This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json) Hash identifier: xBXEAyQ82IlxiThwF/QvazVRNiHU1x/39LmG4JptLFk= Subject key identifier: FB:8B:A9:4E:08:24:46:FF:F9:30:66:54:89:D1:E6:E2:FE:90:FC:0B Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft Manifest number: 0298 Signing time: Thu 04 Dec 2025 23:53:00 +0000 Manifest this update: Thu 04 Dec 2025 23:53:00 +0000 Manifest next update: Thu 11 Dec 2025 23:53:00 +0000 Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: uKQ9kxFDlMQOL3ad+MnPle0F2OQ+J8ugP5b5GhGId8A=) 2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: 7WPqwG1SjXeSVpDuyJqejWY1jhEBBefx5pu/jvpGXtc=) 3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Dec 4 23:53:00 2025 GMT Not After : Dec 11 23:53:00 2025 GMT Subject: CN=69321edc-86d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:b4:85:46:0c:aa:ae:96:29:0e:93:90:53: 35:6d:f1:3f:1c:51:35:93:f5:f9:6d:bb:a8:d5:81: 01:d2:f8:aa:a4:6e:9b:a5:0d:29:66:24:d4:4f:b0: d8:85:10:d0:7b:59:c3:51:90:46:89:dc:f4:62:35: 82:6b:f4:24:ba:42:05:c1:c3:c9:a0:75:6f:38:57: 65:56:2d:f5:7b:19:3d:38:4c:67:88:0d:7d:19:cd: a0:e5:6e:fc:c4:e0:fa:01:97:3c:ae:c3:4f:3b:24: 08:7f:38:81:d8:87:13:8c:88:76:0a:55:4b:76:a8: c5:6c:cb:5e:ec:6f:75:11:87:a5:a1:c5:f7:2f:72: e6:a7:fa:a1:13:63:66:76:0f:2d:19:16:07:98:44: 28:7f:54:fd:c6:17:ef:06:da:3c:66:42:f8:86:ae: 8c:53:d2:67:12:d0:ca:94:9c:ca:1a:a8:1c:63:a0: c9:f6:e6:74:eb:b7:3a:c1:2d:af:66:55:f9:df:72: 50:97:16:de:56:29:06:f5:3f:7f:2b:dc:6e:92:44: 11:00:50:3e:72:c8:a1:87:fd:dc:34:6a:93:81:dd: 2a:96:78:b2:1e:11:4a:c5:f5:e4:bf:18:55:09:a6: 0a:30:c0:11:d4:2c:e3:61:43:9c:6c:5d:8b:3c:35: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8B:A9:4E:08:24:46:FF:F9:30:66:54:89:D1:E6:E2:FE:90:FC:0B X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:dc:9c:04:0a:8b:78:1b:cb:71:80:f9:99:d4:3b:ed:b0:f1: 08:de:ea:1e:c1:da:e1:2a:37:c1:02:92:74:c6:84:c9:db:43: bb:8e:58:d0:3b:31:b3:7a:e7:58:89:d7:13:21:0a:6c:13:fb: 8d:4a:4d:3b:f0:91:6b:69:1b:d3:d4:8c:29:ae:69:0f:14:d7: 24:0e:96:dd:43:a9:30:ce:be:aa:96:74:a8:eb:2c:eb:17:57: 92:1d:a8:da:c6:90:23:16:27:57:cc:59:b6:b1:60:81:27:8c: b7:36:87:e2:52:29:00:8b:7a:39:f6:89:97:b8:92:4c:1d:dc: f8:40:47:2c:17:2d:f7:d4:c8:95:f0:ab:8a:ea:92:76:02:9a: 8d:5e:a2:1e:4a:a5:55:ab:f2:2f:ca:25:6a:2c:2b:2d:bd:13: f0:98:ac:b0:f1:d2:0f:e7:cd:26:f3:4b:17:2d:49:7f:7a:18: 09:c3:af:35:7f:d5:06:3f:e0:39:e9:ce:e4:7f:67:b4:bc:2b: a1:42:a5:ec:d7:42:03:f8:f1:e4:f4:19:b5:e5:34:a8:42:f7: 09:ad:d9:c1:b9:8f:1b:5d:cf:fa:ca:94:5e:dc:19:5c:cb:11: 56:43:f1:56:22:a8:0f:a9:1e:59:ac:ef:11:ac:e7:39:41:d4: 36:9a:79:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUxMjA0MjM1MzAwWhcNMjUxMjExMjM1MzAwWjAYMRYwFAYD VQQDEw02OTMyMWVkYy04NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3S0hUYMqq6WKQ6TkFM1bfE/HFE1k/X5bbuo1YEB0viqpG6bpQ0pZiTUT7DY hRDQe1nDUZBGidz0YjWCa/QkukIFwcPJoHVvOFdlVi31exk9OExniA19Gc2g5W78 xOD6AZc8rsNPOyQIfziB2IcTjIh2ClVLdqjFbMte7G91EYelocX3L3Lmp/qhE2Nm dg8tGRYHmEQof1T9xhfvBto8ZkL4hq6MU9JnEtDKlJzKGqgcY6DJ9uZ067c6wS2v ZlX533JQlxbeVikG9T9/K9xukkQRAFA+csihh/3cNGqTgd0qlniyHhFKxfXkvxhV CaYKMMAR1CzjYUOcbF2LPDWtRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuLqU4I JEb/+TBmVInR5uL+kPwLMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG3JwECot4G8txgPmZ1DvtsPEI3uoewdrhKjfBApJ0xoTJ20O7jljQ OzGzeudYidcTIQpsE/uNSk078JFraRvT1IwprmkPFNckDpbdQ6kwzr6qlnSo6yzr F1eSHajaxpAjFidXzFm2sWCBJ4y3NofiUikAi3o59omXuJJMHdz4QEcsFy331MiV 8KuK6pJ2ApqNXqIeSqVVq/IvyiVqLCstvRPwmKyw8dIP580m80sXLUl/ehgJw681 f9UGP+A56c7kf2e0vCuhQqXs10ID+PHk9Bm15TSoQvcJrdnBuY8bXc/6ypRe3Blc yxFWQ/FWIqgPqR5ZrO8RrOc5QdQ2mnkN -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:31 2025 by rpki-client