This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json) Hash identifier: b4gW5zpAmLOT6L+q4QCahX42/CJptVA1PBvztkyZ9fU= Subject key identifier: BD:EE:22:93:AB:62:E5:9B:20:1F:8D:0E:24:E4:BA:E2:13:C0:4A:BC Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 05:37:03 +0000 Manifest this update: Fri 05 Dec 2025 05:37:02 +0000 Manifest next update: Fri 12 Dec 2025 05:37:02 +0000 Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: E8ravhbRQ945Ce8rQeAMG2nl8Z3Zjf39gDIXDVrmKTQ=) 2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: UIqdJutuJDlhfZ5sjZNc55vuXujNjCHWgG438Kpp1wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF Validity Not Before: Dec 5 05:37:02 2025 GMT Not After : Dec 12 05:37:02 2025 GMT Subject: CN=69326f7e-1960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:6c:3f:a8:d9:75:65:ac:fb:4b:98:9e:27: 6c:8a:f0:7f:b2:df:9d:be:5c:f3:1c:86:e4:e8:8b: 0b:8a:95:c7:1b:c4:1f:7b:92:6d:49:05:c1:e1:b6: 46:bc:74:9c:92:1c:7b:e2:45:26:81:bd:50:09:bf: df:2c:05:c1:a4:e2:8a:86:75:29:a1:e7:a0:52:4f: 57:07:73:71:ae:98:07:2a:92:9e:88:50:4e:c1:15: 4d:65:1e:fa:63:fc:e7:79:57:72:de:bc:6f:db:ac: 52:29:41:1a:67:e0:bc:d3:1d:a9:72:1b:c8:b5:5d: 88:92:4c:49:4a:6e:c5:b4:e8:a2:9f:53:e2:33:1b: 78:57:42:17:01:bc:71:c2:87:85:6f:a9:9c:b1:46: 72:88:30:fc:2f:b5:29:e7:ff:44:36:4d:ad:8e:db: 2d:81:80:89:f6:9f:f8:12:7a:eb:ac:e4:e3:c1:be: c7:9a:3f:66:e7:d0:29:4b:8d:bd:07:3c:94:cd:be: e2:2e:e4:e1:c9:04:7a:c9:35:2b:c1:5d:5e:be:87: 76:a7:9f:0c:9c:0e:53:71:8e:21:53:47:78:21:5d: 68:07:bb:f9:40:f8:ab:78:00:d4:86:f6:9b:b0:76: 8c:ea:0f:d9:cb:9a:07:b0:eb:27:cf:ae:0a:32:38: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:22:93:AB:62:E5:9B:20:1F:8D:0E:24:E4:BA:E2:13:C0:4A:BC X509v3 Authority Key Identifier: keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:76:d9:66:50:c5:9d:af:f8:3e:87:f9:ab:50:f4:59:ee:94: 70:19:ea:b4:b7:60:2c:10:62:c8:35:1c:af:0b:da:53:81:c1: 4d:63:17:50:a0:a5:2c:ae:9e:b3:71:ce:ef:a6:f1:bf:2f:03: fd:ec:a5:76:0c:7f:39:fb:b2:d0:3f:e4:4e:ad:63:1a:d3:37: 60:3e:4b:4d:3e:1a:dd:a4:e1:08:b3:49:3a:1c:e8:58:b4:ff: 94:b8:37:45:6e:e2:c0:d6:5a:0d:e0:0c:68:6e:76:d8:f9:aa: d1:99:86:40:49:3f:83:03:6b:e6:fd:58:a3:7e:76:e3:b6:45: 29:29:7c:ed:9c:96:a7:de:f3:6b:00:a5:98:79:bd:d3:d6:86: 2a:36:8c:6f:aa:08:f1:2b:2d:b4:19:0f:f0:44:dc:7d:82:a0: 2d:99:c2:3c:3e:bc:5e:18:60:de:76:76:67:4b:e7:45:6f:da: f6:a9:0e:cd:5c:44:3e:ad:49:8c:02:90:55:88:53:05:1a:bd: e0:c9:92:be:b8:e7:a3:31:e6:88:b6:d8:9e:d3:cc:f8:00:7e: 06:3d:95:66:fd:ec:8c:97:4f:a6:9b:67:4e:7f:60:dc:43:0e: 32:ee:e5:4b:4b:0d:65:b7:ae:b7:6d:9f:12:21:53:06:dc:b7: 46:6f:39:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoOUU5Q0M4MEU1QTk4NEMxQTFGRDQxQTFEMzE0NjkyNjBB MjEyREFERjAeFw0yNTEyMDUwNTM3MDJaFw0yNTEyMTIwNTM3MDJaMBgxFjAUBgNV BAMTDTY5MzI2ZjdlLTE5NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIgGw/qNl1Zaz7S5ieJ2yK8H+y352+XPMchuToiwuKlccbxB97km1JBcHhtka8 dJySHHviRSaBvVAJv98sBcGk4oqGdSmh56BST1cHc3GumAcqkp6IUE7BFU1lHvpj /Od5V3LevG/brFIpQRpn4LzTHalyG8i1XYiSTElKbsW06KKfU+IzG3hXQhcBvHHC h4VvqZyxRnKIMPwvtSnn/0Q2Ta2O2y2BgIn2n/gSeuus5OPBvseaP2bn0ClLjb0H PJTNvuIu5OHJBHrJNSvBXV6+h3annwycDlNxjiFTR3ghXWgHu/lA+Kt4ANSG9puw dozqD9nLmgew6yfPrgoyOIHNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUve4ik6ti 5ZsgH40OJOS64hPASrwwHwYDVR0jBBgwFoAUnpzIDlqYTBof1BodMUaSYKIS2t8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzYyMDk3RTg0QTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJvZjFCb2RNVWFTWUtJUzJ0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnB6SURscVlUQm9mMUJvZE1VYVNZS0lTMnQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkE5LzYyMDk3RTg0QTc3NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJv ZjFCb2RNVWFTWUtJUzJ0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG522WZQxZ2v+D6H+atQ9FnulHAZ6rS3YCwQYsg1HK8L2lOBwU1jF1Cg pSyunrNxzu+m8b8vA/3spXYMfzn7stA/5E6tYxrTN2A+S00+Gt2k4QizSToc6Fi0 /5S4N0Vu4sDWWg3gDGhudtj5qtGZhkBJP4MDa+b9WKN+duO2RSkpfO2clqfe82sA pZh5vdPWhio2jG+qCPErLbQZD/BE3H2CoC2Zwjw+vF4YYN52dmdL50Vv2vapDs1c RD6tSYwCkFWIUwUaveDJkr6456Mx5oi22J7TzPgAfgY9lWb97IyXT6abZ05/YNxD DjLu5UtLDWW3rrdtnxIhUwbct0ZvOfI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:11 2025 by rpki-client