This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: 16fsHzHRXqY7Qb6TdfR3XvOrDoJSWc51ncaNPcyUiiw= Subject key identifier: 98:06:43:DB:4A:F4:AF:25:D7:94:62:96:81:12:BA:A6:71:01:05:65 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 0419 Signing time: Thu 04 Dec 2025 22:51:05 +0000 Manifest this update: Thu 04 Dec 2025 22:51:04 +0000 Manifest next update: Thu 11 Dec 2025 22:51:04 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: z9LqMyN65w2NCDJzzuA+Ge4o0kdQ9WIXvsbsePVz3vI=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Dec 4 22:51:04 2025 GMT Not After : Dec 11 22:51:04 2025 GMT Subject: CN=69321059-0400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:66:7a:1e:43:c3:02:56:9a:55:59:47:3c: f2:b6:a3:1c:9a:42:3f:99:0e:58:12:27:a8:7a:d0: b1:27:72:87:69:d2:c7:4e:68:49:c7:62:ab:d6:f0: ea:db:86:86:8e:93:65:16:50:40:9a:ca:cb:ba:15: 67:92:56:32:ca:e2:8a:30:25:01:5c:b8:2d:44:04: 3a:ae:3d:8e:c3:77:df:6e:c4:3d:2c:cf:b5:68:fd: db:e5:86:9b:fe:b1:db:92:ca:2d:71:3e:95:e5:c7: fb:cd:7f:8d:db:ff:ce:81:d7:5c:26:0c:6b:8a:18: 00:d2:0a:1d:b1:e2:24:39:d7:21:03:95:14:5b:f2: 61:1c:71:c4:c5:1f:11:b5:dd:96:6d:ea:19:d8:48: 1f:66:27:a7:8b:ea:79:19:51:c3:30:88:56:c9:0c: bf:74:61:dc:f2:a4:61:ee:63:b5:a3:e0:bf:53:5a: 43:47:eb:c6:02:8d:cd:43:5e:e2:18:cb:1a:7a:92: e6:6b:96:5a:c2:44:a4:5e:d2:54:94:df:72:9d:b3: 83:84:ec:41:68:f7:62:3c:03:ac:e5:01:55:c7:12: 36:4b:eb:37:11:5f:cd:28:c4:b6:fa:32:13:35:76: 57:27:8c:24:00:02:e6:db:1e:f4:fa:63:ae:b5:67: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:06:43:DB:4A:F4:AF:25:D7:94:62:96:81:12:BA:A6:71:01:05:65 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:32:65:eb:4d:79:c7:37:75:57:3b:44:11:20:16:a1:88:1c: b3:c5:de:ef:1b:0e:ab:e0:6c:9f:2e:5e:67:9f:87:49:28:33: 0c:84:82:ff:2d:22:b1:8e:da:fc:e3:d9:5a:7e:0d:50:fa:bb: 58:1f:f7:37:7a:7e:15:a1:65:e1:54:67:83:8a:7c:84:0d:e0: eb:d0:dd:a7:d0:2f:5e:28:57:63:4a:61:49:bb:f9:ab:12:c3: 69:ba:ac:ce:c9:25:74:01:26:25:11:08:1c:35:1a:4f:83:d7: 03:95:af:b4:27:f1:ca:15:a3:9b:3b:01:bc:cf:4f:eb:60:ac: 4a:65:22:2c:93:d1:7c:f8:6e:f3:72:cd:9e:df:fc:74:de:d1: de:de:46:5f:3f:05:a7:1f:5d:3c:36:b2:35:6e:ee:65:11:14: 6d:20:27:d4:f2:01:98:9e:4e:a9:e8:16:12:4f:71:52:d8:b6: 86:b3:9e:65:62:99:25:01:54:52:36:0c:4f:6b:38:80:bf:38: a5:03:1d:9b:3a:32:6b:55:a7:8a:a1:43:c8:1b:aa:57:e0:47: 43:ca:0b:30:cd:2a:6c:9d:09:6a:30:bf:84:e5:9a:11:c0:eb: 98:f4:1c:98:f8:ff:b0:1d:5a:24:96:28:f6:2a:2f:b1:f4:e4: b1:94:54:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUxMjA0MjI1MTA0WhcNMjUxMjExMjI1MTA0WjAYMRYwFAYD VQQDEw02OTMyMTA1OS0wNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vNmeh5DwwJWmlVZRzzytqMcmkI/mQ5YEieoetCxJ3KHadLHTmhJx2Kr1vDq 24aGjpNlFlBAmsrLuhVnklYyyuKKMCUBXLgtRAQ6rj2Ow3ffbsQ9LM+1aP3b5Yab /rHbksotcT6V5cf7zX+N2//OgddcJgxrihgA0godseIkOdchA5UUW/JhHHHExR8R td2WbeoZ2EgfZieni+p5GVHDMIhWyQy/dGHc8qRh7mO1o+C/U1pDR+vGAo3NQ17i GMsaepLma5ZawkSkXtJUlN9ynbODhOxBaPdiPAOs5QFVxxI2S+s3EV/NKMS2+jIT NXZXJ4wkAALm2x70+mOutWfqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgGQ9tK 9K8l15RiloESuqZxAQVlMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmMmXrTXnHN3VXO0QRIBahiByzxd7vGw6r4GyfLl5nn4dJKDMMhIL/ LSKxjtr849lafg1Q+rtYH/c3en4VoWXhVGeDinyEDeDr0N2n0C9eKFdjSmFJu/mr EsNpuqzOySV0ASYlEQgcNRpPg9cDla+0J/HKFaObOwG8z0/rYKxKZSIsk9F8+G7z cs2e3/x03tHe3kZfPwWnH108NrI1bu5lERRtICfU8gGYnk6p6BYST3FS2LaGs55l YpklAVRSNgxPaziAvzilAx2bOjJrVaeKoUPIG6pX4EdDygswzSpsnQlqML+E5ZoR wOuY9ByY+P+wHVoklij2Ki+x9OSxlFRG -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:40 2025 by rpki-client