This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: 641rX4BFjY2pa5F1Lcz/miRkpjAqg+SHM6TIlPQoV48= Subject key identifier: 8D:48:60:81:C6:F5:3E:2D:D3:0D:A3:DC:E2:1A:DE:B8:B7:07:6D:74 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 0139 Signing time: Fri 05 Dec 2025 02:35:47 +0000 Manifest this update: Fri 05 Dec 2025 02:35:46 +0000 Manifest next update: Fri 12 Dec 2025 02:35:46 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: /uFOl5cZpYEsBP+VASnCPsXO26G9JuM8bgzOSRVOE3E=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Dec 5 02:35:46 2025 GMT Not After : Dec 12 02:35:46 2025 GMT Subject: CN=69324502-ec89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:4c:57:9f:d9:6a:d0:ca:41:c8:a0:0c:73: 83:79:4a:6f:c5:97:6e:cf:19:da:4b:a6:b4:95:25: 59:5b:a9:c2:15:05:b9:db:0c:ed:1e:61:1a:3b:a8: 2d:4b:54:78:b4:e9:1c:41:04:fa:4a:09:62:fc:63: b1:74:ce:29:ad:04:18:ae:82:b6:9b:88:79:80:6b: 77:59:f1:b8:b2:83:f7:07:f0:7c:de:97:8f:c2:58: 24:b3:62:ae:59:f3:67:5e:68:0f:fa:ff:06:a0:c0: e1:1a:b8:a9:f6:ff:7c:fd:49:2a:60:ff:b3:b7:91: b2:5d:73:0f:f5:26:46:41:55:fd:71:89:f5:15:4e: 56:40:00:ff:c3:36:d0:68:70:fd:a4:14:61:46:9f: 19:40:a2:ab:eb:82:4c:2e:49:5e:af:8f:a1:79:97: ec:c4:4b:9e:52:1a:a4:f3:a7:d9:7f:93:91:70:04: b8:12:2f:52:15:a0:be:aa:fc:30:04:d0:6d:a3:d8: cd:3c:e7:85:34:a6:72:cc:9a:a1:e4:fe:f1:23:62: f8:d4:86:81:07:17:a9:bd:b2:54:7d:9d:26:c3:9a: bb:f3:0e:f3:be:fe:f2:a5:f3:ec:6d:d2:6e:a0:85: 95:76:ef:5a:28:bc:80:c0:1a:b3:10:dd:61:fe:17: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:48:60:81:C6:F5:3E:2D:D3:0D:A3:DC:E2:1A:DE:B8:B7:07:6D:74 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d6:d1:9b:9b:fa:8e:59:fb:48:86:af:40:82:b5:0e:dd:65: e1:88:ac:c6:4f:dc:81:7e:5d:0e:2b:48:bf:dc:9e:b3:d1:a9: a7:16:c8:72:e0:cd:cf:f7:a5:bd:f0:7e:f7:e8:6d:38:b9:b8: 89:a4:8e:5e:33:c2:eb:34:88:b9:5a:82:98:a2:17:5f:fe:7f: c7:0c:1f:0f:88:29:a9:3c:6d:9e:e2:3e:a9:ec:83:1b:b5:6b: f7:26:1c:b2:c8:29:af:f1:cb:b0:d4:e5:20:65:97:4c:2b:22: a3:5a:11:ba:a0:53:94:ad:4c:19:70:23:ce:61:ad:8f:0f:a7: f9:a6:19:fb:e0:d3:ab:04:db:da:2f:9f:3e:b4:9c:f0:76:8b: 83:d7:63:c0:a6:57:bc:4f:f9:73:96:d1:81:2f:17:d2:e8:81: 4f:5e:04:80:2b:18:2a:4c:eb:10:bf:71:53:46:fa:67:b5:e8: a5:ed:a2:33:28:88:d3:9d:f7:a6:1a:86:b6:5e:32:4f:60:9a: 86:83:d1:bb:ba:0a:d5:49:80:a1:74:5e:8d:f7:41:d9:4d:94: da:5d:40:81:3d:5f:4c:7c:f8:b2:ce:eb:7e:0f:62:eb:27:d0: 0f:0a:33:b1:21:66:b8:79:00:71:f7:ea:3e:8f:0e:9e:82:33: 79:a3:1d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUxMjA1MDIzNTQ2WhcNMjUxMjEyMDIzNTQ2WjAYMRYwFAYD VQQDEw02OTMyNDUwMi1lYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oVMV5/ZatDKQcigDHODeUpvxZduzxnaS6a0lSVZW6nCFQW52wztHmEaO6gt S1R4tOkcQQT6Sgli/GOxdM4prQQYroK2m4h5gGt3WfG4soP3B/B83pePwlgks2Ku WfNnXmgP+v8GoMDhGrip9v98/UkqYP+zt5GyXXMP9SZGQVX9cYn1FU5WQAD/wzbQ aHD9pBRhRp8ZQKKr64JMLkler4+heZfsxEueUhqk86fZf5ORcAS4Ei9SFaC+qvww BNBto9jNPOeFNKZyzJqh5P7xI2L41IaBBxepvbJUfZ0mw5q78w7zvv7ypfPsbdJu oIWVdu9aKLyAwBqzEN1h/hdJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1IYIHG 9T4t0w2j3OIa3ri3B210MB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB81tGbm/qOWftIhq9AgrUO3WXhiKzGT9yBfl0OK0i/3J6z0amnFshy 4M3P96W98H736G04ubiJpI5eM8LrNIi5WoKYohdf/n/HDB8PiCmpPG2e4j6p7IMb tWv3JhyyyCmv8cuw1OUgZZdMKyKjWhG6oFOUrUwZcCPOYa2PD6f5phn74NOrBNva L58+tJzwdouD12PAple8T/lzltGBLxfS6IFPXgSAKxgqTOsQv3FTRvpnteil7aIz KIjTnfemGoa2XjJPYJqGg9G7ugrVSYChdF6N90HZTZTaXUCBPV9MfPiyzut+D2Lr J9APCjOxIWa4eQBx9+o+jw6egjN5ox3p -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:28 2025 by rpki-client