:df:8d:0a:93:ba:72:af:5e:4a:a5:09:35:2b:bb: 6b:e7:b2:f5:38:6b:75:20:b9:15:fa:e1:23:6f:5a: 52:19:ff:2f:9a:53:aa:d6:c6:b0:15:9e:ed:e4:82: c1:b5:d2:ec:57:be:62:ee:a6:61:3e:11:46:f2:c5: 21:27:65:99:4f:94:95:3a:e2:ef:b6:97:c9:63:0e: 10:17:7f:e8:64:56:e1:8c:16:0f:15:7b:06:aa:c6: 74:f7:4c:c2:10:69:b8:35:a9:c5:2d:23:3e:d7:62: 82:6c:dc:9f:b7:f0:09:08:61:76:d2:19:c1:3c:00: 4e:cf:33:ab:d0:c5:ef:4c:78:ef:b9:2d:bf:d4:47: d4:9c:66:44:e8:24:01:15:6c:8f:d4:44:52:95:c6: 37:8c:59:3f:a5:0e:b7:80:cb:c2:3b:3f:00:14:fe: 5b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:9F:EC:54:93:66:22:03:E9:55:B4:70:E2:E0:41:4D:03:2C:66 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b4:ab:88:8f:d9:9c:fc:ea:63:cf:c6:bb:a4:a4:dd:de:83: 17:1a:ac:94:48:8b:aa:18:0b:ea:0d:38:0d:26:ca:2c:a4:4f: ba:f7:31:e1:73:1b:09:15:35:2f:8c:e9:00:1e:19:36:bc:e5: e2:1b:a8:29:e9:51:1a:4c:49:a2:2d:4a:8c:00:b9:ed:7c:4a: 95:14:a9:8d:dc:f4:92:27:69:14:fc:62:d0:e6:60:dc:cc:7e: 1b:71:54:31:7e:42:93:1a:f2:c3:ee:ae:ef:c3:30:38:00:a9: 43:07:a2:a4:be:6d:dc:16:0f:d2:c5:5a:81:9c:20:35:53:42: 61:9c:c7:ca:76:69:b2:14:bd:9f:a5:65:4c:70:3f:d3:c3:f7: cb:0e:ea:ba:91:09:c7:d2:12:ff:c5:b6:94:b3:78:3e:af:87: 6d:1e:a7:fe:76:01:2b:ca:bd:bc:c0:6e:02:f2:6b:fa:50:f0: 8e:6c:ef:2f:6c:58:e1:fb:5c:82:16:57:d5:4e:57:7a:14:e5: c4:43:8e:c5:42:cc:04:9d:60:e2:53:83:43:00:37:f8:d1:2d: a8:7f:ea:96:62:8f:07:c3:f6:f9:b2:1d:97:f7:7c:d6:93:15: b9:67:c7:3d:f6:63:be:c7:2e:da:bf:70:1d:c8:da:2a:a3:74: 16:4d:fb:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUxMjIzMDI1ODA5WhcNMjUxMjMwMDI1ODA5WjAYMRYwFAYD VQQDDA02OTRhMDU0MS0yYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/v10zfVVeICyRMANn2qOWTMaHV3h+kJlpyAwsJ50fI6BfjD+cw+g2D1OXIN JIGYiUqOS5j3pCRSGfImwXDSCqEnaQi56U/HgGdOAL7ihDha3eJkZOYKKlgD340K k7pyr15KpQk1K7tr57L1OGt1ILkV+uEjb1pSGf8vmlOq1sawFZ7t5ILBtdLsV75i 7qZhPhFG8sUhJ2WZT5SVOuLvtpfJYw4QF3/oZFbhjBYPFXsGqsZ090zCEGm4NanF LSM+12KCbNyft/AJCGF20hnBPABOzzOr0MXvTHjvuS2/1EfUnGZE6CQBFWyP1ERS lcY3jFk/pQ63gMvCOz8AFP5bOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl5n+xU k2YiA+lVtHDi4EFNAyxmMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEtKuIj9mc/Opjz8a7pKTd3oMXGqyUSIuqGAvqDTgNJsospE+69zHh cxsJFTUvjOkAHhk2vOXiG6gp6VEaTEmiLUqMALntfEqVFKmN3PSSJ2kU/GLQ5mDc zH4bcVQxfkKTGvLD7q7vwzA4AKlDB6Kkvm3cFg/SxVqBnCA1U0JhnMfKdmmyFL2f pWVMcD/Tw/fLDuq6kQnH0hL/xbaUs3g+r4dtHqf+dgEryr28wG4C8mv6UPCObO8v bFjh+1yCFlfVTld6FOXEQ47FQswEnWDiU4NDADf40S2of+qWYo8Hw/b5sh2X93zW kxW5Z8c99mO+xy7av3AdyNoqo3QWTfv/ -----END CERTIFICATE-----Generated at Tue Dec 23 15:54:52 2025 by rpki-client