This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: xvAj8tFYe4LWYMuiN0NQPg0pN0JJ3ch+ojEGdNxo6cI= Subject key identifier: 7E:CE:65:15:93:6E:CE:9D:2B:FD:DA:99:26:EA:99:F6:9B:A6:E8:32 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 23A8 Signing time: Sat 06 Dec 2025 15:33:53 +0000 Manifest this update: Sat 06 Dec 2025 15:33:53 +0000 Manifest next update: Sat 13 Dec 2025 15:33:53 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: oX3ydthH93UuHBSOzxFttpCCp81iiG3gHXzS0gSJ0b8=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9175 (0x23d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Dec 6 15:33:53 2025 GMT Not After : Dec 13 15:33:53 2025 GMT Subject: CN=69344ce1-49dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:be:e3:55:72:30:66:72:1e:e4:89:6a:f4: 79:fe:7c:d7:e7:43:0e:bf:cc:27:de:96:cd:e9:b7: dd:d5:e9:3c:2c:7f:b7:a7:7a:fe:48:8b:4f:98:68: e4:dd:71:57:f0:a2:26:f5:35:a5:21:08:d5:1b:9b: fb:b1:36:ce:76:95:73:6f:9c:b3:2f:f2:6a:63:1f: 9b:c6:9f:ec:48:2c:e9:90:a5:c8:59:ac:84:d7:a3: bd:c2:a2:9c:7e:12:3f:27:9d:be:b1:a9:02:56:6c: c7:d3:ba:7a:db:dd:1d:0b:d7:28:41:09:ee:ee:52: 64:17:1a:da:86:a8:91:22:f4:73:93:6d:13:2a:dc: ca:64:e8:1a:a6:f5:aa:93:be:62:a2:3e:6d:9c:a3: 46:1e:94:d9:37:07:53:da:66:d2:5c:f7:de:2e:00: 46:4c:3f:50:07:d5:b6:67:41:50:1b:3c:22:f6:06: 8d:b9:2a:bf:87:2f:53:bd:e1:a0:85:50:14:7a:8f: ef:51:cc:c6:10:ba:72:61:cd:21:c5:89:cf:6a:3e: af:68:57:b6:d6:9b:f8:52:2e:31:97:89:59:2c:29: 24:19:67:69:05:2b:ec:15:13:ab:0d:9d:73:fb:91: 1a:30:df:bb:4a:9f:c4:bf:77:00:10:53:bb:59:27: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CE:65:15:93:6E:CE:9D:2B:FD:DA:99:26:EA:99:F6:9B:A6:E8:32 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9c:3c:36:dc:dc:be:59:c0:30:c3:f0:24:05:e4:d7:99:39: be:05:f5:39:fd:e5:64:b4:da:3f:48:5f:aa:71:3f:5c:4a:57: c1:e9:07:c1:7e:f1:66:e0:91:a8:ae:69:6e:ad:97:70:6e:49: 7b:8d:59:b3:cc:b0:f2:f0:62:fd:66:3b:de:e7:42:9b:4a:bb: be:b3:fc:3a:ef:b1:d2:fe:8d:95:e5:2b:be:ed:c9:b8:df:36: 08:15:9c:f1:d5:73:40:0b:e3:e5:96:b5:fe:d7:f7:38:0e:1d: 58:95:6c:5e:e4:98:b8:e7:4b:c6:6f:58:0b:3f:5e:ba:9c:8c: 9e:da:6f:ba:6b:40:5b:cf:6b:45:fb:3a:bb:ef:aa:7d:07:01: cd:a8:e5:b8:9d:a4:ea:76:a8:12:fb:ba:2a:f0:4c:1a:9b:4e: a2:09:20:82:01:88:40:e6:da:1c:b7:ff:8a:96:41:47:37:c6: 16:9f:11:d2:66:e8:2f:10:3f:04:69:27:e1:aa:00:19:86:8a: d8:9b:3d:ce:fc:a7:a8:e0:1a:3f:a1:dd:7c:1f:a5:6d:39:d8: 1a:b7:65:ba:fc:68:19:48:b4:27:59:69:e1:53:2f:53:b5:6a: 2f:a2:c5:1e:1d:b4:ea:9f:cf:9e:9e:c6:dd:e1:4e:29:45:1f: 50:8e:a9:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMjA2MTUzMzUzWhcNMjUxMjEzMTUzMzUzWjAYMRYwFAYD VQQDEw02OTM0NGNlMS00OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SS+41VyMGZyHuSJavR5/nzX50MOv8wn3pbN6bfd1ek8LH+3p3r+SItPmGjk 3XFX8KIm9TWlIQjVG5v7sTbOdpVzb5yzL/JqYx+bxp/sSCzpkKXIWayE16O9wqKc fhI/J52+sakCVmzH07p6290dC9coQQnu7lJkFxrahqiRIvRzk20TKtzKZOgapvWq k75ioj5tnKNGHpTZNwdT2mbSXPfeLgBGTD9QB9W2Z0FQGzwi9gaNuSq/hy9TveGg hVAUeo/vUczGELpyYc0hxYnPaj6vaFe21pv4Ui4xl4lZLCkkGWdpBSvsFROrDZ1z +5EaMN+7Sp/Ev3cAEFO7WScyxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7OZRWT bs6dK/3amSbqmfabpugyMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSnDw23Ny+WcAww/AkBeTXmTm+BfU5/eVktNo/SF+qcT9cSlfB6QfB fvFm4JGormlurZdwbkl7jVmzzLDy8GL9Zjve50KbSru+s/w677HS/o2V5Su+7cm4 3zYIFZzx1XNAC+PllrX+1/c4Dh1YlWxe5Ji450vGb1gLP166nIye2m+6a0Bbz2tF +zq776p9BwHNqOW4naTqdqgS+7oq8Ewam06iCSCCAYhA5toct/+KlkFHN8YWnxHS ZugvED8EaSfhqgAZhorYmz3O/Keo4Bo/od18H6VtOdgat2W6/GgZSLQnWWnhUy9T tWovosUeHbTqn8+ensbd4U4pRR9Qjqm9 -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:01 2025 by rpki-client