This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json) Hash identifier: WEYtXSer0BudjU5SmcURjcmTAZPOm045yiJhrf6b8fc= Subject key identifier: 23:A7:07:0F:C6:23:46:AF:19:D4:78:99:36:27:98:04:EF:F1:77:30 Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft Manifest number: BB Signing time: Fri 05 Dec 2025 03:58:10 +0000 Manifest this update: Fri 05 Dec 2025 03:58:09 +0000 Manifest next update: Fri 12 Dec 2025 03:58:09 +0000 Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: feHDW4U48VPlNfsJ96A/v8bCQcdqqT97PFfQWrg9Ih8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Validity Not Before: Dec 5 03:58:09 2025 GMT Not After : Dec 12 03:58:09 2025 GMT Subject: CN=69325851-5826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:f2:7a:67:60:86:5c:79:e4:a4:81:24:09: 51:c0:57:a0:3f:20:f5:19:ad:6b:1c:78:ac:1c:11: 95:6e:3e:7e:1f:af:54:38:b4:21:ff:ad:5f:de:aa: 4e:19:55:83:43:b9:fd:c2:f6:6f:d0:5c:57:c4:1c: df:60:aa:ac:7c:65:1c:d6:43:69:67:aa:23:9b:56: d5:d6:45:b6:7f:ec:dd:73:70:ba:3a:6b:ec:9e:e4: 1a:72:59:93:3a:7a:a5:f5:86:b8:51:9e:a5:40:68: 2c:53:87:59:8d:2b:9e:c9:c3:56:ea:d8:9b:fd:fd: 2b:8a:71:ae:c3:39:a5:4f:bb:2f:96:c8:da:f4:66: 4b:2f:3a:26:44:df:5b:35:87:05:fe:9b:22:2f:80: d3:a5:32:a6:21:a5:f6:df:f6:74:8a:27:0a:c6:af: 0f:c7:7e:c4:b4:cf:4b:b6:8e:eb:d1:dd:a1:3f:4d: 34:41:62:e0:ed:5d:70:e5:90:ac:28:95:cc:36:5c: cf:b7:5e:61:22:e3:b5:d3:a2:ff:6e:8b:97:8c:f6: 2b:d8:23:78:13:5c:22:aa:10:a3:02:aa:32:b5:ac: ce:83:1d:87:4a:3d:80:4c:97:78:14:ed:c8:fc:da: 0b:e7:e5:94:d6:2e:f0:cd:96:36:e2:84:ba:78:19: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:07:0F:C6:23:46:AF:19:D4:78:99:36:27:98:04:EF:F1:77:30 X509v3 Authority Key Identifier: keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a6:c8:93:43:8b:42:79:1b:bb:bb:76:6d:7d:d0:0b:81:c8: 45:42:2a:19:a7:30:fb:70:75:a8:7a:21:d7:ba:05:8a:5b:0a: 3a:0a:6d:bd:a5:7a:7d:f5:68:06:3a:bd:f5:24:bd:23:8f:4e: 0c:60:28:7c:ca:60:63:5b:d6:53:cb:c2:f4:33:c0:07:2b:b2: ed:0b:60:1e:3a:9d:cf:b0:5e:31:ab:cf:5e:f2:7d:5b:ea:4b: 04:7d:72:12:2a:73:18:c2:2a:a3:45:5e:32:b2:52:42:f6:6a: 24:fa:6e:da:d6:df:1e:09:1a:10:42:8c:a3:4e:d9:8e:4e:0a: 7f:7c:c5:04:72:f4:21:4c:ec:58:c4:ca:21:c1:01:14:11:e6: 33:77:72:ee:ca:c7:b4:f8:bb:40:d8:79:50:aa:1e:76:ab:4c: 18:fe:0e:be:ef:be:f9:7a:1b:ee:89:9b:9b:26:ce:95:a0:5e: 5b:45:1c:47:d6:a5:7b:c3:c8:c4:43:15:f9:89:ed:53:53:b7: bc:28:6c:5a:ff:f6:0f:6d:ab:b8:ae:a5:77:71:15:6e:87:db: 33:a0:e5:65:c3:fa:47:2e:8f:d9:18:da:12:af:1f:66:f1:4f: 94:6e:16:11:31:31:c5:fe:fd:22:77:49:94:e3:d6:67:95:82: 87:ea:c7:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDMyNzNCRjc0Q0ZEMzdEQzJCMDgwQUE0RjFBRDlFRDVF RDYzRTYzMjAwHhcNMjUxMjA1MDM1ODA5WhcNMjUxMjEyMDM1ODA5WjAYMRYwFAYD VQQDEw02OTMyNTg1MS01ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rvyemdghlx55KSBJAlRwFegPyD1Ga1rHHisHBGVbj5+H69UOLQh/61f3qpO GVWDQ7n9wvZv0FxXxBzfYKqsfGUc1kNpZ6ojm1bV1kW2f+zdc3C6OmvsnuQaclmT Onql9Ya4UZ6lQGgsU4dZjSueycNW6tib/f0rinGuwzmlT7svlsja9GZLLzomRN9b NYcF/psiL4DTpTKmIaX23/Z0iicKxq8Px37EtM9Lto7r0d2hP000QWLg7V1w5ZCs KJXMNlzPt15hIuO106L/bouXjPYr2CN4E1wiqhCjAqoytazOgx2HSj2ATJd4FO3I /NoL5+WU1i7wzZY24oS6eBl17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOnBw/G I0avGdR4mTYnmATv8XcwMB8GA1UdIwQYMBaAFDJzv3TP033CsICqTxrZ7V7WPmMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84RTYwOEE4QUIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZjS3dnS3BQR3RudFh0WS1Z eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01uT19kTV9UZmNLd2dLcFBHdG50WHRZLVl5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84RTYwOEE4QUIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZj S3dnS3BQR3RudFh0WS1ZeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCipsiTQ4tCeRu7u3ZtfdALgchFQioZpzD7cHWoeiHXugWKWwo6Cm29 pXp99WgGOr31JL0jj04MYCh8ymBjW9ZTy8L0M8AHK7LtC2AeOp3PsF4xq89e8n1b 6ksEfXISKnMYwiqjRV4yslJC9mok+m7a1t8eCRoQQoyjTtmOTgp/fMUEcvQhTOxY xMohwQEUEeYzd3Luyse0+LtA2HlQqh52q0wY/g6+7775ehvuiZubJs6VoF5bRRxH 1qV7w8jEQxX5ie1TU7e8KGxa//YPbau4rqV3cRVuh9szoOVlw/pHLo/ZGNoSrx9m 8U+UbhYRMTHF/v0id0mU49ZnlYKH6scK -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:58 2025 by rpki-client