This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft File: MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json) Hash identifier: nh/94CN5SV3BVCmdk0Ah9gXLK1w5coq943RVzv/He5s= Subject key identifier: 85:90:B8:13:3C:7C:8B:8C:78:94:8E:76:0A:A1:B6:8A:63:B2:A9:B5 Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft Manifest number: 018E Signing time: Fri 05 Dec 2025 01:44:05 +0000 Manifest this update: Fri 05 Dec 2025 01:44:05 +0000 Manifest next update: Fri 12 Dec 2025 01:44:05 +0000 Files and hashes: 1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: LzI3AGMqUXMXkHLj26+NIOOFAdjhN2aI7x7jvaLEmPg=) 2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: mptcdiE9tQA9oGuwJ5pkSKgRaIV+xdsDpTyBHSSEXD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Validity Not Before: Dec 5 01:44:05 2025 GMT Not After : Dec 12 01:44:05 2025 GMT Subject: CN=693238e5-a773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:c9:d1:17:cf:b4:3c:36:4d:52:b0:98:f0: 7e:ea:b6:35:ab:8e:5d:c5:f0:18:e2:62:0a:7c:9d: 32:25:b9:d7:af:83:c5:cd:ec:2d:54:34:fa:59:e4: 35:7c:2c:d7:96:6c:2c:ad:5c:2f:a4:e0:1b:d0:3f: c2:45:07:5b:0d:b8:b2:a9:7a:75:70:ff:10:4a:54: 2d:fe:3f:5d:ad:36:3e:20:a4:ae:4c:92:70:b2:9d: 6b:6e:4e:23:54:89:e2:ef:0b:04:cc:70:4f:f2:e6: 33:5e:8d:90:0c:fd:0e:b9:35:bd:e8:48:29:3e:cc: e2:da:93:6a:ef:5a:c2:73:a4:f0:6f:d6:35:3d:ae: 37:09:a1:5d:d6:ea:c4:cd:b1:ef:11:26:42:05:4d: 38:1c:17:6c:9b:2c:43:12:86:52:53:fe:a3:29:7b: 0a:2b:ee:fa:fe:b2:eb:77:e3:f4:5d:b3:9a:bb:10: cd:fb:53:74:91:36:c0:12:88:ad:60:44:bb:64:4b: 3d:37:11:7f:41:7f:48:7d:16:58:90:68:5e:19:3d: 16:0d:10:8a:42:cf:18:ac:95:21:4a:4e:6b:35:60: bf:5d:cd:6d:c1:8e:03:75:6c:61:e5:fd:6c:5e:63: 5e:3d:ed:14:b6:e0:17:7d:43:0a:e3:a6:c6:9f:dd: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:90:B8:13:3C:7C:8B:8C:78:94:8E:76:0A:A1:B6:8A:63:B2:A9:B5 X509v3 Authority Key Identifier: keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d8:93:20:d8:45:5a:a9:8b:d4:1b:b8:f1:9d:cd:62:4b:ed: 68:a1:e8:16:62:82:19:ec:11:f3:50:f2:df:2b:4a:be:d3:6c: 03:18:85:39:73:6b:a3:ef:21:ca:eb:20:8b:d5:7c:fe:0a:bf: c7:7c:8f:c0:6b:86:2e:90:f8:fd:cd:80:ec:40:4c:37:3c:fa: 66:61:63:19:71:10:bf:1b:c8:cf:6d:50:78:da:2b:73:b6:be: 2c:1d:e7:5f:2d:c8:31:36:ec:74:ab:35:62:8e:b0:24:09:08: ea:08:ed:87:1c:a1:29:7a:68:4e:37:f2:fa:c4:0c:0c:4e:b3: 6d:0a:ab:db:73:c7:c4:cc:31:f7:50:50:25:0f:5e:fa:0e:e3: 96:e7:52:10:1e:4e:07:9c:94:e1:18:59:e5:68:be:76:2e:89: ef:b4:96:11:ed:19:da:1e:26:cb:88:bf:0f:be:40:34:b8:79: 60:f9:df:70:e4:2a:33:16:b6:1d:da:81:1e:56:3c:a4:09:04: b4:e5:07:cf:aa:29:9f:35:a6:02:c2:76:c3:4f:55:04:cb:9e: 88:1c:db:8c:fd:4f:95:28:7e:bf:ca:6b:d4:9f:ce:fb:27:aa: 4b:72:32:d9:ab:a7:01:f8:86:29:3e:ee:f5:54:34:26:9e:a5: ca:22:9d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwQzgxMTAvBgNVBAUTKDMzMThFODc1NDEzNjQyMUUyNDRBNkM0MUREQTVERUND MTBEQThGODEwHhcNMjUxMjA1MDE0NDA1WhcNMjUxMjEyMDE0NDA1WjAYMRYwFAYD VQQDEw02OTMyMzhlNS1hNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsXJ0RfPtDw2TVKwmPB+6rY1q45dxfAY4mIKfJ0yJbnXr4PFzewtVDT6WeQ1 fCzXlmwsrVwvpOAb0D/CRQdbDbiyqXp1cP8QSlQt/j9drTY+IKSuTJJwsp1rbk4j VIni7wsEzHBP8uYzXo2QDP0OuTW96EgpPszi2pNq71rCc6Twb9Y1Pa43CaFd1urE zbHvESZCBU04HBdsmyxDEoZSU/6jKXsKK+76/rLrd+P0XbOauxDN+1N0kTbAEoit YES7ZEs9NxF/QX9IfRZYkGheGT0WDRCKQs8YrJUhSk5rNWC/Xc1twY4DdWxh5f1s XmNePe0UtuAXfUMK46bGn91dcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWQuBM8 fIuMeJSOdgqhtopjsqm1MB8GA1UdIwQYMBaAFDMY6HVBNkIeJEpsQd2l3swQ2o+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBDOC9DQzIzMzhEQzZF NTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFoNGtTbXhCM2FYZXpCRGFq NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014am9kVUUyUWg0a1NteEIzYVhlekJEYWo0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBDOC9DQzIzMzhEQzZFNTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFo NGtTbXhCM2FYZXpCRGFqNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE2JMg2EVaqYvUG7jxnc1iS+1ooegWYoIZ7BHzUPLfK0q+02wDGIU5 c2uj7yHK6yCL1Xz+Cr/HfI/Aa4YukPj9zYDsQEw3PPpmYWMZcRC/G8jPbVB42itz tr4sHedfLcgxNux0qzVijrAkCQjqCO2HHKEpemhON/L6xAwMTrNtCqvbc8fEzDH3 UFAlD176DuOW51IQHk4HnJThGFnlaL52LonvtJYR7RnaHibLiL8PvkA0uHlg+d9w 5CozFrYd2oEeVjykCQS05QfPqimfNaYCwnbDT1UEy56IHNuM/U+VKH6/ymvUn877 J6pLcjLZq6cB+IYpPu71VDQmnqXKIp3E -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:54 2025 by rpki-client