This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: AKU4wqHm4jrc9smfkDTO6pWTwUbiaIwsUPVN06s3qIs= Subject key identifier: 65:A4:8F:E3:20:5A:6E:DA:89:12:FD:39:C3:D6:28:68:A5:29:05:F1 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0B8B Signing time: Sat 06 Dec 2025 18:18:57 +0000 Manifest this update: Sat 06 Dec 2025 18:18:57 +0000 Manifest next update: Sat 13 Dec 2025 18:18:57 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: LyAqt2C3Ri7lOILxz/q3LzpzO8U88N2cmZ2QuelTw4Y=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: W5+kOWbZGS14ELyZcRgsnHDoDEprTMY6BAsrjTgD1lM=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: IHsFYOv59LECoaCivBqfgQOGspVwczVXXfHkd/E13QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Dec 6 18:18:57 2025 GMT Not After : Dec 13 18:18:57 2025 GMT Subject: CN=69347391-57fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:4e:e7:02:06:30:99:7b:eb:7f:13:fa:43: 05:c3:1b:77:6f:c7:4a:24:09:7d:90:27:b2:5c:a4: 0c:a7:b5:d5:53:5e:01:d6:b8:0c:b6:c3:ed:79:09: f3:9e:24:45:16:b0:30:10:62:a8:4e:25:db:ba:30: c8:d1:a8:ff:f2:1f:a3:b3:90:7c:c5:23:e3:23:2c: 26:9c:23:12:e1:ab:c6:de:55:92:36:b2:8c:fe:2b: 53:e3:0b:92:ec:4d:bb:9b:e8:b0:e6:9d:b2:40:de: e9:e8:a8:8a:57:a8:e3:6b:e9:26:d3:0a:7a:77:8e: 4c:0e:a4:90:1d:e6:90:81:93:47:95:8c:85:d4:b4: d8:60:ae:2b:33:4d:0a:db:b0:86:d8:7b:46:41:c6: 32:c1:a1:2c:c3:57:aa:90:62:0c:bd:29:78:10:6e: 48:91:12:f3:1d:47:54:ab:7a:5e:ee:64:e2:0d:1d: ef:e5:a3:3f:09:32:33:4f:5b:17:88:f4:0e:3d:82: 51:65:0a:a6:bb:04:a3:b2:26:96:30:58:1e:f1:64: 4c:de:fb:a7:a0:fd:c2:d2:bc:33:3b:99:4d:50:20: 00:75:fd:f6:56:da:7f:d6:fe:46:c1:3c:a7:ae:85: 03:3d:98:99:6a:b9:6f:2a:e7:b1:61:05:97:da:af: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A4:8F:E3:20:5A:6E:DA:89:12:FD:39:C3:D6:28:68:A5:29:05:F1 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:71:7d:02:61:66:0a:c1:e4:48:90:4f:e9:42:d6:66:60:1d: 6f:70:5b:b8:68:8d:c9:c4:20:81:a4:4c:2e:3a:01:1c:e1:85: bf:35:a4:f3:0b:29:3b:ad:45:9a:1e:ed:73:b6:f0:74:04:f9: a3:c9:ac:d0:c2:7b:a9:38:7a:4b:23:49:bd:0a:f2:97:24:c9: e3:56:5a:ba:8e:4d:4c:c2:59:7a:57:ef:9b:32:e9:1e:e6:88: 06:00:e5:52:e6:ea:71:0c:e5:1f:1f:dc:83:b5:35:5a:ce:ef: 3b:10:e5:3e:d4:c0:95:3b:96:cb:8a:83:48:40:b6:a4:c0:73: d2:12:9b:53:25:65:88:bb:8f:21:0f:f8:89:76:0e:ec:bb:34: 46:ec:4d:10:40:8f:a0:3e:a5:56:76:9b:7a:ec:b9:17:86:b7: 70:fa:07:e1:55:8f:40:0b:57:56:09:02:88:34:77:ab:bc:c2: 99:4f:3b:d5:e6:81:25:45:93:8a:1d:2f:06:e9:8f:f8:8b:2f: 6d:4f:3c:20:92:1f:8d:c7:77:f9:40:c2:1c:ec:42:86:05:4d: 64:22:3c:73:f1:29:b9:09:bf:ae:2e:08:ce:f1:d3:11:ec:6c: 1d:55:9d:eb:c0:20:53:c6:ca:f3:e4:43:11:03:2d:2c:64:57: bd:24:f3:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjUxMjA2MTgxODU3WhcNMjUxMjEzMTgxODU3WjAYMRYwFAYD VQQDEw02OTM0NzM5MS01N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWNO5wIGMJl7638T+kMFwxt3b8dKJAl9kCeyXKQMp7XVU14B1rgMtsPteQnz niRFFrAwEGKoTiXbujDI0aj/8h+js5B8xSPjIywmnCMS4avG3lWSNrKM/itT4wuS 7E27m+iw5p2yQN7p6KiKV6jja+km0wp6d45MDqSQHeaQgZNHlYyF1LTYYK4rM00K 27CG2HtGQcYywaEsw1eqkGIMvSl4EG5IkRLzHUdUq3pe7mTiDR3v5aM/CTIzT1sX iPQOPYJRZQqmuwSjsiaWMFge8WRM3vunoP3C0rwzO5lNUCAAdf32Vtp/1v5GwTyn roUDPZiZarlvKuexYQWX2q//ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWkj+Mg Wm7aiRL9OcPWKGilKQXxMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCocX0CYWYKweRIkE/pQtZmYB1vcFu4aI3JxCCBpEwuOgEc4YW/NaTz Cyk7rUWaHu1ztvB0BPmjyazQwnupOHpLI0m9CvKXJMnjVlq6jk1Mwll6V++bMuke 5ogGAOVS5upxDOUfH9yDtTVazu87EOU+1MCVO5bLioNIQLakwHPSEptTJWWIu48h D/iJdg7suzRG7E0QQI+gPqVWdpt67LkXhrdw+gfhVY9AC1dWCQKINHervMKZTzvV 5oElRZOKHS8G6Y/4iy9tTzwgkh+Nx3f5QMIc7EKGBU1kIjxz8Sm5Cb+uLgjO8dMR 7GwdVZ3rwCBTxsrz5EMRAy0sZFe9JPOZ -----END CERTIFICATE-----Generated at Sat Dec 6 23:06:22 2025 by rpki-client