This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json) Hash identifier: NpVb9PqWv4FXGYIiWnNW8Arxhsva4TUML7nDLLVhPVw= Subject key identifier: F0:31:95:5E:F2:94:0C:08:75:61:BF:CA:62:47:9C:02:64:04:35:1A Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft Manifest number: D0 Signing time: Tue 23 Dec 2025 04:42:04 +0000 Manifest this update: Tue 23 Dec 2025 04:42:04 +0000 Manifest next update: Tue 30 Dec 2025 04:42:04 +0000 Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: A7i/9z4s4RZVLCNMJq4ztdHZ/NkBrgrgRcepfrx0uqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Validity Not Before: Dec 23 04:42:04 2025 GMT Not After : Dec 30 04:42:04 2025 GMT Subject: CN=694a1d9c-1b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:32:8f:24:38:a9:bf:ee:68:fc:31:7c:77: 3e:91:0b:89:5f:1f:8d:f9:c4:d9:40:3f:54:b7:46: e9:d2:e1:f0:bb:35:64:32:5c:c2:30:71:7d:24:e7: a1:1b:26:80:e1:66:66:68:4b:6f:4a:04:ec:b4:d0: a6:b3:a7:ce:83:20:34:d3:54:09:9c:00:83:bd:d5: b5:2b:6b:6e:d0:df:1a:bd:38:84:b7:05:1c:0f:e5: 7d:ad:84:a1:91:8b:0f:b2:45:ac:bd:1c:37:d6:88: 14:1c:e3:64:6d:4a:0d:1e:99:ca:5d:f8:9a:4d:8d: 54:03:9d:0b:a5:f0:1b:ae:19:2e:f5:57:99:cd:6e: f8:aa:94:4e:86:1a:5a:d8:94:25:0b:1b:c3:f6:25: 22:82:55:1c:d9:8a:2d:91:e0:e8:36:db:94:58:79: ae:70:0f:f5:75:f5:ea:c5:ee:0d:4a:28:b0:92:53: 38:d1:d4:12:59:54:03:96:3f:81:6a:2e:f7:61:d2: ab:e9:30:16:7f:a9:af:a0:63:87:80:ce:5d:63:9e: 45:01:1f:f1:08:b7:b5:f4:6c:8f:62:d2:4c:2e:72: 92:1c:95:fe:cd:4e:45:ad:0b:e9:7e:d5:ed:82:3c: 39:47:c6:ab:e6:64:ef:d6:04:a6:6d:16:47:e3:0a: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:95:5E:F2:94:0C:08:75:61:BF:CA:62:47:9C:02:64:04:35:1A X509v3 Authority Key Identifier: keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:bc:cc:30:51:44:69:de:ed:15:ab:37:db:1f:29:ad:ff:27: eb:1d:c8:a9:32:ec:83:c3:de:98:1d:20:c0:63:1a:e2:42:93: 14:dd:ad:c9:4a:4a:8c:9f:dd:0d:33:de:29:f4:fd:28:c2:dc: 08:df:ef:0a:0d:d2:80:88:d7:78:07:fe:79:22:bd:59:b3:c8: 2a:a7:54:a2:72:ec:e4:14:e2:35:51:07:85:cb:2c:88:38:64: 5f:37:6c:d4:6c:27:75:43:1a:cc:fd:46:40:c8:45:45:c1:17: c4:95:62:2e:f4:36:98:5d:67:73:22:56:86:3d:27:07:64:b8: b1:89:43:32:c3:fd:f0:2a:d8:6c:74:8a:99:70:0f:b1:2f:fc: a2:f8:73:2f:c4:5e:f0:b5:b4:28:c9:4e:b0:31:ed:d6:37:16: 93:a4:59:2f:61:cf:29:21:49:50:c8:ab:09:24:99:bb:3d:b0: c0:ec:f6:0d:f6:95:00:2a:c1:2f:1d:bb:32:60:bb:b5:47:f7: 53:fc:8d:f4:6a:b0:6f:fd:00:50:18:03:e7:90:3a:c0:62:be: 4a:a0:30:a8:a3:f1:ab:74:d3:22:e3:b2:12:67:31:67:19:db: 51:be:66:8c:be:b6:e5:0b:c3:68:25:92:cd:ef:29:a4:49:53: 39:f1:2d:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzMjkxMTAvBgNVBAUTKDM2Q0FBOUE0NzNBOUVBNzM4MjlGNzM1NjgwOUJDMTYx MDNBRDAzQUUwHhcNMjUxMjIzMDQ0MjA0WhcNMjUxMjMwMDQ0MjA0WjAYMRYwFAYD VQQDDA02OTRhMWQ5Yy0xYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3MyjyQ4qb/uaPwxfHc+kQuJXx+N+cTZQD9Ut0bp0uHwuzVkMlzCMHF9JOeh GyaA4WZmaEtvSgTstNCms6fOgyA001QJnACDvdW1K2tu0N8avTiEtwUcD+V9rYSh kYsPskWsvRw31ogUHONkbUoNHpnKXfiaTY1UA50LpfAbrhku9VeZzW74qpROhhpa 2JQlCxvD9iUiglUc2YotkeDoNtuUWHmucA/1dfXqxe4NSiiwklM40dQSWVQDlj+B ai73YdKr6TAWf6mvoGOHgM5dY55FAR/xCLe19GyPYtJMLnKSHJX+zU5FrQvpftXt gjw5R8ar5mTv1gSmbRZH4wqbxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAxlV7y lAwIdWG/ymJHnAJkBDUaMB8GA1UdIwQYMBaAFDbKqaRzqepzgp9zVoCbwWEDrQOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjMyOS9EMDg2RDU1RUEy NjgxMUVGOUQ5MTQxMThDNEY5QUUwMi9Oc3FwcEhPcDZuT0NuM05XZ0p2QllRT3RB NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zcXBwSE9wNm5PQ24zTldnSnZCWVFPdEE2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjMyOS9EMDg2RDU1RUEyNjgxMUVGOUQ5MTQxMThDNEY5QUUwMi9Oc3FwcEhPcDZu T0NuM05XZ0p2QllRT3RBNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAvMwwUURp3u0VqzfbHymt/yfrHcipMuyDw96YHSDAYxriQpMU3a3J SkqMn90NM94p9P0owtwI3+8KDdKAiNd4B/55Ir1Zs8gqp1SicuzkFOI1UQeFyyyI OGRfN2zUbCd1QxrM/UZAyEVFwRfElWIu9DaYXWdzIlaGPScHZLixiUMyw/3wKths dIqZcA+xL/yi+HMvxF7wtbQoyU6wMe3WNxaTpFkvYc8pIUlQyKsJJJm7PbDA7PYN 9pUAKsEvHbsyYLu1R/dT/I30arBv/QBQGAPnkDrAYr5KoDCoo/GrdNMi47ISZzFn GdtRvmaMvrblC8NoJZLN7ymkSVM58S3/ -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:10 2025 by rpki-client