This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json) Hash identifier: zgwuhla2hLzxpX3loW/P5/vBdmfFVGxPdmQRylxAPkg= Subject key identifier: D0:0C:86:71:33:44:31:91:49:9A:88:CC:02:98:F9:A6:22:FE:C3:39 Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 107F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft Manifest number: 1041 Signing time: Sat 06 Dec 2025 16:57:22 +0000 Manifest this update: Sat 06 Dec 2025 16:57:21 +0000 Manifest next update: Sat 13 Dec 2025 16:57:21 +0000 Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: 1Uc8hI6PaT/yLw4vHzQKfOxD3qKEWTskvPo3jBMDyAY=) 2: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: ppc/7vtWbXh6lIBiWqey83fiaRTt71rWU/oO4/Z9TxE=) 3: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: uKLFwAF6OPU48tvtT2EBR+YQZKAwbAGiUD5OlNlMeM8=) 4: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=) 5: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: 2tXGkSgH+XrWMKUB7Bk9Mor4TTpyKPAaQzZ2GF5++1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4223 (0x107f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Dec 6 16:57:21 2025 GMT Not After : Dec 13 16:57:21 2025 GMT Subject: CN=69346071-94d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:e5:93:e6:ed:6a:4f:4b:b8:53:93:16:3a: 6f:60:58:80:3f:15:0d:50:51:ff:8d:c1:10:9f:d5: 34:63:e4:1b:d3:84:44:b6:1e:a6:70:b9:5b:40:e0: d1:63:de:89:d9:8d:00:4d:b9:57:34:43:42:ad:74: 6c:10:fb:4e:a7:dd:e7:fe:c7:b4:93:c0:d4:97:ff: c2:06:f3:fe:f2:0c:f4:d0:a3:ba:ff:62:9c:21:37: 05:49:6e:69:9d:ac:2b:32:07:bf:d2:b0:76:1c:7c: 31:27:c2:14:8d:d0:de:74:d5:61:1c:68:52:f7:3b: 4a:be:34:65:b8:8e:c9:77:09:36:eb:7f:1c:bb:dc: a0:0d:e9:e4:77:0d:f8:26:1f:80:27:b9:65:42:ba: 9e:53:d4:88:70:f8:12:f0:48:ed:6e:3f:7c:3b:21: a9:d6:eb:5d:11:42:4f:a4:80:53:84:e9:3a:dc:45: fc:9b:a7:ae:dc:25:33:f1:3d:1a:bb:22:b5:ac:7b: 5b:e1:95:4c:3e:b9:5b:28:8f:64:4b:45:e2:92:ad: 2f:aa:74:56:83:94:90:13:b9:92:5c:86:18:e1:ca: 6b:c2:68:a6:52:3c:12:3f:3f:26:cd:bf:80:5a:ce: ce:fc:31:30:9e:d0:51:ed:f2:7f:88:16:7a:64:30: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0C:86:71:33:44:31:91:49:9A:88:CC:02:98:F9:A6:22:FE:C3:39 X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:31:8b:b9:7b:7c:43:be:9b:df:cc:48:d9:0f:f8:0e:7d:fc: 61:d2:91:19:56:13:d0:89:e7:bd:74:07:f7:85:83:50:01:32: 82:58:57:70:17:3a:94:f8:a4:0c:ce:cb:00:44:fe:a4:c9:cb: 92:29:cb:6d:81:bf:23:c5:b7:41:00:09:77:4c:d0:ac:b4:7a: 01:a5:34:a6:8c:20:21:e9:80:e1:c5:44:00:df:56:3f:50:72: a7:74:6a:35:9f:c7:ff:c9:6e:e6:f5:7d:18:f7:f3:46:ea:52: ec:05:d7:e8:70:24:d2:5c:82:c1:31:42:1c:d9:57:77:30:ab: e4:6c:39:71:0a:a4:73:68:b0:5b:c7:10:77:7f:31:2e:39:2c: 63:0f:6d:9b:59:c2:da:60:a6:bf:0e:9c:a5:a7:c8:8f:90:62: c7:d8:66:25:3d:c5:9e:84:b1:6e:a8:70:52:e9:f0:b4:1d:75: 04:22:fc:74:e5:be:a8:13:49:19:fd:29:a5:85:6f:6e:1c:75: ed:9d:89:af:ff:88:c0:bd:42:f4:14:be:0d:57:e0:fa:48:25: 24:e4:fd:4c:86:27:5a:ee:27:1d:7e:3d:14:91:c0:88:62:2c: ad:05:b7:1d:f7:53:b5:a2:60:55:e9:04:70:70:77:da:39:0b: ec:8d:04:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUxMjA2MTY1NzIxWhcNMjUxMjEzMTY1NzIxWjAYMRYwFAYD VQQDEw02OTM0NjA3MS05NGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ODlk+btak9LuFOTFjpvYFiAPxUNUFH/jcEQn9U0Y+Qb04REth6mcLlbQODR Y96J2Y0ATblXNENCrXRsEPtOp93n/se0k8DUl//CBvP+8gz00KO6/2KcITcFSW5p nawrMge/0rB2HHwxJ8IUjdDedNVhHGhS9ztKvjRluI7Jdwk2638cu9ygDenkdw34 Jh+AJ7llQrqeU9SIcPgS8Ejtbj98OyGp1utdEUJPpIBThOk63EX8m6eu3CUz8T0a uyK1rHtb4ZVMPrlbKI9kS0Xikq0vqnRWg5SQE7mSXIYY4cprwmimUjwSPz8mzb+A Ws7O/DEwntBR7fJ/iBZ6ZDB+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAMhnEz RDGRSZqIzAKY+aYi/sM5MB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx RkppbF9LVThoZHFtRExtakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqMYu5e3xDvpvfzEjZD/gOffxh0pEZVhPQiee9dAf3hYNQATKCWFdw FzqU+KQMzssARP6kycuSKcttgb8jxbdBAAl3TNCstHoBpTSmjCAh6YDhxUQA31Y/ UHKndGo1n8f/yW7m9X0Y9/NG6lLsBdfocCTSXILBMUIc2Vd3MKvkbDlxCqRzaLBb xxB3fzEuOSxjD22bWcLaYKa/Dpylp8iPkGLH2GYlPcWehLFuqHBS6fC0HXUEIvx0 5b6oE0kZ/SmlhW9uHHXtnYmv/4jAvUL0FL4NV+D6SCUk5P1Mhida7icdfj0UkcCI YiytBbcd91O1omBV6QRwcHfaOQvsjQTo -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:21 2025 by rpki-client