This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json) Hash identifier: 770HnietIip/jYA7aRNQOh2w294lGKqhjC4lgdB4iY4= Subject key identifier: C1:A7:98:96:A0:A5:74:F1:83:86:DD:93:F0:66:21:69:3E:3C:BA:1B Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft Manifest number: 1F Signing time: Wed 03 Dec 2025 05:58:27 +0000 Manifest this update: Wed 03 Dec 2025 05:58:26 +0000 Manifest next update: Wed 10 Dec 2025 05:58:26 +0000 Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: EU8OQn3+S1nR3G+ty9xUcsdmoItGCJ8wQXwYg8GOB3Q=) 2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: UIqdJutuJDlhfZ5sjZNc55vuXujNjCHWgG438Kpp1wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Validity Not Before: Dec 3 05:58:26 2025 GMT Not After : Dec 10 05:58:26 2025 GMT Subject: CN=692fd182-d004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:80:ad:c8:8c:8f:a3:92:9a:b9:46:fc:21: 82:cb:7c:c7:8a:b4:a5:f1:bf:e1:2b:c2:0b:48:94: 93:3a:53:c0:00:ea:64:f7:54:5d:1e:1a:6e:e7:cb: b6:01:f6:7c:a2:b6:f5:ee:49:2e:ee:72:ef:78:ce: ef:02:45:10:84:e3:46:7c:d0:14:f2:7a:c0:2d:e5: a9:f7:f3:2c:fc:e8:7c:60:bb:3a:af:7e:7e:00:b3: 1c:38:8d:a9:3f:52:0c:b1:49:be:80:3f:c5:2d:c8: 19:bb:f2:69:7a:8a:64:f1:a2:b5:c0:68:96:d2:9b: cd:d6:07:64:9d:8a:6a:fb:ff:00:7a:60:da:fd:67: 48:92:b2:51:a6:48:a7:9b:36:8c:49:51:60:3f:85: e1:8c:32:52:dc:0f:82:02:5a:69:eb:a0:63:bd:8d: 92:71:7e:59:77:c0:81:c6:98:a0:0d:05:97:50:a6: c8:a1:74:4c:aa:c5:77:78:2e:77:55:bc:3d:99:ef: 9f:a9:7e:0c:f1:27:0d:35:a9:78:0f:57:f8:c7:eb: 2c:93:a1:7e:87:e1:a5:16:9b:ca:e4:0c:34:10:9d: c9:12:e6:63:b2:66:a6:83:f9:ba:e1:56:b8:a3:e0: ce:15:5a:2f:80:22:a0:ed:40:ea:3c:87:42:ac:28: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:98:96:A0:A5:74:F1:83:86:DD:93:F0:66:21:69:3E:3C:BA:1B X509v3 Authority Key Identifier: keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:03:e4:02:f6:43:eb:3f:fc:81:33:a3:4f:06:73:18:99: 20:03:2c:5b:ef:87:4f:d2:9b:6b:6a:dd:92:f9:37:e1:84:d3: 53:29:c5:eb:63:e8:d7:e1:d1:56:36:4a:6c:6e:49:59:07:87: 7f:a5:0a:2c:b2:db:c7:a7:4e:65:42:41:fd:16:10:78:e6:29: 90:25:9e:ad:28:44:1f:03:0b:11:05:9f:72:de:bb:ef:20:5b: 68:c0:b0:64:5a:0e:79:69:36:ba:52:c4:78:65:02:35:77:7a: 06:2b:f3:e0:ee:ea:1b:0a:f2:37:92:c4:5b:03:99:51:be:b1: 23:ad:eb:56:dd:d5:7b:36:4a:26:6c:e9:8a:1f:d9:0c:b9:ef: 2a:55:ef:47:21:45:13:a2:6b:11:d9:c2:74:20:df:09:f5:45: 14:4f:0f:fb:a9:f4:39:4d:60:f8:62:ef:53:72:85:92:06:4d: 2e:ac:4c:8d:92:96:c7:ae:16:4f:5e:3b:e0:a9:78:2b:79:61: 6f:da:59:a2:9c:9d:76:35:86:c6:ae:96:90:85:a9:43:fd:0a: ed:15:7f:4c:17:05:ce:45:1b:c7:8c:32:c0:af:30:9a:ed:b3: f7:44:2b:18:70:c0:bc:60:92:a4:b0:df:75:a9:bb:38:4a:5d: 12:8e:56:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoOUU5Q0M4MEU1QTk4NEMxQTFGRDQxQTFEMzE0NjkyNjBB MjEyREFERjAeFw0yNTEyMDMwNTU4MjZaFw0yNTEyMTAwNTU4MjZaMBgxFjAUBgNV BAMTDTY5MmZkMTgyLWQwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNSYCtyIyPo5KauUb8IYLLfMeKtKXxv+ErwgtIlJM6U8AA6mT3VF0eGm7ny7YB 9nyitvXuSS7ucu94zu8CRRCE40Z80BTyesAt5an38yz86Hxguzqvfn4Asxw4jak/ UgyxSb6AP8UtyBm78ml6imTxorXAaJbSm83WB2Sdimr7/wB6YNr9Z0iSslGmSKeb NoxJUWA/heGMMlLcD4ICWmnroGO9jZJxfll3wIHGmKANBZdQpsihdEyqxXd4LndV vD2Z75+pfgzxJw01qXgPV/jH6yyToX6H4aUWm8rkDDQQnckS5mOyZqaD+brhVrij 4M4VWi+AIqDtQOo8h0KsKNRnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwaeYlqCl dPGDht2T8GYhaT48uhswHwYDVR0jBBgwFoAUnpzIDlqYTBof1BodMUaSYKIS2t8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzYyMDk3RTg0QTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJvZjFCb2RNVWFTWUtJUzJ0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnB6SURscVlUQm9mMUJvZE1VYVNZS0lTMnQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkE5LzYyMDk3RTg0QTc3NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJv ZjFCb2RNVWFTWUtJUzJ0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyEA+QC9kPrP/yBM6NPBnMYmSADLFvvh0/Sm2tq3ZL5N+GE01Mpxetj 6Nfh0VY2SmxuSVkHh3+lCiyy28enTmVCQf0WEHjmKZAlnq0oRB8DCxEFn3Leu+8g W2jAsGRaDnlpNrpSxHhlAjV3egYr8+Du6hsK8jeSxFsDmVG+sSOt61bd1Xs2SiZs 6Yof2Qy57ypV70chRROiaxHZwnQg3wn1RRRPD/up9DlNYPhi71NyhZIGTS6sTI2S lseuFk9eO+CpeCt5YW/aWaKcnXY1hsaulpCFqUP9Cu0Vf0wXBc5FG8eMMsCvMJrt s/dEKxhwwLxgkqSw33WpuzhKXRKOVnY= -----END CERTIFICATE-----Generated at Wed Dec 3 18:56:42 2025 by rpki-client