This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: ub3IdlOHEtO2iyyXX7l3OB0SK5JAZtScD/yK4BUZmyc= Subject key identifier: 20:54:6A:2B:E0:E6:F3:86:0B:7F:26:B9:49:18:C0:38:99:C9:BA:07 Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: AE Signing time: Fri 05 Dec 2025 04:05:46 +0000 Manifest this update: Fri 05 Dec 2025 04:05:45 +0000 Manifest next update: Fri 12 Dec 2025 04:05:45 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: nN3tm4hOd+JMZBTmv4MasMR8ssJ9iwVxqkR1Cs4u2FA=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Dec 5 04:05:45 2025 GMT Not After : Dec 12 04:05:45 2025 GMT Subject: CN=69325a19-d938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:fa:2f:66:de:36:47:fe:32:95:74:6e:7f: 98:c7:b5:d7:1e:b9:11:a8:02:8d:f9:ad:4a:3d:10: ec:12:ca:ab:de:0a:a7:39:52:50:c3:c3:64:68:72: b6:e0:8c:82:87:32:c3:4a:fb:45:0a:bc:e5:85:a8: ff:d8:4b:8b:39:10:94:92:41:64:bc:b1:1d:a1:1e: e8:46:63:f5:12:ae:d5:31:d1:fc:1c:72:b1:a8:ae: a0:74:66:88:cd:54:4e:3e:b9:56:1a:95:6e:80:53: b7:f0:dc:f4:45:25:fe:32:b4:a3:5a:1a:1e:31:65: f1:2f:a3:46:fa:4c:1f:d5:2c:2f:0a:62:66:99:aa: 1f:e9:e4:b8:60:6e:4c:85:97:9d:7b:66:d9:45:9a: 9b:03:9c:39:fc:a2:86:44:85:1b:e5:e8:ca:82:44: 5b:5d:73:6b:a4:73:62:af:a3:bf:6e:26:da:b9:56: a9:df:9b:a2:de:25:7e:b5:08:a0:8a:50:21:27:5c: 44:95:ab:fc:a6:82:63:36:e1:86:55:1e:a3:6f:fa: e3:a6:66:4e:69:15:7f:bf:04:eb:b4:ea:28:6f:63: 8b:15:0f:0a:a1:2b:bd:91:20:4d:38:85:75:ba:39: f2:b8:ae:b3:d2:41:39:d0:32:b4:b1:e1:45:80:e0: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:54:6A:2B:E0:E6:F3:86:0B:7F:26:B9:49:18:C0:38:99:C9:BA:07 X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c6:33:fe:92:76:05:30:67:a0:ac:78:e6:bd:90:5c:ed:fe: a7:7d:81:63:9d:5f:36:87:2c:5f:83:a5:f1:97:f2:80:3b:86: 28:73:94:2b:8e:ec:ff:9f:1b:91:31:88:1e:43:9e:41:43:7d: ce:42:e9:77:e2:4a:be:68:18:86:de:5f:4e:7a:75:90:26:3e: 14:17:b4:e8:60:01:f0:84:3f:a8:b9:60:32:c7:be:7b:c1:85: 6e:35:c9:a7:ac:0e:a2:b2:a6:4f:87:80:55:79:99:cd:5c:55: e4:9c:65:2b:6c:25:41:54:46:84:3a:32:e9:11:46:cf:1c:1f: 92:42:11:a4:f9:85:e6:dc:e0:8c:f1:3b:dd:d8:f1:4e:46:24: 36:2f:e2:b6:6c:3a:d4:38:59:ff:a2:77:c1:90:fb:12:75:ee: c4:0b:b0:9e:5b:27:ec:96:21:11:9f:d7:6d:56:e8:d6:07:f9: 21:45:56:26:fc:cf:75:5d:d0:32:d6:4f:31:1e:2e:fb:e8:be: be:c9:8f:e7:7f:1f:cd:d8:f9:7f:80:fb:7b:e3:4d:d5:e0:55: c4:08:ab:d2:20:e0:a0:32:14:bd:a4:53:56:b1:b3:6e:a9:57: 09:64:c3:d2:bf:be:ad:2e:38:b2:90:88:76:3b:5e:13:a2:a2: 24:51:16:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDk5QjcwQkYyMDI1RUREQ0RGOTJBNDdEMDRDQjc1NkFD QjA3M0RDNDUwHhcNMjUxMjA1MDQwNTQ1WhcNMjUxMjEyMDQwNTQ1WjAYMRYwFAYD VQQDEw02OTMyNWExOS1kOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLf6L2beNkf+MpV0bn+Yx7XXHrkRqAKN+a1KPRDsEsqr3gqnOVJQw8NkaHK2 4IyChzLDSvtFCrzlhaj/2EuLORCUkkFkvLEdoR7oRmP1Eq7VMdH8HHKxqK6gdGaI zVROPrlWGpVugFO38Nz0RSX+MrSjWhoeMWXxL6NG+kwf1SwvCmJmmaof6eS4YG5M hZede2bZRZqbA5w5/KKGRIUb5ejKgkRbXXNrpHNir6O/bibauVap35ui3iV+tQig ilAhJ1xElav8poJjNuGGVR6jb/rjpmZOaRV/vwTrtOoob2OLFQ8KoSu9kSBNOIV1 ujnyuK6z0kE50DK0seFFgOAiHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBUaivg 5vOGC38muUkYwDiZyboHMB8GA1UdIwQYMBaAFJm3C/ICXt3N+SpH0Ey3Vqywc9xF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82REVGREI3MEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNjMzVLa2ZRVExkV3JMQnoz RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82REVGREI3MEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNj MzVLa2ZRVExkV3JMQnozRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtxjP+knYFMGegrHjmvZBc7f6nfYFjnV82hyxfg6Xxl/KAO4Yoc5Qr juz/nxuRMYgeQ55BQ33OQul34kq+aBiG3l9OenWQJj4UF7ToYAHwhD+ouWAyx757 wYVuNcmnrA6isqZPh4BVeZnNXFXknGUrbCVBVEaEOjLpEUbPHB+SQhGk+YXm3OCM 8Tvd2PFORiQ2L+K2bDrUOFn/onfBkPsSde7EC7CeWyfsliERn9dtVujWB/khRVYm /M91XdAy1k8xHi776L6+yY/nfx/N2Pl/gPt7403V4FXECKvSIOCgMhS9pFNWsbNu qVcJZMPSv76tLjiykIh2O14ToqIkURbo -----END CERTIFICATE-----Generated at Sat Dec 6 15:25:25 2025 by rpki-client