This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: 8rqP0jww3MjD6TYit/p3fM0MTnkRnQWDCLWu7eOdD7c= Subject key identifier: A1:42:AC:51:73:6C:4B:F9:A8:06:24:E6:40:EB:38:A2:06:70:F9:AF Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 97 Signing time: Fri 05 Dec 2025 04:31:07 +0000 Manifest this update: Fri 05 Dec 2025 04:31:07 +0000 Manifest next update: Fri 12 Dec 2025 04:31:07 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: jIheVj4EhxJb1Dg73qQBH3RSKB8pHXRki/Y0H2khUmM=) 2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 3: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: 1OAyMVa0XBUo/ryUsoyI81mxhEqjOM4w6I8EktKs9g0=) 4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 5: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: z5pNn5MCpBCUyinVeJo6KP/NY4KOLsdKNCmIbn+dSOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Dec 5 04:31:07 2025 GMT Not After : Dec 12 04:31:07 2025 GMT Subject: CN=6932600b-6fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:f7:4e:97:75:64:ee:08:12:01:a3:8c:17: 0f:44:df:c7:6b:2e:02:e3:4d:59:5d:a7:32:37:fc: c2:c9:54:80:78:f6:da:b2:10:d3:84:4f:1c:22:61: c9:d8:d4:1c:83:b7:2f:dd:a8:52:cc:d4:69:e1:aa: 21:59:0b:91:e4:f7:1e:28:c0:12:3d:6e:cd:c8:b7: 6b:7b:1a:bf:71:2f:0a:b4:ca:0d:c0:fd:1c:f6:8d: d7:07:2a:78:de:06:4c:53:30:6a:02:6c:8d:92:c7: 2c:d7:e8:cc:7e:5d:bc:00:b6:cd:37:09:30:f8:b2: cc:22:4a:14:c7:57:ab:2f:98:63:74:16:f2:78:64: 19:81:03:25:b9:37:ed:5c:03:e4:25:60:b6:e1:1a: e5:ab:55:e4:e6:89:89:28:ec:28:9a:aa:91:ac:72: f4:fe:2c:39:e7:0e:f6:43:cf:23:cf:0d:f1:4b:ac: bf:df:3a:d9:62:2e:ab:a6:ec:52:89:0c:d7:c3:0f: 81:f5:dd:2f:0e:bc:a5:c0:71:6e:d6:d5:80:59:46: 5f:78:0f:9b:cf:65:80:49:d3:b7:19:ae:6a:cd:1b: 1d:9a:6e:19:6a:d0:ff:48:97:1a:b2:82:06:c9:28: 26:7f:a7:fa:57:ce:2e:f4:2d:7a:f8:86:6b:cd:a8: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:42:AC:51:73:6C:4B:F9:A8:06:24:E6:40:EB:38:A2:06:70:F9:AF X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a3:d4:a5:fc:6c:7d:5a:57:cf:51:45:ee:a7:c3:b6:00:b7: 30:99:98:94:5b:91:b7:07:4d:0c:5a:e7:a2:b7:20:57:78:47: d9:d9:e8:de:60:d3:59:4f:66:d8:54:fa:f0:9d:45:db:bb:32: 7e:d4:50:35:7e:2a:33:50:93:64:b2:06:df:61:f4:bd:45:d2: b7:ec:3d:58:21:cf:6e:a6:96:e5:64:5c:2d:99:7d:37:61:ce: bc:88:e4:a5:a3:38:d1:d6:b7:27:b1:36:63:7c:05:3b:a3:e2: 3a:60:3e:ba:80:0c:89:56:58:8d:12:cd:2b:f9:67:72:44:0d: d7:5e:46:27:35:cd:de:2a:bd:0b:20:db:d8:75:70:39:6d:5c: c0:f0:e3:f5:d5:b5:40:a1:18:16:e1:42:f8:b2:9e:97:bf:38: dc:81:ca:6a:ad:f1:d4:c4:05:99:b2:17:e7:30:a2:1d:e9:b8: be:e1:f1:c6:7a:0f:a7:0c:a5:22:0c:74:6a:07:7f:b8:fc:6a: 77:b3:bd:4b:29:66:95:f9:36:a0:2c:f1:c9:f8:04:9a:c0:d5: 2d:ac:f4:fc:56:ff:00:88:9b:3a:3a:e0:60:ad:0e:e4:ed:8b: 0d:a0:4a:cc:a2:6a:45:83:33:e0:ff:71:7d:67:c2:79:8d:2a: 77:8f:cc:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF OUM0Njg2QTAwHhcNMjUxMjA1MDQzMTA3WhcNMjUxMjEyMDQzMTA3WjAYMRYwFAYD VQQDEw02OTMyNjAwYi02ZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPv3Tpd1ZO4IEgGjjBcPRN/Hay4C401ZXacyN/zCyVSAePbashDThE8cImHJ 2NQcg7cv3ahSzNRp4aohWQuR5PceKMASPW7NyLdrexq/cS8KtMoNwP0c9o3XByp4 3gZMUzBqAmyNkscs1+jMfl28ALbNNwkw+LLMIkoUx1erL5hjdBbyeGQZgQMluTft XAPkJWC24Rrlq1Xk5omJKOwomqqRrHL0/iw55w72Q88jzw3xS6y/3zrZYi6rpuxS iQzXww+B9d0vDrylwHFu1tWAWUZfeA+bz2WASdO3Ga5qzRsdmm4ZatD/SJcasoIG ySgmf6f6V84u9C16+IZrzahgGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFCrFFz bEv5qAYk5kDrOKIGcPmvMB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTgwQy9ERTk4RUFGMEZCNjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkw dDhyR3d4LTRYMEhweEdocUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgo9Sl/Gx9WlfPUUXup8O2ALcwmZiUW5G3B00MWueityBXeEfZ2eje YNNZT2bYVPrwnUXbuzJ+1FA1fiozUJNksgbfYfS9RdK37D1YIc9uppblZFwtmX03 Yc68iOSlozjR1rcnsTZjfAU7o+I6YD66gAyJVliNEs0r+WdyRA3XXkYnNc3eKr0L INvYdXA5bVzA8OP11bVAoRgW4UL4sp6XvzjcgcpqrfHUxAWZshfnMKId6bi+4fHG eg+nDKUiDHRqB3+4/Gp3s71LKWaV+TagLPHJ+ASawNUtrPT8Vv8AiJs6OuBgrQ7k 7YsNoErMompFgzPg/3F9Z8J5jSp3j8yt -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:48 2025 by rpki-client