This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: 3J9EXSDrwpt1mUH3HLiBk1mUgsQhU2zPT2Gtv4EYAGk= Subject key identifier: 41:19:2D:76:68:3C:9F:72:AD:A6:39:B8:B3:08:1E:D2:79:0C:B4:C7 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A8C Signing time: Thu 04 Dec 2025 18:52:32 +0000 Manifest this update: Thu 04 Dec 2025 18:52:32 +0000 Manifest next update: Thu 11 Dec 2025 18:52:32 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: /+s9FMpcDhbSgaAna5fiCV/zv7jriSLvL6w8Ai7jlW8=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2707 (0xa93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Dec 4 18:52:32 2025 GMT Not After : Dec 11 18:52:32 2025 GMT Subject: CN=6931d870-2db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:ed:90:70:d1:15:7d:14:61:95:11:a6:94: 7d:6d:3a:ea:2e:da:78:9d:77:d2:0c:96:d9:a2:1e: ac:2c:44:a7:6d:1b:2f:19:9c:00:35:68:22:4c:58: 3a:19:41:ce:ad:ae:3c:87:fc:41:67:14:46:1b:77: 4c:9e:69:4e:d7:c0:96:60:3e:0d:09:e1:a4:04:08: ec:30:15:3b:5b:14:4b:ca:57:bd:52:27:99:52:aa: 6c:93:fe:1b:ae:16:72:db:38:c5:5a:14:16:6a:92: a4:6e:c8:20:ef:ac:6c:45:c8:17:0d:de:e4:be:f3: 13:7b:91:19:95:0a:e2:01:e4:01:c1:bf:ff:a9:5a: ae:a8:3e:7c:80:2d:c8:57:42:ee:35:bd:df:a7:c3: 45:55:52:27:77:59:34:10:c0:f6:82:95:ee:a5:dc: c4:81:64:1c:45:9a:a8:40:c5:a2:3a:9f:5c:63:08: b3:98:bf:18:46:07:b7:0b:07:53:d9:b2:05:7c:1f: 9a:1a:a2:85:d9:21:55:3b:92:cf:74:7b:46:e0:b3: 2e:62:2d:26:da:cf:54:3e:ca:9c:d9:1d:1f:db:02: 5c:33:5b:f2:33:c5:76:b6:02:73:91:b9:77:a3:33: d4:97:09:27:e5:41:b0:48:e2:21:68:68:08:7d:5d: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:2D:76:68:3C:9F:72:AD:A6:39:B8:B3:08:1E:D2:79:0C:B4:C7 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ca:d1:51:fa:21:07:40:28:41:60:10:8b:f3:a3:42:7a:29: 33:31:4d:30:d5:3a:7a:ea:54:82:5d:08:2c:86:3a:8b:89:65: 17:4a:ae:b0:d1:5b:bf:bb:3d:16:b5:80:45:58:47:0c:73:38: 97:f9:12:5d:86:af:61:49:ef:d6:87:af:36:73:72:1b:c3:4f: 69:6e:ec:cc:e5:91:ba:cf:a7:1f:52:06:5e:2b:3f:4f:8b:48: 47:14:89:34:f7:ab:03:e3:ab:60:5d:27:09:4c:20:55:21:11: 75:ef:64:d0:52:56:14:94:81:1f:7d:7c:33:ad:31:a5:5a:1e: a1:8d:11:36:fc:85:34:ad:5e:4e:5c:67:7c:47:f8:af:a8:eb: fa:31:0a:2e:51:58:f5:c8:74:9d:dc:04:27:67:69:79:0a:91: 4c:04:63:fb:3d:7c:0f:37:93:09:5b:6f:28:44:2a:31:c7:c2: 6b:e7:6b:c6:7a:48:1b:8f:63:12:3c:34:11:61:cf:72:83:3d: 71:b7:75:bd:d3:8c:a5:af:53:f3:52:64:a0:97:e4:4b:17:c0: b5:d3:95:b9:57:a0:93:4e:2a:10:b6:15:b8:17:04:6d:d0:f2: 9c:9c:cb:73:cb:6f:85:81:8c:d4:cb:4a:6f:82:a3:b9:ca:da: 19:94:a5:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUxMjA0MTg1MjMyWhcNMjUxMjExMTg1MjMyWjAYMRYwFAYD VQQDEw02OTMxZDg3MC0yZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEHtkHDRFX0UYZURppR9bTrqLtp4nXfSDJbZoh6sLESnbRsvGZwANWgiTFg6 GUHOra48h/xBZxRGG3dMnmlO18CWYD4NCeGkBAjsMBU7WxRLyle9UieZUqpsk/4b rhZy2zjFWhQWapKkbsgg76xsRcgXDd7kvvMTe5EZlQriAeQBwb//qVquqD58gC3I V0LuNb3fp8NFVVInd1k0EMD2gpXupdzEgWQcRZqoQMWiOp9cYwizmL8YRge3CwdT 2bIFfB+aGqKF2SFVO5LPdHtG4LMuYi0m2s9UPsqc2R0f2wJcM1vyM8V2tgJzkbl3 ozPUlwkn5UGwSOIhaGgIfV2SpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEZLXZo PJ9yraY5uLMIHtJ5DLTHMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ytFR+iEHQChBYBCL86NCeikzMU0w1Tp66lSCXQgshjqLiWUXSq6w 0Vu/uz0WtYBFWEcMcziX+RJdhq9hSe/Wh682c3Ibw09pbuzM5ZG6z6cfUgZeKz9P i0hHFIk096sD46tgXScJTCBVIRF172TQUlYUlIEffXwzrTGlWh6hjRE2/IU0rV5O XGd8R/ivqOv6MQouUVj1yHSd3AQnZ2l5CpFMBGP7PXwPN5MJW28oRCoxx8Jr52vG ekgbj2MSPDQRYc9ygz1xt3W904ylr1PzUmSgl+RLF8C105W5V6CTTioQthW4FwRt 0PKcnMtzy2+FgYzUy0pvgqO5ytoZlKUu -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:35 2025 by rpki-client