This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: 4pNaHmBYcYuT/zwPDnBae8JORh+xKkMZ5oVWERQxNbE= Subject key identifier: 7A:E2:7C:8D:AF:F5:6C:71:A7:FB:48:57:D6:BB:88:3C:E6:49:01:6C Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 215C Signing time: Sat 06 Dec 2025 15:39:01 +0000 Manifest this update: Sat 06 Dec 2025 15:39:00 +0000 Manifest next update: Sat 13 Dec 2025 15:39:00 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: deunDfISlxArGzR5u7GFDZeerPti73bKn8Kl4idepfs=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8552 (0x2168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Dec 6 15:39:00 2025 GMT Not After : Dec 13 15:39:00 2025 GMT Subject: CN=69344e15-60b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:3d:09:02:56:3b:7c:4b:63:c5:a6:c2:84: 1b:32:23:23:52:ab:a9:0e:23:1c:29:84:47:ce:04: 01:07:dd:fc:03:a1:59:cd:f8:5b:de:8b:1f:2b:dc: 0f:99:cb:78:e5:93:18:6d:13:4a:29:99:bc:e4:53: 42:2f:a2:38:1a:83:72:85:20:8f:4e:73:e2:73:f2: c9:50:04:6d:0d:07:52:14:c3:91:87:f1:ef:80:d5: 8b:62:9a:d4:34:ea:e7:00:4a:be:74:e3:35:d6:71: 2b:88:7a:48:71:ec:48:3b:84:3f:c8:6c:f3:2a:35: a3:41:cf:9e:e4:88:6a:63:74:78:1c:4b:a3:d2:3e: 9c:c5:e6:f6:88:e3:d6:71:31:52:63:71:53:f6:e2: a8:33:10:64:d6:8b:ac:ee:17:f0:33:68:5a:fe:41: da:ac:94:3a:22:0b:88:45:2f:e1:7f:1e:ec:87:d2: 79:f0:b1:9b:8c:7e:a3:63:30:84:bd:30:1e:55:ee: 17:38:c6:e5:02:ac:bc:a5:73:58:69:b6:0b:57:ad: 52:77:d9:d4:5a:ac:cf:e1:58:0e:91:d5:0e:91:a1: 93:5e:bb:b8:3f:14:04:62:ed:ce:38:b2:fa:b9:17: 30:39:80:c3:49:59:4e:97:11:59:0a:51:71:de:b0: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E2:7C:8D:AF:F5:6C:71:A7:FB:48:57:D6:BB:88:3C:E6:49:01:6C X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:bd:56:35:e4:c7:1f:d7:d1:ff:16:d6:ad:d8:68:cc:cf: d0:c6:1d:7b:e7:1c:8f:fb:ff:dd:f6:f4:f3:0a:ac:15:dc:57: b5:e8:33:5b:65:61:50:63:0f:84:00:db:29:5d:5f:af:91:e6: 04:49:81:82:41:8a:37:a8:3c:23:48:9c:ef:3c:d2:b9:38:ef: 00:88:23:ff:93:bd:34:6b:69:14:1d:a2:d7:67:13:24:ba:1a: 95:c0:5d:31:98:95:57:0d:71:a0:0c:9a:8c:bc:d2:f1:02:31: 58:14:4f:5c:46:bc:ea:23:3a:17:93:df:15:a5:5a:62:c2:8a: 35:0b:b7:6d:9b:aa:43:26:3f:74:12:ed:63:73:a2:51:48:95: 19:06:44:3b:62:ac:65:b9:c2:59:5c:fe:cd:b6:e0:ea:17:c8: 39:7f:c4:e0:db:e2:c2:a9:5f:4b:88:5b:d9:d9:15:42:06:fa: 58:df:eb:4d:59:ff:b5:d1:71:82:2a:b6:ac:18:a5:d2:3f:66: 00:c0:34:55:27:e4:14:e0:55:08:c2:30:3e:ee:af:12:73:7e: b1:3e:b3:93:77:c4:21:43:32:ee:fe:a5:be:f8:52:b2:ef:91: e7:0b:7d:f8:3d:1d:8a:8c:19:e5:f7:11:49:b2:55:e7:ca:eb: 98:1c:5e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUxMjA2MTUzOTAwWhcNMjUxMjEzMTUzOTAwWjAYMRYwFAYD VQQDEw02OTM0NGUxNS02MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dQ9CQJWO3xLY8WmwoQbMiMjUqupDiMcKYRHzgQBB938A6FZzfhb3osfK9wP mct45ZMYbRNKKZm85FNCL6I4GoNyhSCPTnPic/LJUARtDQdSFMORh/HvgNWLYprU NOrnAEq+dOM11nEriHpIcexIO4Q/yGzzKjWjQc+e5IhqY3R4HEuj0j6cxeb2iOPW cTFSY3FT9uKoMxBk1ous7hfwM2ha/kHarJQ6IguIRS/hfx7sh9J58LGbjH6jYzCE vTAeVe4XOMblAqy8pXNYabYLV61Sd9nUWqzP4VgOkdUOkaGTXru4PxQEYu3OOLL6 uRcwOYDDSVlOlxFZClFx3rDO+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrifI2v 9Wxxp/tIV9a7iDzmSQFsMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5QL1WNeTHH9fR/xbWrdhozM/Qxh175xyP+//d9vTzCqwV3Fe16DNb ZWFQYw+EANspXV+vkeYESYGCQYo3qDwjSJzvPNK5OO8AiCP/k700a2kUHaLXZxMk uhqVwF0xmJVXDXGgDJqMvNLxAjFYFE9cRrzqIzoXk98VpVpiwoo1C7dtm6pDJj90 Eu1jc6JRSJUZBkQ7YqxlucJZXP7NtuDqF8g5f8Tg2+LCqV9LiFvZ2RVCBvpY3+tN Wf+10XGCKrasGKXSP2YAwDRVJ+QU4FUIwjA+7q8Sc36xPrOTd8QhQzLu/qW++FKy 75HnC334PR2KjBnl9xFJslXnyuuYHF4W -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:40 2025 by rpki-client