This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: 6klQsPwsPsE7DeYsvJgtJ2k0RIGmm2wh5e8fN2E9PsA= Subject key identifier: 7B:20:3A:78:A0:A3:35:7D:D0:EF:F4:0F:52:15:CE:2E:96:30:D4:AE Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 13DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 13D2 Signing time: Thu 04 Dec 2025 16:34:41 +0000 Manifest this update: Thu 04 Dec 2025 16:34:41 +0000 Manifest next update: Thu 11 Dec 2025 16:34:41 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: y2ccEnAFOGlJUQDJSYqKtqc5U1ylXXEoP80Mj9ko6gI=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: WNdbUIrq72HztcMiWEgIIxA2+CqivH5XP6V6egY23qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5082 (0x13da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Dec 4 16:34:41 2025 GMT Not After : Dec 11 16:34:41 2025 GMT Subject: CN=6931b821-d538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:44:76:47:81:1e:9e:af:96:37:b3:44:38: 99:9f:8f:34:60:b4:b8:76:e1:30:b3:9d:51:87:50: 0d:94:25:39:27:e5:78:65:4b:5c:83:a2:9b:aa:a0: 4a:84:8d:f6:ce:ab:49:d7:65:e1:db:62:59:51:b5: 55:92:75:66:0e:d0:a9:5d:ce:0f:53:d1:ec:88:25: 39:83:88:bf:c3:65:c8:03:6a:ff:6b:9c:c7:50:aa: 8c:89:75:46:e7:d7:1c:f9:3b:92:5d:86:0f:04:c2: 27:01:b5:4d:c0:66:51:40:12:28:95:0c:55:50:85: 5e:37:34:b5:a1:30:84:1f:c2:89:56:45:34:30:dd: 19:0b:48:16:a2:97:25:cf:91:00:88:0c:77:55:e6: 86:7a:ed:44:12:0e:65:9f:ce:d4:03:0a:8f:47:d0: 71:30:d7:ab:03:85:1e:23:72:ea:d1:42:8b:6a:22: ec:1b:3d:d7:ce:43:a3:25:98:9f:ee:74:36:b5:88: 11:14:b4:61:f5:c7:6d:75:fa:b7:78:49:41:c6:b5: cc:55:bd:42:a7:ea:6f:51:3c:27:6a:eb:7c:e0:5a: 7c:74:21:b2:b9:13:d9:a1:b7:be:79:89:7d:83:2a: 90:e8:47:3e:c7:c6:b4:bd:bc:be:c7:1a:37:03:65: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:20:3A:78:A0:A3:35:7D:D0:EF:F4:0F:52:15:CE:2E:96:30:D4:AE X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:27:76:9c:d5:47:15:85:f1:2f:88:5a:1b:68:3e:f7:10:15: b1:b1:e4:ce:5e:b4:17:b1:d7:ff:64:6e:d5:d3:bc:2d:2c:8d: b5:28:b5:15:db:5f:e8:ef:e3:de:b6:b8:45:e5:78:62:3f:fd: f8:28:df:1f:14:85:75:d2:2e:d4:5e:06:d8:1d:0f:c4:63:44: c6:6c:85:db:4a:90:86:62:76:77:f8:e2:fb:3c:ef:bb:90:3e: 1e:19:ef:0e:ce:e6:91:cf:1d:7c:8e:1c:e0:24:bb:cd:44:d0: 2a:a5:12:a1:fb:9d:51:8a:93:b0:e6:8a:d9:a9:3e:ca:45:44: e2:f3:73:7d:7a:b5:4e:ce:4c:c3:c6:f2:fe:5c:8e:09:51:dd: 3f:33:8d:38:30:27:5b:d1:3c:7e:57:f2:a0:f1:ee:0e:60:30: 9e:0b:bb:43:37:be:81:14:fc:37:66:dc:87:f2:da:11:fb:58: bb:0b:c6:20:23:b6:45:0d:c0:18:01:70:25:c5:6a:40:02:49: 75:d7:17:98:9d:b3:18:89:3f:a2:cb:9c:f7:1b:a8:a5:37:f4: d8:f4:10:9b:87:b0:98:58:52:94:f8:ac:ee:87:eb:84:c1:4c: 69:e0:3a:0f:c4:57:73:3e:0f:13:8d:25:4d:32:90:7e:17:69: 4e:d4:cc:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUxMjA0MTYzNDQxWhcNMjUxMjExMTYzNDQxWjAYMRYwFAYD VQQDEw02OTMxYjgyMS1kNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0G5EdkeBHp6vljezRDiZn480YLS4duEws51Rh1ANlCU5J+V4ZUtcg6KbqqBK hI32zqtJ12Xh22JZUbVVknVmDtCpXc4PU9HsiCU5g4i/w2XIA2r/a5zHUKqMiXVG 59cc+TuSXYYPBMInAbVNwGZRQBIolQxVUIVeNzS1oTCEH8KJVkU0MN0ZC0gWopcl z5EAiAx3VeaGeu1EEg5ln87UAwqPR9BxMNerA4UeI3Lq0UKLaiLsGz3XzkOjJZif 7nQ2tYgRFLRh9cdtdfq3eElBxrXMVb1Cp+pvUTwnaut84Fp8dCGyuRPZobe+eYl9 gyqQ6Ec+x8a0vby+xxo3A2VXOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsgOnig ozV90O/0D1IVzi6WMNSuMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuJ3ac1UcVhfEviFobaD73EBWxseTOXrQXsdf/ZG7V07wtLI21KLUV 21/o7+PetrhF5XhiP/34KN8fFIV10i7UXgbYHQ/EY0TGbIXbSpCGYnZ3+OL7PO+7 kD4eGe8OzuaRzx18jhzgJLvNRNAqpRKh+51RipOw5orZqT7KRUTi83N9erVOzkzD xvL+XI4JUd0/M404MCdb0Tx+V/Kg8e4OYDCeC7tDN76BFPw3ZtyH8toR+1i7C8Yg I7ZFDcAYAXAlxWpAAkl11xeYnbMYiT+iy5z3G6ilN/TY9BCbh7CYWFKU+Kzuh+uE wUxp4DoPxFdzPg8TjSVNMpB+F2lO1Mw/ -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:01 2025 by rpki-client