This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: PcL3lw+XW8at4jzyMIgjbpDvzZnyGzNihooGq3bNt9A= Subject key identifier: 63:5B:BA:D7:D1:93:D3:5F:86:84:A0:3D:FE:CD:79:C5:B8:BF:99:5C Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 02DC Signing time: Sat 06 Dec 2025 23:57:00 +0000 Manifest this update: Sat 06 Dec 2025 23:56:59 +0000 Manifest next update: Sat 13 Dec 2025 23:56:59 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: ZvE1WHNUeCEZmjMimQuVUnMHWnGsrpeNepQ/3z1q69Q=) 2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: mbByEgB1AFGJL7BjsQzaSgyj1ogxzeMRReV2aZF6lPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Dec 6 23:56:59 2025 GMT Not After : Dec 13 23:56:59 2025 GMT Subject: CN=6934c2cc-e7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:15:79:9f:de:f1:03:4c:9e:81:35:64:95: 5f:3a:e8:0c:e6:01:c0:d3:31:ba:e4:d4:b0:ff:39: 19:1b:d7:70:14:6c:1d:fe:5b:a1:5b:b3:0d:e0:71: 92:64:6b:a4:ae:4c:ab:28:25:e2:2c:8d:58:37:ad: 94:34:01:ca:c1:bc:03:fd:e7:c3:72:bf:05:aa:1e: 6a:f9:f6:78:26:4e:89:41:e1:d7:c2:21:c1:b6:87: 87:03:82:19:86:04:54:00:61:e6:82:57:17:a9:ee: 1a:f8:7f:97:cd:79:d0:c8:bc:73:5f:9e:1e:0c:cc: 99:12:ff:18:a4:e3:1c:db:77:c0:89:29:95:7c:65: 3a:73:8f:ea:c9:4c:5a:27:f5:da:f1:ee:3c:45:61: 6c:bd:b3:61:b0:d2:88:97:5a:15:58:8d:6f:84:c3: e1:a5:be:59:bd:48:4b:3c:d0:be:49:c2:e2:2a:a6: 95:b9:1b:f7:0e:cb:94:2a:48:ae:96:78:b6:be:04: 20:27:8d:64:23:c5:3d:1b:02:21:4b:95:2c:a5:a1: d1:7f:fa:8d:4c:39:a7:ff:e8:e7:de:32:9f:ac:bb: eb:56:17:56:c1:e2:b9:b3:f3:69:f3:e3:fb:0c:bd: 0a:cb:e0:68:58:53:04:a1:02:6a:98:12:02:3a:cb: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5B:BA:D7:D1:93:D3:5F:86:84:A0:3D:FE:CD:79:C5:B8:BF:99:5C X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:f6:fa:cd:36:c4:86:42:cb:e1:68:ca:0a:f2:9b:a8:ed: c6:d6:d1:ea:b9:8b:1e:c1:d2:fc:aa:91:23:1c:d0:61:5c:9f: cc:f5:53:ec:4a:c1:55:49:62:89:7a:fd:75:6b:c0:87:5c:f3: 01:ca:9d:a6:cd:22:6b:96:58:49:9c:8a:62:ca:08:43:73:af: fb:16:ad:22:f9:65:77:a8:21:6c:5d:8c:e1:f1:b7:69:ce:30: 10:8f:50:0c:13:6c:27:4f:ff:f1:25:92:e9:45:db:0d:b8:f8: d3:f9:20:0a:de:5f:c8:ff:da:80:7d:8f:21:ee:a5:7d:9b:a0: 2e:51:0d:e7:d5:83:04:a4:d8:32:f5:ed:4b:6c:63:ec:a3:fd: d3:33:79:f3:f2:ff:49:28:e2:20:97:2d:38:78:0d:9e:60:20: cb:77:f4:93:76:90:97:af:21:7e:8f:67:c5:0e:52:39:b2:76: 7b:d9:7e:67:37:3d:7f:c3:27:ae:b9:32:d7:3d:26:45:3d:9b: 52:7c:c8:23:dc:68:46:f4:22:5e:45:64:dd:63:ba:c1:80:0f: 37:54:9d:de:6f:7e:06:7a:1d:56:ee:b8:15:56:e6:eb:e1:73: ce:86:e5:e8:1d:db:23:f6:69:1d:94:31:3b:24:ae:32:ba:17: 53:02:f2:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUxMjA2MjM1NjU5WhcNMjUxMjEzMjM1NjU5WjAYMRYwFAYD VQQDEw02OTM0YzJjYy1lN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv54VeZ/e8QNMnoE1ZJVfOugM5gHA0zG65NSw/zkZG9dwFGwd/luhW7MN4HGS ZGukrkyrKCXiLI1YN62UNAHKwbwD/efDcr8Fqh5q+fZ4Jk6JQeHXwiHBtoeHA4IZ hgRUAGHmglcXqe4a+H+XzXnQyLxzX54eDMyZEv8YpOMc23fAiSmVfGU6c4/qyUxa J/Xa8e48RWFsvbNhsNKIl1oVWI1vhMPhpb5ZvUhLPNC+ScLiKqaVuRv3DsuUKkiu lni2vgQgJ41kI8U9GwIhS5UspaHRf/qNTDmn/+jn3jKfrLvrVhdWweK5s/Np8+P7 DL0Ky+BoWFMEoQJqmBICOsv/lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNbutfR k9NfhoSgPf7NecW4v5lcMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/Pb6zTbEhkLL4WjKCvKbqO3G1tHquYsewdL8qpEjHNBhXJ/M9VPs SsFVSWKJev11a8CHXPMByp2mzSJrllhJnIpiyghDc6/7Fq0i+WV3qCFsXYzh8bdp zjAQj1AME2wnT//xJZLpRdsNuPjT+SAK3l/I/9qAfY8h7qV9m6AuUQ3n1YMEpNgy 9e1LbGPso/3TM3nz8v9JKOIgly04eA2eYCDLd/STdpCXryF+j2fFDlI5snZ72X5n Nz1/wyeuuTLXPSZFPZtSfMgj3GhG9CJeRWTdY7rBgA83VJ3eb34Geh1W7rgVVubr 4XPOhuXoHdsj9mkdlDE7JK4yuhdTAvIk -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:09 2025 by rpki-client