This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: 1moWRMwZwb0UTd5Y8/SpKPxZztDmKvl2xrd9S72wrjU= Subject key identifier: 7F:46:B2:AE:C4:43:54:66:86:BB:62:30:21:FA:63:B2:91:8E:86:DF Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 34F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 34F6 Signing time: Sat 20 Dec 2025 14:51:15 +0000 Manifest this update: Sat 20 Dec 2025 14:51:14 +0000 Manifest next update: Sat 27 Dec 2025 14:51:14 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: j1jhMAsHNomP494/w5dD7NdBQFtqRXPHg1FXWXM+5jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13560 (0x34f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Dec 20 14:51:14 2025 GMT Not After : Dec 27 14:51:14 2025 GMT Subject: CN=6946b7e3-283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:e0:0c:81:e4:27:8b:99:a7:44:e0:26:4d: 75:16:7a:2a:b2:82:ad:91:80:a3:26:95:47:59:f3: 47:41:09:b7:7f:cc:df:27:0b:52:ac:b0:47:27:e3: 6a:55:c4:aa:1f:af:cc:16:23:53:36:53:af:3d:7b: 8f:d2:97:9e:09:8e:fe:94:58:0d:0e:6c:3c:68:31: 79:5d:df:a4:4d:97:97:db:68:6d:23:0f:2a:26:96: 43:17:4d:c5:37:42:0f:cd:e3:d7:ee:7a:c2:5d:ac: 10:74:62:fe:fd:a7:3c:99:4f:71:3b:e7:f9:36:c1: 68:2d:5f:e0:5a:1b:9c:ac:59:9b:ee:ee:69:3c:bb: c1:61:46:02:ac:4f:5a:fc:1e:0f:81:6c:91:65:5f: 96:fc:47:3c:b3:ef:fb:00:2d:9b:ac:1c:89:a1:f5: 77:5f:3c:66:d9:a5:61:a3:bb:69:ff:7d:f0:c0:25: 87:1d:13:85:69:55:39:76:31:b5:d7:4b:1d:e5:09: e0:b0:8a:ba:af:90:6c:82:0e:17:11:1a:57:be:4f: da:05:54:b3:f5:38:a0:46:c9:4d:4d:63:a3:64:f5: 3d:bb:8b:30:99:09:69:51:9d:ee:fd:f1:01:a0:41: 1a:70:96:ea:81:fc:76:1d:3a:5d:1c:98:19:03:e0: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:B2:AE:C4:43:54:66:86:BB:62:30:21:FA:63:B2:91:8E:86:DF X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d2:8f:30:8d:bd:4c:4a:7d:b6:af:06:87:37:20:89:ec:56: e6:40:7e:0e:1f:84:68:24:14:ee:3a:46:8e:3c:9d:aa:2e:27: c9:4a:16:d3:8d:48:58:3f:10:1b:ad:0e:ac:38:d0:75:26:fd: 51:8c:78:a6:76:32:91:37:34:f9:ed:75:a1:dc:ab:dd:e6:c1: 01:71:ff:7a:33:28:b5:67:84:f9:99:52:2b:1b:11:e6:7e:82: 9b:69:f5:fa:2f:ed:d2:2b:48:0f:d4:ae:81:1c:84:64:77:19: ec:1c:32:e0:06:50:ba:81:7e:22:36:24:49:56:4a:54:d8:11: 22:42:50:2f:9c:23:fc:b6:7a:e6:7f:08:ca:bf:4f:a3:3c:f0: bf:3b:e2:fe:54:9c:fe:d3:3b:a7:a2:1d:7e:92:ea:7c:68:b6: b7:3d:a2:0c:a0:b8:66:d3:b4:81:40:5c:7e:ba:02:72:7c:e1: 05:3b:5b:29:90:6f:8b:1f:cd:43:32:a1:cf:31:72:aa:1a:61: bf:bc:0c:ec:fa:08:38:83:e4:63:f8:1f:b6:0e:a4:10:53:fc: 4e:8e:1f:ae:84:a6:4e:0f:cb:5d:dc:47:94:67:30:05:57:a4: 84:5b:67:35:9b:a1:94:3b:e5:f6:5d:ee:2c:d1:bf:fb:c3:56: 28:af:05:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUxMjIwMTQ1MTE0WhcNMjUxMjI3MTQ1MTE0WjAYMRYwFAYD VQQDDA02OTQ2YjdlMy0yODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3vgDIHkJ4uZp0TgJk11FnoqsoKtkYCjJpVHWfNHQQm3f8zfJwtSrLBHJ+Nq VcSqH6/MFiNTNlOvPXuP0peeCY7+lFgNDmw8aDF5Xd+kTZeX22htIw8qJpZDF03F N0IPzePX7nrCXawQdGL+/ac8mU9xO+f5NsFoLV/gWhucrFmb7u5pPLvBYUYCrE9a /B4PgWyRZV+W/Ec8s+/7AC2brByJofV3Xzxm2aVho7tp/33wwCWHHROFaVU5djG1 10sd5QngsIq6r5Bsgg4XERpXvk/aBVSz9TigRslNTWOjZPU9u4swmQlpUZ3u/fEB oEEacJbqgfx2HTpdHJgZA+D63QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9Gsq7E Q1RmhrtiMCH6Y7KRjobfMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD0o8wjb1MSn22rwaHNyCJ7FbmQH4OH4RoJBTuOkaOPJ2qLifJShbT jUhYPxAbrQ6sONB1Jv1RjHimdjKRNzT57XWh3Kvd5sEBcf96Myi1Z4T5mVIrGxHm foKbafX6L+3SK0gP1K6BHIRkdxnsHDLgBlC6gX4iNiRJVkpU2BEiQlAvnCP8tnrm fwjKv0+jPPC/O+L+VJz+0zunoh1+kup8aLa3PaIMoLhm07SBQFx+ugJyfOEFO1sp kG+LH81DMqHPMXKqGmG/vAzs+gg4g+Rj+B+2DqQQU/xOjh+uhKZOD8td3EeUZzAF V6SEW2c1m6GUO+X2Xe4s0b/7w1YorwWA -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:08 2025 by rpki-client