This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: 8nV2UJGh5m2JHK7nEt9akrskHNrV9AieyyiQrIWg6Ps= Subject key identifier: 09:B7:49:4F:3E:A0:10:E2:10:14:C5:09:2C:55:5C:8A:83:33:65:D1 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 14A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 149D Signing time: Thu 04 Dec 2025 16:31:29 +0000 Manifest this update: Thu 04 Dec 2025 16:31:29 +0000 Manifest next update: Thu 11 Dec 2025 16:31:29 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: l4DvO3hVzDAHrsKLRWjMkIHNOIL3g88GfMIGMWyIBDM=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5288 (0x14a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Dec 4 16:31:29 2025 GMT Not After : Dec 11 16:31:29 2025 GMT Subject: CN=6931b761-b088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:41:d7:52:8f:21:bf:9e:e1:fc:02:1f:27: ee:10:09:a8:2f:08:70:56:48:d8:8c:15:a7:c2:7d: de:cb:34:b1:2d:c6:be:f4:fd:f7:34:2f:68:f9:89: 95:68:d2:ee:d1:b8:49:2d:0d:8b:6b:47:b1:66:9f: 8b:9d:af:ab:f1:5a:04:e9:a3:5e:3e:30:8b:06:a4: e1:e6:d5:ad:e4:ae:2f:9e:67:85:8b:15:6e:05:3e: c1:ea:49:5b:e7:bc:0a:d5:4a:09:ef:58:27:ea:19: 9a:e8:32:10:b8:b4:95:68:3e:91:71:35:2f:10:ca: 48:42:da:9e:7b:3d:76:23:a6:e7:dc:11:21:6b:df: 38:3b:27:32:34:27:33:5e:a8:24:b3:96:6e:08:82: 7a:f7:1c:46:9c:6b:62:36:e1:2e:19:af:b7:0b:20: ad:fc:27:3f:36:2e:8a:03:8f:3d:e9:a4:8d:a0:23: d6:49:fc:9a:4b:c5:ac:67:80:b8:a5:d2:2a:93:d8: c2:01:1e:ab:b8:4d:54:b4:da:d6:4c:8f:63:6c:38: 30:bd:73:51:bb:41:97:a5:5b:22:28:e3:9a:60:84: c1:e7:9b:1f:fd:ca:f6:9e:9d:cd:fb:17:66:a2:69: 1f:4b:e3:d2:18:14:cf:51:1f:d3:04:ff:d7:58:91: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:49:4F:3E:A0:10:E2:10:14:C5:09:2C:55:5C:8A:83:33:65:D1 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:82:a9:b5:fc:cd:68:c2:b1:15:56:8a:1f:44:0a:b0:65:6d: 61:7a:65:64:72:2c:92:a4:82:a7:fb:ac:89:64:8a:6c:49:c4: 68:fa:6b:b6:96:78:41:5a:69:49:3d:49:13:f6:4a:40:f7:a9: fb:93:91:22:5e:9b:fb:f5:01:6e:3b:2b:06:87:32:cd:bb:6c: 3c:a4:f1:f0:d8:fd:6a:07:dc:be:0d:26:bc:4a:6d:3f:aa:e4: fb:d5:0e:40:b6:37:5e:7b:72:93:c7:f2:06:b2:9f:99:7f:52: 54:09:21:1f:80:e8:25:0d:d2:37:3d:6d:8a:de:92:02:00:c2: dc:f4:3a:02:39:d9:1f:02:3b:ef:d3:69:47:26:e9:bf:7c:75: bf:cd:30:6b:07:5a:df:bf:0c:47:e1:71:ef:60:68:3e:18:26: 47:9f:b8:0b:3c:6d:78:d4:43:4c:4b:9b:0e:9e:a3:31:de:4e: 18:78:e3:11:ae:90:fd:5e:d8:46:a1:3f:5a:e3:c8:d8:f5:90: 30:49:55:6d:30:e8:49:dc:32:3a:25:6c:25:81:93:4e:7d:0f: 20:2d:12:11:95:66:37:63:be:d3:ba:bc:28:92:01:53:23:a6: f3:14:33:40:c1:ad:7f:51:0c:54:84:67:8c:81:10:6b:e6:09: 03:83:58:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUxMjA0MTYzMTI5WhcNMjUxMjExMTYzMTI5WjAYMRYwFAYD VQQDEw02OTMxYjc2MS1iMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6lB11KPIb+e4fwCHyfuEAmoLwhwVkjYjBWnwn3eyzSxLca+9P33NC9o+YmV aNLu0bhJLQ2La0exZp+Lna+r8VoE6aNePjCLBqTh5tWt5K4vnmeFixVuBT7B6klb 57wK1UoJ71gn6hma6DIQuLSVaD6RcTUvEMpIQtqeez12I6bn3BEha984OycyNCcz Xqgks5ZuCIJ69xxGnGtiNuEuGa+3CyCt/Cc/Ni6KA4896aSNoCPWSfyaS8WsZ4C4 pdIqk9jCAR6ruE1UtNrWTI9jbDgwvXNRu0GXpVsiKOOaYITB55sf/cr2np3N+xdm omkfS+PSGBTPUR/TBP/XWJEo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAm3SU8+ oBDiEBTFCSxVXIqDM2XRMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEgqm1/M1owrEVVoofRAqwZW1hemVkciySpIKn+6yJZIpsScRo+mu2 lnhBWmlJPUkT9kpA96n7k5EiXpv79QFuOysGhzLNu2w8pPHw2P1qB9y+DSa8Sm0/ quT71Q5Atjdee3KTx/IGsp+Zf1JUCSEfgOglDdI3PW2K3pICAMLc9DoCOdkfAjvv 02lHJum/fHW/zTBrB1rfvwxH4XHvYGg+GCZHn7gLPG141ENMS5sOnqMx3k4YeOMR rpD9XthGoT9a48jY9ZAwSVVtMOhJ3DI6JWwlgZNOfQ8gLRIRlWY3Y77TurwokgFT I6bzFDNAwa1/UQxUhGeMgRBr5gkDg1hV -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:06 2025 by rpki-client