This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: 7soPqeqTwVLWxUU6DWYR8V7z3uqBlemOULQLY5BL43k= Subject key identifier: ED:EF:9D:E4:12:A7:B4:77:83:5A:61:54:0C:DD:2C:D2:28:F9:92:AF Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0C61 Signing time: Mon 22 Dec 2025 18:10:58 +0000 Manifest this update: Mon 22 Dec 2025 18:10:57 +0000 Manifest next update: Mon 29 Dec 2025 18:10:57 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: DVaQ80hHl8KAm4gDWzS1S86BGPlrF9XM9fjX03Ni9w8=) 2: 702B683202E911F097290F2EC4F9AE02.roa (hash: sacDAKMV0IlhxL+E1+gGomun+TIZdZwc4g1OZ/geqzA=) 3: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: EiyCu0vojKly9zo+I5SeQzaBIubHaZ4bVOiCN+YJMlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: Dec 22 18:10:57 2025 GMT Not After : Dec 29 18:10:57 2025 GMT Subject: CN=694989b2-2d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:7c:51:8d:48:28:8e:54:c4:2b:15:be:19: 02:50:3c:1c:30:bd:54:25:17:0a:ee:66:af:f5:71: d8:33:18:05:30:45:c4:4b:96:45:cc:9a:56:de:4f: d5:a6:2f:fb:29:88:17:4c:cb:99:b4:e7:50:ae:7b: 07:5a:f3:38:60:cb:9e:91:0f:86:a4:ba:7c:01:a2: a6:65:99:c1:4c:5e:38:3a:d3:c5:d1:19:c4:85:41: f1:04:e1:af:89:18:3c:b7:d8:d0:35:68:46:9f:6c: 32:c3:06:07:78:a8:fa:0c:2a:6b:aa:d5:9b:0d:4f: 59:06:85:55:ec:30:a5:64:52:29:77:ee:52:4b:cf: f3:ed:32:39:49:fd:77:2e:17:23:4c:a9:4c:ce:71: e0:9d:ab:79:e2:6e:76:8a:8c:ce:d7:07:9e:d9:81: 89:53:a6:8a:a2:fe:4f:21:8a:35:d4:ba:20:a3:84: 7b:d6:09:b5:f5:ba:31:61:2b:ff:c8:5b:03:aa:a6: 84:7e:61:04:39:3e:4b:4b:1c:48:3e:b4:25:cf:34: cc:04:03:63:2a:f7:95:7d:fb:b1:94:66:3e:25:36: 65:b7:64:78:3e:90:fa:c9:f7:ad:e2:71:4c:c7:9c: 11:0c:fd:21:43:d2:73:eb:0f:75:cb:39:af:d0:86: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EF:9D:E4:12:A7:B4:77:83:5A:61:54:0C:DD:2C:D2:28:F9:92:AF X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e4:66:8b:cd:20:b3:cf:ae:9d:6a:e9:d9:d2:4e:b0:27:91: 4c:35:f7:0e:e9:f9:8a:06:a2:e9:89:3f:c4:b8:15:74:b6:c6: 19:5e:a5:fd:00:08:98:5c:6f:33:0e:3d:8a:23:16:7d:c2:e9: 5c:dd:f1:54:b1:11:58:41:eb:b9:08:f9:c4:5a:6b:92:77:34: f9:14:aa:11:dd:83:06:f6:9c:4e:57:18:4f:09:00:e7:94:7d: b0:6b:b2:c4:af:20:17:89:ff:37:e5:ed:bc:da:3b:71:33:07: 6a:e5:94:2f:10:03:7a:3f:23:95:d4:cf:f7:31:11:70:8b:63: ad:8b:1b:1a:b4:6d:af:ff:97:3f:18:58:66:fc:59:58:4d:fe: 2e:e7:ee:f7:cc:5f:70:07:c1:46:c1:f1:53:e5:05:90:c0:52: a4:f5:2f:77:bd:8b:e9:a4:d5:2f:94:21:22:01:8a:85:76:9c: 92:bd:f7:a7:d3:de:76:a5:aa:5d:d7:d6:10:55:a0:b2:62:08: e9:45:6e:35:3b:10:04:68:3e:5f:f9:a2:70:c5:26:07:b3:27: 3e:3f:74:06:26:29:39:ff:c5:d1:bf:d8:86:b9:3f:13:0a:b3: 86:a9:45:2d:65:a8:51:ad:4e:4a:28:72:ad:97:a9:8d:43:4b: c2:8a:63:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUxMjIyMTgxMDU3WhcNMjUxMjI5MTgxMDU3WjAYMRYwFAYD VQQDDA02OTQ5ODliMi0yZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42h8UY1IKI5UxCsVvhkCUDwcML1UJRcK7mav9XHYMxgFMEXES5ZFzJpW3k/V pi/7KYgXTMuZtOdQrnsHWvM4YMuekQ+GpLp8AaKmZZnBTF44OtPF0RnEhUHxBOGv iRg8t9jQNWhGn2wywwYHeKj6DCprqtWbDU9ZBoVV7DClZFIpd+5SS8/z7TI5Sf13 LhcjTKlMznHgnat54m52iozO1wee2YGJU6aKov5PIYo11Logo4R71gm19boxYSv/ yFsDqqaEfmEEOT5LSxxIPrQlzzTMBANjKveVffuxlGY+JTZlt2R4PpD6yfet4nFM x5wRDP0hQ9Jz6w91yzmv0IYQEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3vneQS p7R3g1phVAzdLNIo+ZKvMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu5GaLzSCzz66daunZ0k6wJ5FMNfcO6fmKBqLpiT/EuBV0tsYZXqX9 AAiYXG8zDj2KIxZ9wulc3fFUsRFYQeu5CPnEWmuSdzT5FKoR3YMG9pxOVxhPCQDn lH2wa7LEryAXif835e282jtxMwdq5ZQvEAN6PyOV1M/3MRFwi2OtixsatG2v/5c/ GFhm/FlYTf4u5+73zF9wB8FGwfFT5QWQwFKk9S93vYvppNUvlCEiAYqFdpySvfen 0952papd19YQVaCyYgjpRW41OxAEaD5f+aJwxSYHsyc+P3QGJik5/8XRv9iGuT8T CrOGqUUtZahRrU5KKHKtl6mNQ0vCimPD -----END CERTIFICATE-----Generated at Tue Dec 23 11:44:56 2025 by rpki-client