This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: XH9XJ1eCccQLTbiwqSSh4zlKIxZw4aKEMPtRN/Gw2Go= Subject key identifier: 3F:C9:A5:E5:8E:D4:34:35:39:98:83:3E:5F:3D:85:2A:2A:C0:58:5F Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 02E4 Signing time: Tue 23 Dec 2025 00:22:15 +0000 Manifest this update: Tue 23 Dec 2025 00:22:15 +0000 Manifest next update: Tue 30 Dec 2025 00:22:15 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: eOIeRtZ/Nj1F6Cq1Sneo/EBl5tY9vNdRyx1vMR1Teq0=) 2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: mbByEgB1AFGJL7BjsQzaSgyj1ogxzeMRReV2aZF6lPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Dec 23 00:22:15 2025 GMT Not After : Dec 30 00:22:15 2025 GMT Subject: CN=6949e0b7-92fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:91:5d:eb:38:0e:0d:c9:2d:ac:1b:37:83: 16:dc:25:14:ae:b0:12:95:38:67:69:c1:f9:35:c6: 39:be:cd:9a:cc:0e:7a:8b:d2:8a:cf:f0:db:11:9e: ad:d4:d7:41:be:5c:67:aa:b7:95:90:9a:76:1c:4a: f8:b7:e8:93:7f:52:ed:c1:49:9d:0f:61:73:f3:39: ec:35:4a:11:75:7f:42:91:79:94:77:06:01:ea:a9: c7:f3:62:6e:6b:61:c0:9b:60:08:35:76:48:8e:5c: 03:d3:e6:1d:80:c4:22:f7:03:58:b2:73:d5:a8:64: 9b:75:da:ed:04:65:a1:86:f7:6b:05:f5:62:59:b2: 06:ee:1f:5b:90:73:26:3d:7b:66:fc:64:63:21:7e: 0f:9b:e5:87:fa:ed:20:53:53:3f:4a:da:41:26:60: 64:b7:b6:72:40:6e:5c:49:dd:75:2f:81:6a:36:6b: 91:60:18:41:ce:fb:a4:04:42:59:67:91:99:f8:e4: c4:f9:a6:5d:7c:d3:98:65:ac:ae:7b:9c:76:f1:92: fc:79:37:d1:5d:b8:08:d1:dd:26:8b:a3:58:9e:5f: d4:3e:c7:a3:ff:19:5a:7d:1d:69:53:49:cc:e0:d7: d1:76:bc:34:6f:25:70:41:1d:f5:bf:38:62:da:99: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C9:A5:E5:8E:D4:34:35:39:98:83:3E:5F:3D:85:2A:2A:C0:58:5F X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:36:ee:b7:c3:8c:11:57:0e:56:cc:30:68:19:29:8b:f3: 2e:c8:ca:26:2e:e7:f1:fb:cc:2a:35:2e:ee:e0:1b:88:8c:93: e4:49:9d:af:b0:97:90:ac:d9:01:c8:ba:ec:65:9f:d6:ca:0c: e0:81:8a:d1:78:2d:69:b2:4b:db:6d:be:e2:ba:95:ae:7d:48: 06:c0:26:04:ef:ff:4c:0f:0a:d7:7b:47:e6:b5:47:42:05:b3: f1:4b:d2:c5:52:f1:37:cf:63:d7:2c:e2:a8:9b:f5:24:c6:cd: 9d:a9:1b:15:e9:6d:a5:35:0a:35:cc:73:aa:53:96:cf:48:98: 56:47:ae:ec:1e:23:49:63:ff:da:34:7e:76:3b:af:15:7a:6a: a7:1f:bb:9c:e7:08:c1:d9:9b:bb:3d:ba:8c:24:1a:bf:b9:50: a2:63:d2:2f:0c:a2:d2:6a:e5:43:3d:46:72:88:10:3f:e1:31: 31:7f:96:52:45:f3:e0:0f:e8:16:e1:04:a3:97:22:63:f3:3e: 75:ec:61:20:ca:eb:6d:98:4c:c8:8a:fa:49:4a:6c:7d:01:b6: 8d:ed:ee:18:8e:5c:ba:16:89:be:c7:7f:2f:8a:c0:07:5a:8b: 2a:68:e6:58:ea:35:5f:b4:ed:c3:51:25:0a:31:9f:1c:b4:f2: 53:d8:51:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUxMjIzMDAyMjE1WhcNMjUxMjMwMDAyMjE1WjAYMRYwFAYD VQQDDA02OTQ5ZTBiNy05MmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyKRXes4Dg3JLawbN4MW3CUUrrASlThnacH5NcY5vs2azA56i9KKz/DbEZ6t 1NdBvlxnqreVkJp2HEr4t+iTf1LtwUmdD2Fz8znsNUoRdX9CkXmUdwYB6qnH82Ju a2HAm2AINXZIjlwD0+YdgMQi9wNYsnPVqGSbddrtBGWhhvdrBfViWbIG7h9bkHMm PXtm/GRjIX4Pm+WH+u0gU1M/StpBJmBkt7ZyQG5cSd11L4FqNmuRYBhBzvukBEJZ Z5GZ+OTE+aZdfNOYZayue5x28ZL8eTfRXbgI0d0mi6NYnl/UPsej/xlafR1pU0nM 4NfRdrw0byVwQR31vzhi2pkr3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/JpeWO 1DQ1OZiDPl89hSoqwFhfMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9/jbut8OMEVcOVswwaBkpi/MuyMomLufx+8wqNS7u4BuIjJPkSZ2v sJeQrNkByLrsZZ/WygzggYrReC1pskvbbb7iupWufUgGwCYE7/9MDwrXe0fmtUdC BbPxS9LFUvE3z2PXLOKom/Ukxs2dqRsV6W2lNQo1zHOqU5bPSJhWR67sHiNJY//a NH52O68VemqnH7uc5wjB2Zu7PbqMJBq/uVCiY9IvDKLSauVDPUZyiBA/4TExf5ZS RfPgD+gW4QSjlyJj8z517GEgyuttmEzIivpJSmx9AbaN7e4Yjly6Fom+x38visAH WosqaOZY6jVftO3DUSUKMZ8ctPJT2FEO -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:55 2025 by rpki-client