This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: 2ORrjEaS3+6kpCLfdHj98qx/uOLo3JVzcuZ879mW9jA= Subject key identifier: 7C:97:94:7F:84:33:D8:A6:39:F0:FF:49:A5:DF:39:40:C4:ED:9A:4C Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 019E Signing time: Fri 05 Dec 2025 01:36:27 +0000 Manifest this update: Fri 05 Dec 2025 01:36:26 +0000 Manifest next update: Fri 12 Dec 2025 01:36:26 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: hAhrU7LWELJu6KgVfsDWH4AzE+U0f31kMizsj0cSkH8=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: vLLtqJRwe55PLrIjKzUZV3hunL6I7HlofeTqMR4Wk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: Dec 5 01:36:26 2025 GMT Not After : Dec 12 01:36:26 2025 GMT Subject: CN=6932371b-07bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:ed:0b:10:e1:65:ab:c4:97:fe:f2:80:aa: 42:7c:c4:d4:d4:da:43:93:da:7c:d0:79:2f:fb:ef: 68:7b:5e:81:49:19:bb:39:e6:6e:d2:a2:8b:66:78: 2c:9d:4d:f0:27:21:24:30:89:3f:09:da:a0:00:41: ca:06:c9:75:4e:99:53:00:1d:c2:7b:d1:0c:78:f4: c2:78:24:da:0b:c9:b3:47:73:98:4d:57:03:71:c7: 69:58:f5:e9:a8:29:69:10:ce:e7:a0:be:9e:26:ed: 01:b5:cd:de:40:31:bc:f7:9e:b5:cc:12:00:aa:17: 4e:65:a6:19:e6:dc:bb:a1:83:ae:25:4e:c9:1f:b0: b5:2d:a6:be:fb:dc:f3:2f:27:ac:d1:9b:18:0e:93: 6b:f5:a5:3a:ff:3f:e9:63:b8:ac:f0:db:33:ff:89: 2a:d6:c7:b2:ef:a6:90:50:ec:77:e6:be:38:0f:3c: 90:32:46:e0:26:83:5a:f9:83:1f:21:3e:48:16:79: 7b:b7:de:d7:44:8c:58:29:29:3c:47:3c:c7:a2:cf: fe:b9:92:29:39:a9:42:af:1d:cc:59:24:fd:97:47: b9:e8:31:4d:b6:7e:4b:10:3b:b0:40:ca:ba:e6:34: 00:3b:da:6d:82:8c:b7:2d:4a:bd:29:5e:49:48:80: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:97:94:7F:84:33:D8:A6:39:F0:FF:49:A5:DF:39:40:C4:ED:9A:4C X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:de:a1:dd:42:ff:7b:8b:12:f8:20:44:09:b5:92:09:8c:be: 32:fd:ec:b2:bb:89:f5:cd:fa:ce:2b:fc:3b:b1:5b:c8:11:6b: 4d:2a:6c:3d:e9:61:d2:66:ce:c7:36:64:b9:dc:3f:2f:00:3d: 2a:73:8b:59:c2:a6:08:3a:21:ea:fd:7d:f1:35:db:4b:06:69: 72:57:e8:30:3f:b0:ff:7e:51:5c:4a:01:70:5a:cc:0f:62:f5: e6:2f:4b:16:a6:fb:89:48:dc:14:00:c6:2c:30:56:7b:0d:dc: 44:33:4f:2f:13:2a:72:86:63:b9:b8:7b:34:08:da:fb:a9:8d: 1c:c3:e1:16:39:99:15:30:2d:0e:db:e1:b6:a2:8f:8c:e9:24: d0:77:74:6e:b1:fb:bd:f5:b5:84:64:af:d4:b0:23:1b:ca:32: 2e:2a:a2:db:27:3e:3c:42:70:83:d3:12:ac:30:74:12:6c:38: fc:5d:2f:a9:d5:56:04:4f:a9:c5:b5:34:56:88:12:9d:cf:d4: 8b:08:19:ec:2e:77:9f:83:9b:22:a8:5e:76:83:66:8c:1d:f2: 3e:c3:87:20:f4:33:35:fa:3a:1f:9e:56:fc:7a:19:bc:76:f7: 55:fb:ef:c0:47:dc:16:2b:a3:d2:ea:99:0b:2a:e8:53:f6:df: 93:2f:33:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUxMjA1MDEzNjI2WhcNMjUxMjEyMDEzNjI2WjAYMRYwFAYD VQQDEw02OTMyMzcxYi0wN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwPtCxDhZavEl/7ygKpCfMTU1NpDk9p80Hkv++9oe16BSRm7OeZu0qKLZngs nU3wJyEkMIk/CdqgAEHKBsl1TplTAB3Ce9EMePTCeCTaC8mzR3OYTVcDccdpWPXp qClpEM7noL6eJu0Btc3eQDG89561zBIAqhdOZaYZ5ty7oYOuJU7JH7C1Laa++9zz Lyes0ZsYDpNr9aU6/z/pY7is8Nsz/4kq1sey76aQUOx35r44DzyQMkbgJoNa+YMf IT5IFnl7t97XRIxYKSk8RzzHos/+uZIpOalCrx3MWST9l0e56DFNtn5LEDuwQMq6 5jQAO9ptgoy3LUq9KV5JSIDweQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyXlH+E M9imOfD/SaXfOUDE7ZpMMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6 aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy3qHdQv97ixL4IEQJtZIJjL4y/eyyu4n1zfrOK/w7sVvIEWtNKmw9 6WHSZs7HNmS53D8vAD0qc4tZwqYIOiHq/X3xNdtLBmlyV+gwP7D/flFcSgFwWswP YvXmL0sWpvuJSNwUAMYsMFZ7DdxEM08vEypyhmO5uHs0CNr7qY0cw+EWOZkVMC0O 2+G2oo+M6STQd3Rusfu99bWEZK/UsCMbyjIuKqLbJz48QnCD0xKsMHQSbDj8XS+p 1VYET6nFtTRWiBKdz9SLCBnsLnefg5siqF52g2aMHfI+w4cg9DM1+jofnlb8ehm8 dvdV++/AR9wWK6PS6pkLKuhT9t+TLzMR -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:55 2025 by rpki-client