This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json) Hash identifier: IOGSzDZ9nWhPqSad4VyPLEhvo4V7Z573A4yA4kX6B4Q= Subject key identifier: AB:60:B2:6D:0D:F9:21:AE:8F:45:A0:34:25:7B:95:55:74:87:30:96 Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft Manifest number: 58 Signing time: Fri 05 Dec 2025 05:02:07 +0000 Manifest this update: Fri 05 Dec 2025 05:02:06 +0000 Manifest next update: Fri 12 Dec 2025 05:02:06 +0000 Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: k/KrgwLT9lPcDCP/Dt7j99JoDv+d0vxozJRoJuaTusk=) 2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: ev5mDZ6XFmJ+ji01cNK3sq1eGbo1TIpqJN2vMLDyQBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Dec 5 05:02:06 2025 GMT Not After : Dec 12 05:02:06 2025 GMT Subject: CN=6932674e-5e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:f9:61:2d:90:a8:fb:dd:cc:54:25:49:91: 10:02:58:a5:9e:34:c5:3d:02:51:24:0a:13:66:3e: 31:6b:1f:4a:9e:5a:bc:7c:5c:02:2e:db:35:3d:d1: 7c:d6:08:e7:a3:91:89:60:ad:25:31:7c:86:33:d6: 0d:b1:d4:c8:f7:37:e3:3a:d4:46:8e:f3:c1:6b:bb: da:d5:ab:8d:18:50:f1:7c:cc:0c:03:27:a3:95:a8: 66:c2:ce:1f:13:9b:a1:a0:d0:5e:f2:61:d7:53:77: 69:5b:c4:66:5d:8b:57:55:a0:d1:91:23:b3:a2:76: 7e:80:05:ee:1b:1f:07:b7:0f:2e:17:d2:04:09:55: 8c:81:df:8d:22:32:58:d4:47:7f:a8:75:ac:ac:58: 84:8b:e9:8e:4c:df:50:53:19:51:09:5d:75:83:e9: 5e:db:a2:05:34:55:5d:87:83:6e:3a:a8:46:95:c6: 54:eb:04:14:da:3f:3d:68:dd:0a:91:80:6b:a7:61: 48:e3:a9:82:a5:0f:9a:cc:c5:0b:73:f9:9e:5e:9a: 3a:59:f9:50:3d:22:ca:f3:f7:4d:b2:e3:09:3c:50: 49:a1:40:05:53:11:ef:e4:b5:90:4f:ac:4c:f5:f1: d7:ff:64:7e:e2:c0:99:f0:13:2d:9e:8e:4a:ee:22: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:60:B2:6D:0D:F9:21:AE:8F:45:A0:34:25:7B:95:55:74:87:30:96 X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:43:ec:67:a7:dd:52:fa:0e:ef:1f:4c:60:80:71:bc:c4:e6: 59:c1:d7:da:ff:e6:ec:f8:a2:0e:b0:52:f3:33:de:fc:27:63: 5e:85:9b:46:a0:41:81:33:b0:2b:df:cd:68:08:c9:61:62:9d: fa:80:bd:b9:f9:90:1e:30:82:91:1c:8d:ee:1a:40:bc:e8:0e: c4:fe:08:c2:2f:ed:8b:47:ec:8b:b6:a0:3c:ad:f9:b9:45:27: 1b:33:2d:a6:4e:7f:00:c8:52:ee:26:bc:1b:1c:3f:79:e9:bf: 87:58:9e:29:19:fc:d1:93:8d:9a:b8:c4:67:6f:c2:57:bd:d7: 57:f5:7f:d5:66:71:36:3d:41:46:b0:e7:bf:b4:88:4c:d2:9c: 81:54:08:5f:d3:ad:ac:39:49:a7:b9:f5:67:4c:b5:df:e8:1a: cd:6c:d4:a3:e5:4a:b6:5e:99:70:35:f0:e5:25:21:d7:3b:a0: 17:f7:ee:da:12:77:bc:e4:04:d5:59:9c:e3:2a:4b:f2:4d:1e: 50:b7:8d:3b:df:e1:c9:d3:79:4b:57:c1:90:b5:1e:99:ab:32: 21:d9:ba:49:d0:d5:61:eb:ef:02:54:24:82:37:0c:6c:0a:ea: 65:43:31:df:7e:df:c5:7f:51:48:a4:a4:06:e9:ae:3e:43:62: 6d:f9:54:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoOUE1ODdFNEVDRjY4RUM3NzI5RDhERTQzNUZGREFBRENF QTVCNDkzOTAeFw0yNTEyMDUwNTAyMDZaFw0yNTEyMTIwNTAyMDZaMBgxFjAUBgNV BAMTDTY5MzI2NzRlLTVlMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKjvlhLZCo+93MVCVJkRACWKWeNMU9AlEkChNmPjFrH0qeWrx8XAIu2zU90XzW COejkYlgrSUxfIYz1g2x1Mj3N+M61EaO88Fru9rVq40YUPF8zAwDJ6OVqGbCzh8T m6Gg0F7yYddTd2lbxGZdi1dVoNGRI7Oidn6ABe4bHwe3Dy4X0gQJVYyB340iMljU R3+odaysWISL6Y5M31BTGVEJXXWD6V7bogU0VV2Hg246qEaVxlTrBBTaPz1o3QqR gGunYUjjqYKlD5rMxQtz+Z5emjpZ+VA9Isrz902y4wk8UEmhQAVTEe/ktZBPrEz1 8df/ZH7iwJnwEy2ejkruIvNhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq2CybQ35 Ia6PRaA0JXuVVXSHMJYwHwYDVR0jBBgwFoAUmlh+Ts9o7Hcp2N5DX/2q3OpbSTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzM1NDMzRjIyNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWxoLVRzOW83SGNwMk41RFhfMnEzT3BiU1RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzM1NDMzRjIyNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hj cDJONURYXzJxM09wYlNUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJD7Gen3VL6Du8fTGCAcbzE5lnB19r/5uz4og6wUvMz3vwnY16Fm0ag QYEzsCvfzWgIyWFinfqAvbn5kB4wgpEcje4aQLzoDsT+CMIv7YtH7Iu2oDyt+blF JxszLaZOfwDIUu4mvBscP3npv4dYnikZ/NGTjZq4xGdvwle911f1f9VmcTY9QUaw 57+0iEzSnIFUCF/Traw5Sae59WdMtd/oGs1s1KPlSrZemXA18OUlIdc7oBf37toS d7zkBNVZnOMqS/JNHlC3jTvf4cnTeUtXwZC1HpmrMiHZuknQ1WHr7wJUJII3DGwK 6mVDMd9+38V/UUikpAbprj5DYm35VBg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:12:46 2025 by rpki-client