This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json) Hash identifier: +bxS7f3A4Ar+V1hmRpgRTIQWOea2j3wHU3NRfFdQ1n4= Subject key identifier: A6:59:69:46:49:D2:F2:F3:C9:BB:B3:CA:A2:00:68:31:4B:59:4A:86 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft Manifest number: 02A3 Signing time: Tue 23 Dec 2025 00:29:33 +0000 Manifest this update: Tue 23 Dec 2025 00:29:32 +0000 Manifest next update: Tue 30 Dec 2025 00:29:32 +0000 Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: Ty35r4FHeTzaZ0L/1Q1CeLEQE4lK03o0pBM1U1WnzU4=) 2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: n4GQURkQPmTfwV8TLFN5U8XOYAl5Wab+Sk4x39wADhA=) 3: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: 38dtcu5XNmHe596DDUxh/YiXpcTFN/ujsTf1rBJPJf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Dec 23 00:29:32 2025 GMT Not After : Dec 30 00:29:32 2025 GMT Subject: CN=6949e26d-e8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:ec:bf:26:d0:0a:64:b3:25:66:b5:d2:9a: 0f:95:ba:82:77:ee:81:6a:55:3e:7a:d5:31:fc:bd: e3:84:0b:7e:44:e7:a7:e0:07:7f:76:17:49:fb:99: df:7e:67:50:ca:4c:6b:9d:50:1e:6b:9f:a5:45:7d: 41:d8:07:1e:9a:85:97:70:07:71:c0:a8:19:13:d6: 88:0a:e0:ea:c5:e6:29:23:4e:88:ff:29:21:29:e4: c4:c5:fe:1a:0e:e9:48:c8:77:90:65:93:42:93:db: c6:8b:86:19:45:48:52:e6:a0:d5:4c:8a:b4:fe:36: 9c:7b:97:35:42:99:c7:b3:a7:7a:cd:70:ab:be:8a: fd:33:a1:90:95:c3:fc:94:2e:c6:5c:c7:7a:ee:13: 9d:f0:d3:2b:da:ad:7b:dc:7d:a2:5f:54:97:16:88: 40:80:c9:b1:55:d3:f3:3c:57:38:63:6a:69:57:8d: 1d:51:7d:09:85:a5:df:82:75:e4:a8:be:6b:a1:d8: d1:4d:11:b8:38:5a:c3:61:8d:8f:46:fd:bb:3e:8a: 68:bf:3b:c3:a4:5b:72:48:16:a9:ad:af:5c:05:22: ab:5b:f1:5d:9e:94:7f:f0:43:d9:2b:d4:4b:6b:38: d3:84:5f:5d:59:9f:bc:23:5f:81:4f:ad:dc:ed:91: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:69:46:49:D2:F2:F3:C9:BB:B3:CA:A2:00:68:31:4B:59:4A:86 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5b:a9:11:cb:97:4e:42:f0:27:3f:e3:82:93:c6:74:72:d1: 9c:14:6a:97:b4:87:21:4e:3a:a4:b8:67:ac:cb:63:a2:e1:f5: b7:75:6b:80:a0:7e:37:61:79:94:65:ad:b0:a4:9e:3b:18:0d: 0b:cf:41:f3:88:4e:c1:0d:87:cf:20:b4:74:ca:99:79:9b:00: e5:2c:16:4d:df:04:39:0f:33:5d:24:b1:0c:ec:7d:85:aa:c8: c5:7d:85:44:8f:97:c2:eb:de:a1:b4:01:13:6c:42:3f:f4:c5: 1d:68:32:a8:ee:7c:9f:fa:03:b2:3c:72:d8:4b:63:aa:52:8f: 3b:b9:38:c2:b6:6d:d5:1b:bd:a6:da:c7:10:f1:1b:18:9b:19: 66:13:5d:41:47:24:b0:c6:63:64:dd:05:bf:94:da:65:7c:d6: eb:63:8a:9f:1f:b2:d3:91:c0:82:f5:57:a0:9a:7d:a5:c9:ad: 30:f7:fc:d9:41:b9:ea:63:9c:57:6a:be:4e:92:b2:b6:fb:04: 1a:33:a7:ea:07:ea:76:19:9c:9f:93:aa:5c:8a:60:53:03:e7: da:e6:71:5e:22:05:eb:f2:70:cb:03:28:7d:80:a5:1e:cf:bd: 8c:61:3f:eb:7d:af:51:2d:f5:60:ae:a6:93:67:b2:28:3b:2c: 9e:7e:c7:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUxMjIzMDAyOTMyWhcNMjUxMjMwMDAyOTMyWjAYMRYwFAYD VQQDDA02OTQ5ZTI2ZC1lOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxHsvybQCmSzJWa10poPlbqCd+6BalU+etUx/L3jhAt+ROen4Ad/dhdJ+5nf fmdQykxrnVAea5+lRX1B2AcemoWXcAdxwKgZE9aICuDqxeYpI06I/ykhKeTExf4a DulIyHeQZZNCk9vGi4YZRUhS5qDVTIq0/jace5c1QpnHs6d6zXCrvor9M6GQlcP8 lC7GXMd67hOd8NMr2q173H2iX1SXFohAgMmxVdPzPFc4Y2ppV40dUX0JhaXfgnXk qL5rodjRTRG4OFrDYY2PRv27PopovzvDpFtySBapra9cBSKrW/FdnpR/8EPZK9RL azjThF9dWZ+8I1+BT63c7ZFOlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZZaUZJ 0vLzybuzyqIAaDFLWUqGMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5W6kRy5dOQvAnP+OCk8Z0ctGcFGqXtIchTjqkuGesy2Oi4fW3dWuA oH43YXmUZa2wpJ47GA0Lz0HziE7BDYfPILR0ypl5mwDlLBZN3wQ5DzNdJLEM7H2F qsjFfYVEj5fC696htAETbEI/9MUdaDKo7nyf+gOyPHLYS2OqUo87uTjCtm3VG72m 2scQ8RsYmxlmE11BRySwxmNk3QW/lNplfNbrY4qfH7LTkcCC9Vegmn2lya0w9/zZ QbnqY5xXar5OkrK2+wQaM6fqB+p2GZyfk6pcimBTA+fa5nFeIgXr8nDLAyh9gKUe z72MYT/rfa9RLfVgrqaTZ7IoOyyefscX -----END CERTIFICATE-----Generated at Tue Dec 23 14:36:22 2025 by rpki-client