This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: hW9y1ZltLxACa482xdc0EGLjMR1AJNWUOCy+ebkzRGI= Subject key identifier: 06:7F:C0:47:96:18:27:56:1D:C0:DA:F2:22:F9:C9:F1:F7:05:AE:DA Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11CF Signing time: Wed 10 Dec 2025 16:40:40 +0000 Manifest this update: Wed 10 Dec 2025 16:40:39 +0000 Manifest next update: Wed 17 Dec 2025 16:40:39 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: TMIZlGIfU8XqEapcq9s5CPJ4Pct51WTThc7cKPyBAC0=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 16:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4609 (0x1201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Dec 10 16:40:39 2025 GMT Not After : Dec 17 16:40:39 2025 GMT Subject: CN=6939a287-6884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:27:d7:8c:35:fe:de:a6:46:92:53:ea:9c: 90:a3:72:fd:75:25:24:ac:e6:96:89:98:ad:dc:57: 85:82:a2:89:46:29:d0:a1:a1:81:84:cd:d5:e4:57: 81:a9:30:45:c1:43:dd:86:5a:f0:41:dd:3d:fb:c8: a3:7e:4c:54:36:76:93:04:30:b3:3b:e0:0b:1f:6e: d9:14:8e:a0:24:81:db:56:a1:3a:1a:3d:74:3f:94: 99:9b:c9:68:2e:c3:2f:a1:c7:e3:c2:9a:a6:42:f8: 02:07:34:55:da:04:90:b0:64:d1:3d:b1:a8:18:a4: f2:28:97:7a:34:f7:48:74:5d:5c:59:7a:a1:e8:5f: 38:ff:29:21:fb:a9:b1:ae:12:15:81:b8:97:3a:c2: 9c:69:2b:2c:ea:4a:34:54:2c:cb:5f:ed:6a:d4:5c: d0:70:27:a3:ac:79:fa:ec:f5:bc:7f:e2:46:9d:4a: da:ba:7f:bf:7d:37:9f:7f:9a:19:75:88:6b:c6:9a: 3e:09:1f:60:e9:b5:11:d2:70:fc:ea:b0:90:fe:b8: 99:d1:7e:17:25:1c:f0:4e:94:22:13:4e:6a:73:5a: 79:9c:81:6e:56:37:18:2c:e4:f3:af:b7:40:fc:2a: 18:da:99:52:e1:7c:86:89:bc:ba:e1:b7:c5:e5:55: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7F:C0:47:96:18:27:56:1D:C0:DA:F2:22:F9:C9:F1:F7:05:AE:DA X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:35:0d:84:87:be:8a:28:48:83:76:ef:77:ae:a9:34:28:86: 2f:b9:98:ce:80:3d:7e:97:be:0a:1f:49:92:26:d3:34:4c:54: 6b:29:3b:38:7e:09:1b:5b:78:34:0b:ff:b5:3e:d8:8d:f8:16: d7:ac:eb:c3:2f:12:c2:08:83:a4:e8:0c:33:04:eb:61:bd:4f: eb:fb:91:38:23:93:29:27:40:f0:7a:b7:5c:0f:a4:4d:8d:7f: 6d:af:2b:d0:86:a0:28:bb:48:b2:96:7c:52:4a:18:2a:aa:3b: e9:41:34:5d:92:ac:ba:52:6a:bf:c0:6e:84:cc:67:35:5e:5b: 30:cf:87:7e:0c:8d:17:15:f0:7b:78:c2:1a:98:36:3e:41:19: 35:ec:2f:68:b6:94:4e:1d:3a:27:52:cb:85:5e:16:fc:03:fb: 7c:11:28:3a:20:32:1b:20:a8:12:fb:a4:c9:16:1b:6a:65:69: 24:84:82:0e:b8:79:45:d7:e5:b3:80:7c:95:66:c6:f3:03:6a: bb:33:18:c9:b7:ca:16:73:70:38:98:2f:e8:25:53:76:50:e6: 1f:73:b4:9e:76:67:7f:f6:30:3f:16:d0:50:3f:57:9f:79:6f: 57:9f:f4:5b:c5:96:79:b2:18:b7:20:43:12:9e:be:b1:9f:27: 04:d7:e0:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUxMjEwMTY0MDM5WhcNMjUxMjE3MTY0MDM5WjAYMRYwFAYD VQQDEw02OTM5YTI4Ny02ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7wn14w1/t6mRpJT6pyQo3L9dSUkrOaWiZit3FeFgqKJRinQoaGBhM3V5FeB qTBFwUPdhlrwQd09+8ijfkxUNnaTBDCzO+ALH27ZFI6gJIHbVqE6Gj10P5SZm8lo LsMvocfjwpqmQvgCBzRV2gSQsGTRPbGoGKTyKJd6NPdIdF1cWXqh6F84/ykh+6mx rhIVgbiXOsKcaSss6ko0VCzLX+1q1FzQcCejrHn67PW8f+JGnUraun+/fTeff5oZ dYhrxpo+CR9g6bUR0nD86rCQ/riZ0X4XJRzwTpQiE05qc1p5nIFuVjcYLOTzr7dA /CoY2plS4XyGiby64bfF5VXe8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ/wEeW GCdWHcDa8iL5yfH3Ba7aMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6NQ2Eh76KKEiDdu93rqk0KIYvuZjOgD1+l74KH0mSJtM0TFRrKTs4 fgkbW3g0C/+1PtiN+BbXrOvDLxLCCIOk6AwzBOthvU/r+5E4I5MpJ0DwerdcD6RN jX9tryvQhqAou0iylnxSShgqqjvpQTRdkqy6Umq/wG6EzGc1Xlswz4d+DI0XFfB7 eMIamDY+QRk17C9otpROHTonUsuFXhb8A/t8ESg6IDIbIKgS+6TJFhtqZWkkhIIO uHlF1+WzgHyVZsbzA2q7MxjJt8oWc3A4mC/oJVN2UOYfc7Sedmd/9jA/FtBQP1ef eW9Xn/RbxZZ5shi3IEMSnr6xnycE1+AZ -----END CERTIFICATE-----Generated at Fri Dec 12 13:02:52 2025 by rpki-client