This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: wWXwibmhCz4vNoD7P5AWkcJ7rCaai/fFpus4IMfmyeg= Subject key identifier: 12:32:9C:AA:42:4C:CC:60:5E:16:14:53:F5:90:D1:66:7F:88:45:28 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11CD Signing time: Sat 06 Dec 2025 16:42:58 +0000 Manifest this update: Sat 06 Dec 2025 16:42:57 +0000 Manifest next update: Sat 13 Dec 2025 16:42:57 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: mQUgCFLAtrSxneJfdrMOpw0JJppeUc3RSXVWIqb4aHw=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4607 (0x11ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Dec 6 16:42:57 2025 GMT Not After : Dec 13 16:42:57 2025 GMT Subject: CN=69345d11-84d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:40:8c:9f:c6:21:0f:cb:86:0f:a9:a5:65: fd:63:c7:87:87:14:8e:78:52:95:de:81:b4:d9:71: 8e:57:bf:ac:49:42:48:3b:98:5a:c6:31:ce:13:47: 1f:78:8e:50:a6:20:9a:41:f2:44:38:ef:bb:5d:ac: 23:67:67:c4:ce:6c:47:d8:73:d0:a4:6e:c9:0d:98: b3:b3:63:f6:0f:f1:02:15:89:57:e8:5e:2c:b7:bf: 21:18:93:af:c2:33:ef:cb:63:b2:ea:a4:84:05:fa: fc:05:54:3c:66:f5:56:ab:f0:50:12:c1:c9:96:ba: 40:6e:2e:b8:24:c4:fc:91:55:73:28:a0:58:ca:ca: 83:ad:61:63:39:6c:42:d7:9a:2c:98:3b:1e:2e:0c: c4:e8:ec:0c:c0:f0:18:99:73:03:7f:02:11:55:7f: 2d:9a:be:a9:71:d0:ba:66:f0:3f:20:ad:f6:be:98: fa:4a:fd:19:1c:15:97:13:48:30:bc:de:93:84:7d: c8:cd:36:af:34:21:ea:3c:25:fb:60:d9:d5:58:e4: ef:95:d1:62:94:0b:9d:de:96:f4:66:17:60:0c:9b: 7f:7a:cd:3d:fb:b9:34:4f:80:2b:12:ee:97:ef:cf: ea:13:4c:2e:04:54:66:5e:af:6a:8f:35:ab:75:c3: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:32:9C:AA:42:4C:CC:60:5E:16:14:53:F5:90:D1:66:7F:88:45:28 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:50:e9:07:09:b2:ea:22:d5:25:1a:fe:0b:bc:5a:20:19:13: 2e:81:9a:b8:e9:8a:60:ad:0a:b6:25:0a:93:54:e6:30:ea:8f: a7:3e:d9:1f:37:27:5c:17:d1:3d:ed:ee:57:ec:a6:08:08:a1: ca:96:bc:1a:2a:41:48:e2:47:f9:37:3c:86:87:9d:a6:0a:72: 5e:60:1a:c8:a7:a5:d7:1f:cc:1e:10:47:c2:20:04:54:b5:4e: eb:9f:8d:f1:db:31:9a:9b:7a:c4:78:9a:50:53:32:48:41:fe: 5c:79:a1:96:d4:2b:37:03:18:83:44:ce:12:e9:85:e0:65:bd: bf:ab:bd:04:4f:b0:6d:b2:c5:12:dd:89:3f:51:e0:fd:af:4c: 1b:de:64:3d:e9:f1:91:da:ff:2d:89:18:cf:93:c1:a4:88:f3: 28:10:cf:6b:11:57:36:1f:13:fd:b7:a2:d0:47:8a:b2:e2:98: e1:2d:b3:c9:76:48:da:ba:b5:fc:cc:56:7d:1e:f3:5b:93:e0: ca:4e:3b:d8:9c:5d:a0:dc:69:aa:6e:12:e0:cc:c2:a2:02:0b: 47:e4:53:8a:3e:07:af:49:f6:3a:0b:14:04:c7:36:95:b4:ed: 7f:a5:bd:00:0f:e1:0c:c6:ac:dd:49:d5:f5:e1:f0:d1:1a:1c: 9d:ca:8a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUxMjA2MTY0MjU3WhcNMjUxMjEzMTY0MjU3WjAYMRYwFAYD VQQDEw02OTM0NWQxMS04NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ipAjJ/GIQ/Lhg+ppWX9Y8eHhxSOeFKV3oG02XGOV7+sSUJIO5haxjHOE0cf eI5QpiCaQfJEOO+7XawjZ2fEzmxH2HPQpG7JDZizs2P2D/ECFYlX6F4st78hGJOv wjPvy2Oy6qSEBfr8BVQ8ZvVWq/BQEsHJlrpAbi64JMT8kVVzKKBYysqDrWFjOWxC 15osmDseLgzE6OwMwPAYmXMDfwIRVX8tmr6pcdC6ZvA/IK32vpj6Sv0ZHBWXE0gw vN6ThH3IzTavNCHqPCX7YNnVWOTvldFilAud3pb0ZhdgDJt/es09+7k0T4ArEu6X 78/qE0wuBFRmXq9qjzWrdcMWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIynKpC TMxgXhYUU/WQ0WZ/iEUoMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKUOkHCbLqItUlGv4LvFogGRMugZq46YpgrQq2JQqTVOYw6o+nPtkf NydcF9E97e5X7KYICKHKlrwaKkFI4kf5NzyGh52mCnJeYBrIp6XXH8weEEfCIARU tU7rn43x2zGam3rEeJpQUzJIQf5ceaGW1Cs3AxiDRM4S6YXgZb2/q70ET7BtssUS 3Yk/UeD9r0wb3mQ96fGR2v8tiRjPk8GkiPMoEM9rEVc2HxP9t6LQR4qy4pjhLbPJ dkjaurX8zFZ9HvNbk+DKTjvYnF2g3GmqbhLgzMKiAgtH5FOKPgevSfY6CxQExzaV tO1/pb0AD+EMxqzdSdX14fDRGhydyoqc -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:25 2025 by rpki-client