This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: yez7M5XnThPdI3/xsI43la8sR1NCyXXEimooGT/D0qU= Subject key identifier: 53:F8:AA:16:EE:5E:BE:3A:84:D5:BC:14:B8:C0:12:0E:A9:8D:83:BD Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0CB1 Signing time: Thu 04 Dec 2025 17:43:58 +0000 Manifest this update: Thu 04 Dec 2025 17:43:57 +0000 Manifest next update: Thu 11 Dec 2025 17:43:57 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: MHq0rd0k1MyMooaWEXGCZ8CvqsCDHzAX+RgvxQSqEbE=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Dec 4 17:43:57 2025 GMT Not After : Dec 11 17:43:57 2025 GMT Subject: CN=6931c85d-aa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:f1:55:a9:33:2f:8a:00:f2:e9:8b:1f:79: a9:7c:de:26:b7:b7:98:ff:1e:a4:4f:3a:cd:76:51: a4:95:28:f6:b1:f8:ee:4e:e5:be:e9:86:7d:7e:35: 94:5e:fe:d0:b4:5f:62:71:79:5f:f7:00:ff:38:a0: e9:3c:8f:92:cf:19:7a:90:cd:1b:88:0c:c2:df:a6: c1:33:7b:8f:de:cc:6e:db:ec:b1:9e:37:16:40:b1: 18:a4:e5:88:4c:36:58:21:4c:a5:ab:6d:27:1c:2c: a7:a1:bf:d0:c5:5c:00:9c:af:97:cc:ac:c2:54:6e: e1:fc:1a:05:ee:76:6e:93:c5:e1:8c:40:a2:b0:19: b8:80:2c:67:72:ad:49:1d:52:7b:35:ae:18:ba:86: c2:4e:c1:7b:0d:9b:2f:2c:a8:12:5c:c1:cb:42:29: b2:ef:b0:9b:49:c9:b7:92:46:b3:c6:98:c5:00:91: 0d:b3:31:98:78:63:b6:54:61:74:32:65:f7:a1:3d: 95:d0:28:1b:5f:b0:e4:91:83:da:0c:fe:0f:6e:f1: ae:e3:60:e1:da:69:b6:3a:38:19:8e:05:a4:be:0d: 94:d6:55:cf:4c:7f:f3:04:4a:69:90:0c:f1:37:4f: a3:30:90:46:93:e7:0a:c1:90:64:de:f5:95:86:61: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F8:AA:16:EE:5E:BE:3A:84:D5:BC:14:B8:C0:12:0E:A9:8D:83:BD X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:35:33:fa:9a:c4:ae:ba:a5:f6:d7:a5:40:e6:e2:64:a9:35: bf:42:dc:46:3f:5a:93:65:99:cb:1e:01:36:d4:21:6e:b3:a7: dc:6b:8b:ff:ee:b5:0e:2b:25:40:21:6a:90:03:fd:af:75:1f: 61:3c:fe:c9:03:86:c8:58:3d:a1:61:60:d1:b9:99:52:af:aa: 78:f0:c5:fa:07:0b:05:f8:94:55:cc:03:14:81:70:e2:76:53: 34:89:ca:5f:d4:72:ba:83:09:91:21:5f:5d:aa:a9:45:2e:86: 1b:00:38:10:bb:b1:7f:1a:76:e1:5a:e3:02:0d:ea:0d:e7:8a: 32:b2:c1:b0:c0:b9:e1:65:67:31:f5:26:ba:8a:cc:2d:c4:a4: 23:3a:53:3f:a0:80:94:df:e2:9f:3d:5c:46:ef:b7:33:94:37: 09:04:14:8c:96:6c:67:6e:1f:de:32:3b:66:7c:2f:17:17:1b: 6f:9d:9b:43:91:34:a0:8f:7b:92:24:3b:3a:87:3b:dd:06:ca: 13:38:27:f9:fd:8e:5f:21:8e:12:fe:b9:81:b5:57:17:a5:29: e0:eb:2d:7d:e7:58:1c:64:3e:d3:b2:e5:68:5e:a3:aa:34:f5: 6f:a1:d4:4b:7d:a7:02:99:d7:7c:19:2f:f6:b4:02:58:6e:fe: b0:70:dd:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUxMjA0MTc0MzU3WhcNMjUxMjExMTc0MzU3WjAYMRYwFAYD VQQDEw02OTMxYzg1ZC1hYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qDxVakzL4oA8umLH3mpfN4mt7eY/x6kTzrNdlGklSj2sfjuTuW+6YZ9fjWU Xv7QtF9icXlf9wD/OKDpPI+Szxl6kM0biAzC36bBM3uP3sxu2+yxnjcWQLEYpOWI TDZYIUylq20nHCynob/QxVwAnK+XzKzCVG7h/BoF7nZuk8XhjECisBm4gCxncq1J HVJ7Na4YuobCTsF7DZsvLKgSXMHLQimy77CbScm3kkazxpjFAJENszGYeGO2VGF0 MmX3oT2V0CgbX7DkkYPaDP4PbvGu42Dh2mm2OjgZjgWkvg2U1lXPTH/zBEppkAzx N0+jMJBGk+cKwZBk3vWVhmEhswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP4qhbu Xr46hNW8FLjAEg6pjYO9MB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBONTP6msSuuqX216VA5uJkqTW/QtxGP1qTZZnLHgE21CFus6fca4v/ 7rUOKyVAIWqQA/2vdR9hPP7JA4bIWD2hYWDRuZlSr6p48MX6BwsF+JRVzAMUgXDi dlM0icpf1HK6gwmRIV9dqqlFLoYbADgQu7F/GnbhWuMCDeoN54oyssGwwLnhZWcx 9Sa6iswtxKQjOlM/oICU3+KfPVxG77czlDcJBBSMlmxnbh/eMjtmfC8XFxtvnZtD kTSgj3uSJDs6hzvdBsoTOCf5/Y5fIY4S/rmBtVcXpSng6y1951gcZD7TsuVoXqOq NPVvodRLfacCmdd8GS/2tAJYbv6wcN13 -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:43 2025 by rpki-client