This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: Bc52qOhBdlvkubkgI05JXZDsHPoy0XFFQXvErInRMTk= Subject key identifier: D4:10:A5:D8:0C:48:B4:A3:56:A9:49:E7:75:F2:A6:41:73:BD:32:01 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 2607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 25F0 Signing time: Mon 22 Dec 2025 15:33:24 +0000 Manifest this update: Mon 22 Dec 2025 15:33:24 +0000 Manifest next update: Mon 29 Dec 2025 15:33:24 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: +Ae5H/inac0uPwgBpLKTK3BJ/QRixRj31xweXGlSCZQ=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: TDCyPfvl14GmlvtvPX3j8FfT9kdUWeZZya5/K7phv9Q=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: Qmsz/kc6vCM5AVnwbPEOkvoDKpojajE1SGhMXZiiAis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9735 (0x2607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Dec 22 15:33:24 2025 GMT Not After : Dec 29 15:33:24 2025 GMT Subject: CN=694964c4-e4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:44:06:7c:0d:97:74:d7:b1:f8:6f:fd:80:be: 42:94:19:ee:ff:89:48:59:76:b5:c5:04:7e:e9:b2: ac:fc:83:5b:60:05:a2:cf:54:c0:7c:33:4d:86:d1: 4b:08:67:de:5a:1b:62:3d:52:2f:78:43:57:b1:ce: d0:2e:ea:ef:64:24:05:aa:42:a0:3d:8e:38:a2:21: 9e:b1:30:ab:6a:79:db:9c:27:07:57:e8:4d:a0:3e: 1b:9c:0d:7b:b1:1a:a2:a2:c5:5e:a3:05:91:16:94: 2e:80:8c:c9:22:48:75:60:3d:ec:5a:d3:79:53:4f: 84:5b:49:e7:ea:63:f0:32:31:2f:da:60:f1:3f:63: f1:32:dc:c9:f3:ce:fb:de:92:44:d4:d9:4d:5d:b3: 46:15:e4:6d:f1:2e:29:24:20:5c:51:1a:84:ca:c6: 8c:a9:73:53:23:d9:e7:6a:2b:85:75:3e:9f:fd:eb: 48:f3:f7:14:e4:18:1d:0c:2f:51:76:c5:0d:96:2d: a3:91:4c:bd:9a:81:16:19:a7:c8:9b:e9:1a:84:8e: 43:a0:fe:f4:80:d8:da:46:77:d3:76:55:65:bb:78: 8e:2f:f8:3e:ee:53:83:a8:f5:1c:53:f1:08:ca:43: 08:19:7f:7c:fc:6b:32:05:d8:ef:52:54:39:ea:9e: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:A5:D8:0C:48:B4:A3:56:A9:49:E7:75:F2:A6:41:73:BD:32:01 X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c0:4c:7e:25:91:79:7a:fd:96:9f:25:ab:1e:f6:2e:85:1e: e3:35:cf:e4:38:42:85:b9:68:50:74:0f:c1:ab:f3:be:d9:18: 60:3c:cd:69:a7:ea:5a:5e:c4:4e:bf:d4:38:c1:7d:e4:2a:ca: c6:71:99:9b:97:77:c4:2f:bd:bf:56:ba:9c:6b:ca:06:07:1d: d6:b8:e7:cc:f4:75:14:34:4b:0e:63:61:5b:9b:8f:18:28:df: a5:59:ff:05:ff:8a:be:e7:b1:b0:18:c4:8e:a2:67:72:9d:9b: 02:34:e2:23:68:f5:17:dc:02:f6:06:f4:72:33:40:cc:3a:cf: be:39:60:f7:cb:40:b9:1e:ff:60:65:70:fb:08:92:fa:3a:57: 35:81:6e:38:e3:f3:4f:fd:55:81:76:d0:fb:48:e4:12:34:d5: 64:1d:72:b0:a9:47:66:e3:0b:eb:df:1a:c7:7a:7e:ba:29:37: e6:1b:4f:20:24:c2:9f:e0:e5:5c:5d:e0:2c:be:d5:ba:91:53: 34:47:a5:45:af:42:88:b0:be:07:bd:5e:b0:8b:2e:ad:89:bf: 99:38:bc:ca:b2:99:d8:77:dd:42:c4:e1:49:cc:a2:64:2b:16: 3e:36:95:2c:75:5f:c4:71:f7:17:ef:da:da:2d:c8:f2:13:d1: 0a:26:d9:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUxMjIyMTUzMzI0WhcNMjUxMjI5MTUzMzI0WjAYMRYwFAYD VQQDDA02OTQ5NjRjNC1lNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9UQGfA2XdNex+G/9gL5ClBnu/4lIWXa1xQR+6bKs/INbYAWiz1TAfDNNhtFL CGfeWhtiPVIveENXsc7QLurvZCQFqkKgPY44oiGesTCrannbnCcHV+hNoD4bnA17 sRqiosVeowWRFpQugIzJIkh1YD3sWtN5U0+EW0nn6mPwMjEv2mDxP2PxMtzJ8877 3pJE1NlNXbNGFeRt8S4pJCBcURqEysaMqXNTI9nnaiuFdT6f/etI8/cU5BgdDC9R dsUNli2jkUy9moEWGafIm+kahI5DoP70gNjaRnfTdlVlu3iOL/g+7lODqPUcU/EI ykMIGX98/GsyBdjvUlQ56p7g9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQQpdgM SLSjVqlJ53XypkFzvTIBMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJwEx+JZF5ev2WnyWrHvYuhR7jNc/kOEKFuWhQdA/Bq/O+2RhgPM1p p+paXsROv9Q4wX3kKsrGcZmbl3fEL72/Vrqca8oGBx3WuOfM9HUUNEsOY2Fbm48Y KN+lWf8F/4q+57GwGMSOomdynZsCNOIjaPUX3AL2BvRyM0DMOs++OWD3y0C5Hv9g ZXD7CJL6Olc1gW444/NP/VWBdtD7SOQSNNVkHXKwqUdm4wvr3xrHen66KTfmG08g JMKf4OVcXeAsvtW6kVM0R6VFr0KIsL4HvV6wiy6tib+ZOLzKspnYd91CxOFJzKJk KxY+NpUsdV/EcfcX79raLcjyE9EKJtkT -----END CERTIFICATE-----Generated at Tue Dec 23 06:10:48 2025 by rpki-client