This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: lf0zcPJEV/WqkzIn5J6dLVSLuj8Q4oJ7C9XQVFDrMbE= Subject key identifier: 58:6C:4C:08:36:2A:27:48:7E:77:C8:24:1D:1C:24:82:52:96:CC:AC Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 05:52:30 +0000 Manifest this update: Fri 05 Dec 2025 05:52:29 +0000 Manifest next update: Fri 12 Dec 2025 05:52:29 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: HCYdq5/a9Vm2wmnFfcrcsAoVDALlbxG/zhdjZDQpE4g=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: ibYzYu8RH8C02kfa+CuxIWX8fTb9oHtMSxPb31nALF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Dec 5 05:52:29 2025 GMT Not After : Dec 12 05:52:29 2025 GMT Subject: CN=6932731e-edaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:1c:8e:cf:01:9a:b6:d4:e0:98:5c:5c:b8: 94:20:18:da:6d:e7:b8:e8:02:24:97:45:76:38:fb: 4e:a9:30:79:5e:4f:c9:77:62:78:7a:11:bc:a5:3b: f7:80:f6:a7:af:2c:be:68:88:b4:a5:6c:98:35:44: d5:04:98:3f:a7:2c:9d:d1:aa:17:5d:de:51:1a:40: 34:43:12:5d:ae:28:61:3f:71:91:00:d4:94:1f:6e: 43:65:25:dd:d3:4d:4c:b3:0f:4c:3b:cb:2c:2b:64: e4:a9:00:d0:6d:e2:3c:c8:d8:8b:47:c9:6b:fa:4f: 5f:76:48:34:3a:b9:59:f9:74:00:58:8c:35:19:ae: f1:05:b3:c8:82:cd:ad:72:4d:43:65:3b:83:10:61: 8d:ae:95:5b:e4:e1:99:f8:fa:88:03:a9:9d:97:98: e1:c2:91:c9:1c:32:26:3f:e3:02:a4:b1:53:28:d1: ad:b9:b9:0b:90:2a:54:89:70:7c:9f:6b:44:ca:ef: 23:2a:0b:08:97:4c:9f:fe:a1:f2:31:cf:30:e6:bc: d4:31:f5:45:5f:a6:af:a5:e7:4b:88:e1:5f:b1:91: 94:4f:31:1d:11:73:fc:1a:86:6f:a1:cc:0a:b2:45: 65:ac:74:83:ce:03:db:70:40:e0:91:2f:7a:fc:9f: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:4C:08:36:2A:27:48:7E:77:C8:24:1D:1C:24:82:52:96:CC:AC X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fd:7f:1d:38:c0:5d:ee:f4:d1:74:33:13:6d:d1:38:47:c1: 2c:4a:d1:4b:76:c5:af:81:9e:86:3d:07:55:04:42:da:8e:5d: 5c:a0:64:0b:f3:42:c8:3b:a4:6f:50:4c:56:bf:1a:60:54:c5: a3:bb:e1:25:7b:b2:2a:32:4d:90:ff:04:ee:bd:05:e7:f3:55: 44:04:32:53:59:1a:a2:1e:c7:22:03:81:27:c7:84:bd:d8:20: 4d:ca:f5:ee:f2:5d:ae:19:ca:6c:18:f9:47:b1:44:3b:6e:08: 63:fe:d6:d6:45:51:41:1b:0f:59:24:c8:ab:3a:f3:31:ff:f6: a6:3e:73:47:7f:f5:99:71:d8:b6:4e:0c:80:b6:bb:36:ea:04: ed:a7:cb:96:b3:b7:7f:da:ba:16:1f:62:5f:9f:c1:d7:57:9f: 29:15:46:91:bc:b6:5b:a8:c3:ea:a2:8c:f2:47:5f:f7:08:77: c0:9e:26:b3:a2:87:e8:36:41:cf:58:6d:91:3b:21:a0:31:b9: 16:bb:5d:73:5d:ac:08:52:dd:bc:2d:77:e8:89:23:48:0d:3b: 4d:7c:c2:1b:3b:57:63:a0:83:6f:7d:47:c1:7d:5d:e0:83:44: a6:c3:ef:71:1b:f1:e6:ee:d1:f4:94:36:07:98:34:0f:4a:e6: f6:2a:f8:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNTEyMDUwNTUyMjlaFw0yNTEyMTIwNTUyMjlaMBgxFjAUBgNV BAMTDTY5MzI3MzFlLWVkYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7jRyOzwGattTgmFxcuJQgGNpt57joAiSXRXY4+06pMHleT8l3Ynh6EbylO/eA 9qevLL5oiLSlbJg1RNUEmD+nLJ3Rqhdd3lEaQDRDEl2uKGE/cZEA1JQfbkNlJd3T TUyzD0w7yywrZOSpANBt4jzI2ItHyWv6T192SDQ6uVn5dABYjDUZrvEFs8iCza1y TUNlO4MQYY2ulVvk4Zn4+ogDqZ2XmOHCkckcMiY/4wKksVMo0a25uQuQKlSJcHyf a0TK7yMqCwiXTJ/+ofIxzzDmvNQx9UVfpq+l50uI4V+xkZRPMR0Rc/wahm+hzAqy RWWsdIPOA9twQOCRL3r8n5InAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWGxMCDYq J0h+d8gkHRwkglKWzKwwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFb9fx04wF3u9NF0MxNt0ThHwSxK0Ut2xa+BnoY9B1UEQtqOXVygZAvz Qsg7pG9QTFa/GmBUxaO74SV7sioyTZD/BO69BefzVUQEMlNZGqIexyIDgSfHhL3Y IE3K9e7yXa4ZymwY+UexRDtuCGP+1tZFUUEbD1kkyKs68zH/9qY+c0d/9Zlx2LZO DIC2uzbqBO2ny5azt3/auhYfYl+fwddXnykVRpG8tluow+qijPJHX/cId8CeJrOi h+g2Qc9YbZE7IaAxuRa7XXNdrAhS3bwtd+iJI0gNO018whs7V2Ogg299R8F9XeCD RKbD73Eb8ebu0fSUNgeYNA9K5vYq+EE= -----END CERTIFICATE-----Generated at Sat Dec 6 13:57:52 2025 by rpki-client