This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: VkKvbn9cJ5lm3qcc0Rq6hIwv77zcuICzdZLBtKGjmDc= Subject key identifier: 78:57:AC:3B:D8:3A:BE:02:02:EF:20:05:45:93:38:15:8F:C7:BC:46 Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B91 Signing time: Mon 22 Dec 2025 16:02:23 +0000 Manifest this update: Mon 22 Dec 2025 16:02:22 +0000 Manifest next update: Mon 29 Dec 2025 16:02:22 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: D38v2ygQpqWFzqY08E1Ydi4YuRxrQEXGQXtzKIr/8Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7058 (0x1b92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Dec 22 16:02:22 2025 GMT Not After : Dec 29 16:02:22 2025 GMT Subject: CN=69496b8f-1668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:2e:5a:90:72:5e:38:ba:65:e1:6f:19:41: 9d:5a:c4:41:39:9e:8b:3e:f6:46:ef:de:53:6a:0e: 71:ca:5d:42:1a:d9:96:6a:7a:1e:4c:ce:cb:94:6f: db:c9:f3:a2:01:45:1a:c1:5a:c7:24:22:48:d4:80: 1e:a4:16:ee:c4:b2:bb:f4:e8:49:7d:a9:a5:13:09: 5f:69:e3:07:5c:8a:35:68:87:d2:10:9b:8e:c3:e9: 1e:4e:6a:f3:f5:9a:f0:20:b7:03:fb:c6:6f:0f:36: 82:e7:3c:d4:1e:64:2f:c6:16:ec:09:0d:b3:b6:4e: 94:c6:bf:ab:5a:0f:1b:0f:da:a2:cb:49:5b:07:de: 57:a7:c1:a7:a2:ee:8c:c9:91:64:5c:11:fd:30:bd: 23:3a:9a:3a:fe:ed:9d:1d:54:82:02:0a:3e:d0:96: 1b:10:77:6f:91:20:8d:65:77:f0:3d:df:6b:d6:8e: 8f:fc:30:eb:fb:4e:86:9b:83:4f:ef:63:89:f8:5e: 10:1a:b8:73:a0:7e:47:df:d7:4d:51:12:75:b5:2a: ee:4c:74:d3:a3:21:d3:85:d1:0c:a5:66:97:c8:79: 52:8f:1a:27:0f:c8:86:46:cb:4b:80:88:15:80:5a: 89:d8:3d:8a:d7:98:a0:94:b3:63:e1:93:ef:4c:34: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:AC:3B:D8:3A:BE:02:02:EF:20:05:45:93:38:15:8F:C7:BC:46 X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:6a:7d:ae:3b:76:57:57:78:f5:2b:d5:5c:ff:34:e1:34:0c: e5:f2:b6:4e:00:42:74:3c:d9:71:76:30:81:a7:8f:d7:6d:5e: 31:af:29:d9:26:04:4e:32:ca:49:d3:eb:00:88:16:04:e5:90: fb:fa:6a:74:2f:73:47:86:6e:03:a4:9d:ca:18:60:5b:06:12: 17:c1:24:38:4f:43:67:56:80:a0:99:2f:e2:a5:09:97:f0:c3: f4:ad:4b:49:f1:62:9c:31:22:66:97:9b:90:a6:1b:ff:a9:06: 23:f8:79:16:9d:14:20:c4:a3:93:44:11:58:15:ec:a3:2c:e7: 83:36:e2:c5:a9:f9:82:de:01:ab:71:2f:d0:cd:d9:1a:4f:3a: 9b:70:c9:5d:ec:c6:78:2a:eb:3a:f3:38:5b:f6:bb:54:1e:cf: 41:b9:70:92:ff:61:c2:f5:94:be:de:97:2e:f0:83:c5:63:65: d9:4f:f7:f1:cd:ab:60:2f:f6:ba:2a:99:b0:60:e5:5b:50:50: 5a:68:be:5e:4a:5c:3a:c3:b0:17:71:87:fd:89:00:bc:fe:b8: 16:24:0d:a9:72:b9:72:7b:80:ee:d3:79:60:8b:1b:89:df:40: 7a:12:1f:1b:e1:2f:75:26:c3:15:57:b4:f8:ae:27:a7:62:29: af:8f:8c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUxMjIyMTYwMjIyWhcNMjUxMjI5MTYwMjIyWjAYMRYwFAYD VQQDDA02OTQ5NmI4Zi0xNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EUuWpByXji6ZeFvGUGdWsRBOZ6LPvZG795Tag5xyl1CGtmWanoeTM7LlG/b yfOiAUUawVrHJCJI1IAepBbuxLK79OhJfamlEwlfaeMHXIo1aIfSEJuOw+keTmrz 9ZrwILcD+8ZvDzaC5zzUHmQvxhbsCQ2ztk6Uxr+rWg8bD9qiy0lbB95Xp8Gnou6M yZFkXBH9ML0jOpo6/u2dHVSCAgo+0JYbEHdvkSCNZXfwPd9r1o6P/DDr+06Gm4NP 72OJ+F4QGrhzoH5H39dNURJ1tSruTHTToyHThdEMpWaXyHlSjxonD8iGRstLgIgV gFqJ2D2K15iglLNj4ZPvTDSBWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhXrDvY Or4CAu8gBUWTOBWPx7xGMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSan2uO3ZXV3j1K9Vc/zThNAzl8rZOAEJ0PNlxdjCBp4/XbV4xrynZ JgROMspJ0+sAiBYE5ZD7+mp0L3NHhm4DpJ3KGGBbBhIXwSQ4T0NnVoCgmS/ipQmX 8MP0rUtJ8WKcMSJml5uQphv/qQYj+HkWnRQgxKOTRBFYFeyjLOeDNuLFqfmC3gGr cS/QzdkaTzqbcMld7MZ4Kus68zhb9rtUHs9BuXCS/2HC9ZS+3pcu8IPFY2XZT/fx zatgL/a6KpmwYOVbUFBaaL5eSlw6w7AXcYf9iQC8/rgWJA2pcrlye4Du03lgixuJ 30B6Eh8b4S91JsMVV7T4rienYimvj4za -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:15 2025 by rpki-client