This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: aD2ztA5OrgxwKv2nyFZjGde/PjRlZZwTufBkXJxXdVA= Subject key identifier: 3B:9B:18:4C:0C:43:78:93:1F:C4:AB:95:98:1A:C0:4F:A8:F7:AA:A3 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 11B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 11AA Signing time: Sat 06 Dec 2025 16:43:10 +0000 Manifest this update: Sat 06 Dec 2025 16:43:10 +0000 Manifest next update: Sat 13 Dec 2025 16:43:10 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: uZPe5MKCdLZOqIQeBcC8uJgYS7H4k+y+HKY+a4ZqNB8=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4534 (0x11b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Dec 6 16:43:10 2025 GMT Not After : Dec 13 16:43:10 2025 GMT Subject: CN=69345d1e-fcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:56:8c:0a:ec:5d:82:65:f2:54:19:ae:5d: 4c:f9:4e:e5:7a:64:06:97:19:ff:2e:23:d9:bc:99: 0d:c0:56:90:cf:ed:17:64:5e:d4:6f:6f:48:5b:b8: 15:2a:ad:0a:59:eb:ef:a0:28:7c:31:c8:f9:b1:44: 7c:ac:fc:a3:1c:e3:20:38:37:78:6d:47:f5:7f:6f: 9e:ea:38:b0:92:29:32:7f:d7:90:82:6e:ad:13:17: e5:9b:fb:5f:a2:83:26:bb:72:9f:de:f1:8a:0c:11: b3:40:23:b0:8a:66:81:90:7e:02:0c:90:f3:f2:99: eb:72:82:0b:5e:e2:37:d0:51:9d:9a:12:c4:d6:20: b9:72:10:6f:66:bb:44:31:73:01:19:9d:0c:fb:f9: 3d:ac:53:6b:2c:a7:8b:81:3b:80:2b:5b:4a:e9:aa: 5c:16:f0:e4:61:59:dc:35:3a:20:a4:2a:52:55:e9: da:fe:03:63:49:55:27:fe:09:44:66:fa:a2:76:dc: b7:88:a1:16:b7:ec:8f:06:be:46:5f:7d:73:08:ff: c4:25:ca:6d:95:6f:13:93:a1:8e:54:a6:d7:b9:4b: 96:ee:de:16:32:1a:be:1d:03:28:e8:3f:9d:11:12: 47:ef:f9:43:9a:6c:05:c9:70:99:fb:ae:9c:7d:80: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9B:18:4C:0C:43:78:93:1F:C4:AB:95:98:1A:C0:4F:A8:F7:AA:A3 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:85:0c:a0:1a:5e:0a:47:0a:ca:b3:4c:2b:04:dc:ff:ab:38: 2c:a5:8c:fb:66:d1:cd:77:d4:70:f5:c1:2e:2e:e7:6d:6a:b3: e9:2d:99:7d:c2:7f:f4:13:7b:13:8d:4e:73:1f:47:aa:b9:8f: ab:dd:ee:07:df:20:1b:7a:5b:4d:47:45:88:20:ef:0d:8a:a1: bc:f3:0e:88:f5:3a:a2:82:f1:14:37:31:e0:55:b3:6c:49:cd: 64:33:ca:ea:1a:1c:57:8c:70:d4:5f:19:29:be:06:cb:f7:69: 6b:66:a6:88:89:9e:c0:71:79:8f:9d:c3:da:4f:63:f1:3d:b2: df:ea:db:4d:2a:c7:74:54:ae:88:2c:7f:09:d4:e4:ff:2f:e8: d7:95:41:60:2d:1c:9f:23:5b:de:3c:86:22:5b:7f:50:5b:41: 5f:a0:8d:22:b3:2c:d7:08:d6:66:b0:b6:6a:62:44:b0:5b:a1: 3b:26:6b:22:c6:14:ae:e8:5c:26:d0:f2:44:87:6f:1a:39:ed: 2b:ec:40:55:c5:ad:09:b8:49:ae:56:26:4e:47:b9:fa:cc:ae: 0a:74:a2:e4:ee:1b:b6:c7:1c:cd:10:70:06:7e:d5:86:76:04: ab:4d:66:04:76:5f:ab:8d:c5:7c:f8:06:b4:4a:2f:49:3b:09: 9c:c8:20:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUxMjA2MTY0MzEwWhcNMjUxMjEzMTY0MzEwWjAYMRYwFAYD VQQDEw02OTM0NWQxZS1mY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuJWjArsXYJl8lQZrl1M+U7lemQGlxn/LiPZvJkNwFaQz+0XZF7Ub29IW7gV Kq0KWevvoCh8Mcj5sUR8rPyjHOMgODd4bUf1f2+e6jiwkikyf9eQgm6tExflm/tf ooMmu3Kf3vGKDBGzQCOwimaBkH4CDJDz8pnrcoILXuI30FGdmhLE1iC5chBvZrtE MXMBGZ0M+/k9rFNrLKeLgTuAK1tK6apcFvDkYVncNTogpCpSVena/gNjSVUn/glE Zvqidty3iKEWt+yPBr5GX31zCP/EJcptlW8Tk6GOVKbXuUuW7t4WMhq+HQMo6D+d ERJH7/lDmmwFyXCZ+66cfYBuewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDubGEwM Q3iTH8SrlZgawE+o96qjMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNhQygGl4KRwrKs0wrBNz/qzgspYz7ZtHNd9Rw9cEuLudtarPpLZl9 wn/0E3sTjU5zH0equY+r3e4H3yAbeltNR0WIIO8NiqG88w6I9TqigvEUNzHgVbNs Sc1kM8rqGhxXjHDUXxkpvgbL92lrZqaIiZ7AcXmPncPaT2PxPbLf6ttNKsd0VK6I LH8J1OT/L+jXlUFgLRyfI1vePIYiW39QW0FfoI0isyzXCNZmsLZqYkSwW6E7Jmsi xhSu6Fwm0PJEh28aOe0r7EBVxa0JuEmuViZOR7n6zK4KdKLk7hu2xxzNEHAGftWG dgSrTWYEdl+rjcV8+Aa0Si9JOwmcyCBN -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:02 2025 by rpki-client