This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: 9dreyt2iDPDhn39R4z/dkGlQJEuKj2BmN5/yvX5d9lg= Subject key identifier: 8F:94:54:BA:82:AC:37:DB:1C:B0:98:DF:2A:DF:50:CC:2C:A3:EF:72 Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 0296 Signing time: Sun 07 Dec 2025 00:04:44 +0000 Manifest this update: Sun 07 Dec 2025 00:04:43 +0000 Manifest next update: Sun 14 Dec 2025 00:04:43 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: BGO9YQSC1WJYxRrycTiG8dkS7u+E8+LJqtF7zslXGGY=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: EUxX4jfQlcU/1uY0IOylmxYMPcoOQVgae213RHQG1Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Dec 7 00:04:43 2025 GMT Not After : Dec 14 00:04:43 2025 GMT Subject: CN=6934c49b-3f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:ef:a7:6a:21:9f:43:af:a2:73:3a:17:c2: 7c:5c:5b:23:29:42:82:58:e3:0a:0d:32:1e:3f:9f: f2:8c:cd:1c:14:84:44:6e:05:a4:60:92:04:7b:a8: 67:06:4d:81:70:53:5b:87:56:bc:d3:32:49:30:e4: ca:6e:29:b4:72:9d:e6:26:4a:40:9a:04:b7:ea:81: b5:ea:46:9a:0f:fd:23:62:10:3a:2f:83:85:21:32: d0:51:cb:b0:c2:92:25:1e:e0:3e:ab:a5:b4:58:26: f8:0a:07:3b:b9:1e:63:8a:d1:19:80:b5:19:84:a2: 43:5d:e3:4a:03:c5:16:56:dc:76:bd:22:d0:bb:13: 7d:56:8f:a2:82:9a:fa:d5:1a:62:95:0f:34:5f:ea: c0:dd:a6:24:4c:c4:43:73:d6:20:4d:1f:f5:13:b8: 6d:39:15:c8:87:9b:f2:c0:0c:44:aa:34:ef:cc:c2: c3:c0:bf:22:27:b0:fd:62:83:5a:5f:3a:24:9a:90: 0e:4f:f9:f2:9f:39:16:a0:80:38:64:e2:a0:cb:f9: 21:66:1d:db:0f:49:33:8e:50:66:64:bc:81:ae:a0: 27:23:34:c0:fb:a4:d7:60:73:a4:fb:d7:ab:a4:e3: 05:f8:0e:05:02:a1:7a:31:c4:45:d7:da:b2:7f:0f: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:54:BA:82:AC:37:DB:1C:B0:98:DF:2A:DF:50:CC:2C:A3:EF:72 X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:40:41:76:4c:65:bb:2f:d0:2a:7f:37:1b:63:34:f9:e7:60: b6:1a:c2:cd:1f:9e:fe:c5:bf:7e:03:2c:f4:d3:1a:f0:ca:be: b5:1e:83:4f:a8:f2:00:42:f2:ca:7b:fa:3e:57:4a:ac:49:81: ec:59:4a:11:5a:b7:f3:58:0d:1f:e5:08:2e:60:d9:de:70:61: 78:37:1a:28:93:40:d5:32:c7:2a:1b:cc:da:c2:1a:f0:2f:7c: 1a:bf:23:d8:60:52:41:60:16:4c:b9:18:58:28:90:7c:3e:db: 43:8f:a5:1f:b7:b9:00:4d:47:68:ff:bc:34:1b:94:c2:5e:f5: c3:03:dc:79:7a:ae:4c:b5:d9:2f:9e:43:74:ae:ec:da:1a:08: d3:96:ee:e7:61:7c:54:53:87:99:6c:35:ae:da:d1:4f:3c:a8: 7e:f7:b4:4c:fb:5b:3c:f7:e7:f6:83:ba:92:e1:3c:3f:81:af: 68:39:99:ad:91:28:17:c8:69:2d:2f:bd:08:cb:32:d5:85:c9: 95:49:7e:12:cc:e0:d1:6a:2b:da:46:fb:32:e7:97:89:6d:6e: 24:46:dd:10:d7:fb:71:6b:05:0d:2d:94:3b:d6:8a:8f:4f:53: 6f:e5:74:23:78:c0:39:d5:6a:7f:d5:f5:ec:c4:fc:a3:e8:09: 0b:f7:1c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjUxMjA3MDAwNDQzWhcNMjUxMjE0MDAwNDQzWjAYMRYwFAYD VQQDEw02OTM0YzQ5Yi0zZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ivvp2ohn0OvonM6F8J8XFsjKUKCWOMKDTIeP5/yjM0cFIREbgWkYJIEe6hn Bk2BcFNbh1a80zJJMOTKbim0cp3mJkpAmgS36oG16kaaD/0jYhA6L4OFITLQUcuw wpIlHuA+q6W0WCb4Cgc7uR5jitEZgLUZhKJDXeNKA8UWVtx2vSLQuxN9Vo+igpr6 1RpilQ80X+rA3aYkTMRDc9YgTR/1E7htORXIh5vywAxEqjTvzMLDwL8iJ7D9YoNa XzokmpAOT/nynzkWoIA4ZOKgy/khZh3bD0kzjlBmZLyBrqAnIzTA+6TXYHOk+9er pOMF+A4FAqF6McRF19qyfw8arwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+UVLqC rDfbHLCY3yrfUMwso+9yMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwQEF2TGW7L9AqfzcbYzT552C2GsLNH57+xb9+Ayz00xrwyr61HoNP qPIAQvLKe/o+V0qsSYHsWUoRWrfzWA0f5QguYNnecGF4Nxook0DVMscqG8zawhrw L3wavyPYYFJBYBZMuRhYKJB8PttDj6Uft7kATUdo/7w0G5TCXvXDA9x5eq5Mtdkv nkN0ruzaGgjTlu7nYXxUU4eZbDWu2tFPPKh+97RM+1s89+f2g7qS4Tw/ga9oOZmt kSgXyGktL70IyzLVhcmVSX4SzODRaivaRvsy55eJbW4kRt0Q1/txawUNLZQ71oqP T1Nv5XQjeMA51Wp/1fXsxPyj6AkL9xya -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:16 2025 by rpki-client