This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: dHe/A4dntb70e6ip9/KNC6+kUxLhS29Xx0R/1gw1XR4= Subject key identifier: AF:AC:69:6E:0F:CB:26:36:BC:F9:5C:10:17:42:C2:EE:DE:A8:29:8B Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: 013D Signing time: Fri 05 Dec 2025 02:33:44 +0000 Manifest this update: Fri 05 Dec 2025 02:33:44 +0000 Manifest next update: Fri 12 Dec 2025 02:33:44 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: ObbN8wpvrSrj5Qz9U9PPVy2qC3TMYAZi4ZOudl0QDaw=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Dec 5 02:33:44 2025 GMT Not After : Dec 12 02:33:44 2025 GMT Subject: CN=69324488-5016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cf:66:ef:d9:d9:01:31:08:74:42:06:32:21: 2e:18:9b:d4:13:5b:11:95:b1:28:8d:15:6f:ac:c1: 43:01:60:d2:28:b4:4c:75:c2:de:36:a1:ff:95:1d: 76:9a:92:90:d1:3c:ab:a1:fa:11:ee:3d:23:8e:2f: 95:f5:7a:d7:f7:31:6b:08:6d:32:d7:c9:31:eb:ba: f5:8c:a4:ca:fd:1e:1a:7d:1e:82:96:2c:8c:d8:49: 67:0a:28:ff:57:77:56:79:48:71:b1:0e:92:e9:38: cb:a3:23:5e:1e:1c:2d:53:5b:2e:04:68:8a:5b:8d: 33:05:4d:35:4d:04:d7:aa:43:21:68:85:49:10:9b: e3:37:f3:4c:a6:ce:bc:7e:c9:1d:0a:fd:47:d6:b4: 48:71:54:5d:d8:c0:18:93:46:d5:97:6b:77:c1:37: 98:99:bf:b8:3b:7a:2f:a1:47:1c:9e:22:a6:6e:06: 3b:85:8d:ec:cd:6e:33:85:04:e9:52:c7:f7:7a:d3: 7e:87:5e:93:5f:30:5e:94:23:ff:07:b6:d6:9a:af: cf:27:0b:ea:85:25:ff:6b:c6:1f:86:7e:2b:aa:51: 6b:d0:d1:9d:3c:ae:c1:64:0f:2b:cb:68:0b:d3:92: 9a:6c:21:83:2a:ec:4b:3f:e5:c6:24:b9:51:c9:b2: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:69:6E:0F:CB:26:36:BC:F9:5C:10:17:42:C2:EE:DE:A8:29:8B X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d6:bc:c0:54:a1:33:db:69:4f:cc:71:77:eb:b2:b6:bf:66: 9f:c4:cb:c6:e9:9e:3a:89:e3:be:bb:e2:45:62:4e:08:bf:49: a7:5f:47:21:4e:c6:a2:d8:00:ea:ce:2e:a4:31:73:44:9d:a0: 80:e1:c9:83:21:5d:ac:41:25:36:f1:e1:f6:d7:1f:88:e2:03: c7:be:bf:6f:ae:16:33:58:de:d8:6b:f2:1f:f5:15:59:5e:3f: 0d:20:44:93:bb:a1:57:40:63:19:f6:2d:48:fb:bd:86:fc:6a: 48:98:10:a1:bd:61:b3:91:ba:1e:31:db:e9:74:5f:a6:23:5d: 75:c7:ae:74:56:cf:26:6d:81:ed:43:90:55:7a:02:2d:c3:5a: ce:3e:7f:c3:7a:40:fa:c8:ea:a9:1c:dd:20:11:94:90:32:b6: 75:d4:82:19:c4:82:7d:b1:f8:1f:7f:5a:b8:62:cf:79:b8:81: 58:2d:9a:c4:71:19:1c:07:22:e4:ed:3c:c4:2b:e3:90:07:55: 3b:d9:e3:12:16:21:95:c9:92:eb:34:fd:80:49:1d:48:e3:26: 47:36:b3:e7:7a:88:69:06:e5:06:16:3a:06:0e:ff:1a:86:3b: 16:13:5d:ce:b7:5b:59:5b:ac:a5:62:98:7c:54:32:85:9e:9b: 94:bb:06:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUxMjA1MDIzMzQ0WhcNMjUxMjEyMDIzMzQ0WjAYMRYwFAYD VQQDEw02OTMyNDQ4OC01MDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5M9m79nZATEIdEIGMiEuGJvUE1sRlbEojRVvrMFDAWDSKLRMdcLeNqH/lR12 mpKQ0TyrofoR7j0jji+V9XrX9zFrCG0y18kx67r1jKTK/R4afR6CliyM2ElnCij/ V3dWeUhxsQ6S6TjLoyNeHhwtU1suBGiKW40zBU01TQTXqkMhaIVJEJvjN/NMps68 fskdCv1H1rRIcVRd2MAYk0bVl2t3wTeYmb+4O3ovoUccniKmbgY7hY3szW4zhQTp Usf3etN+h16TXzBelCP/B7bWmq/PJwvqhSX/a8Yfhn4rqlFr0NGdPK7BZA8ry2gL 05KabCGDKuxLP+XGJLlRybJIqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+saW4P yyY2vPlcEBdCwu7eqCmLMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE1rzAVKEz22lPzHF367K2v2afxMvG6Z46ieO+u+JFYk4Iv0mnX0ch Tsai2ADqzi6kMXNEnaCA4cmDIV2sQSU28eH21x+I4gPHvr9vrhYzWN7Ya/If9RVZ Xj8NIESTu6FXQGMZ9i1I+72G/GpImBChvWGzkboeMdvpdF+mI111x650Vs8mbYHt Q5BVegItw1rOPn/DekD6yOqpHN0gEZSQMrZ11IIZxIJ9sfgff1q4Ys95uIFYLZrE cRkcByLk7TzEK+OQB1U72eMSFiGVyZLrNP2ASR1I4yZHNrPneohpBuUGFjoGDv8a hjsWE13Ot1tZW6ylYph8VDKFnpuUuwY/ -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:54 2025 by rpki-client