This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: B2eZyFQBBXor366G0NBKsG0zbW+ZhHZwWlPHs31doKM= Subject key identifier: 13:70:A8:50:44:E9:61:74:A2:94:B9:0A:4F:C0:AC:46:BC:96:F8:80 Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: 010C Signing time: Tue 23 Dec 2025 03:55:51 +0000 Manifest this update: Tue 23 Dec 2025 03:55:51 +0000 Manifest next update: Tue 30 Dec 2025 03:55:51 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: xchqeaXwS4/Vg5TmkpTjTISk30xC9ZjaQXfIm8nUzUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Dec 23 03:55:51 2025 GMT Not After : Dec 30 03:55:51 2025 GMT Subject: CN=694a12c7-a61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:12:32:2e:85:40:35:97:7b:c1:ef:b0:d5: b8:ef:e6:a1:d6:a7:82:9b:4a:aa:d3:c4:db:68:98: fd:c9:df:5c:ff:fb:bf:5c:a0:79:55:ea:a8:7c:b3: 1e:c5:38:d2:9b:a2:ca:c9:bf:b8:ae:5c:90:5b:b7: bb:dd:71:fe:da:99:9c:41:a2:c1:72:46:fa:e7:0f: 96:58:80:c3:61:85:06:15:0b:be:32:a3:ce:82:24: 06:c2:cd:cc:f7:ef:eb:44:ca:1a:eb:43:ab:a1:db: e9:58:ce:a1:0b:f4:a3:44:42:2a:8e:0a:54:db:73: 79:b4:3c:dd:f3:35:50:23:08:97:73:72:1a:15:2f: 4f:06:58:e3:1c:eb:ed:3d:79:ba:3c:e1:2c:fc:1a: ab:cc:4b:a4:56:da:81:b9:3a:60:d5:f8:2e:01:dc: 0e:b7:17:a6:ee:3a:da:61:5a:d7:5a:63:b9:c1:d7: e9:a9:1a:01:4d:49:0b:dd:32:ec:a1:56:ea:30:93: 51:d6:23:fd:b5:14:1c:f7:1c:6f:13:2b:4e:60:f4: 21:64:2f:82:0f:43:1c:64:92:b2:a1:ca:e6:9f:75: ed:ea:4f:d6:e2:97:2e:26:ba:c9:7e:be:8c:95:fc: 2d:c0:6d:97:6b:48:b0:01:26:8f:b7:1b:52:1b:a7: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:A8:50:44:E9:61:74:A2:94:B9:0A:4F:C0:AC:46:BC:96:F8:80 X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:99:32:49:a9:22:e2:be:9b:63:2a:b2:7a:58:22:2b:53:21: 34:ba:5b:f9:83:c9:b1:db:bb:69:13:91:9c:ed:67:f9:a6:1f: 6c:ba:5a:c4:13:af:d7:b9:b4:d0:ae:b7:57:e1:9a:f5:0c:06: 85:ad:50:69:b8:21:75:f8:bd:17:7b:25:fd:b4:db:8d:25:14: 54:08:bc:73:85:38:a3:d0:8c:80:3f:85:31:30:13:a4:c6:1e: 7b:2f:12:a2:7e:62:3c:9f:01:5a:ce:06:26:6a:d0:37:86:0f: 33:fa:5a:5d:72:57:0b:33:69:82:93:ce:01:db:50:1f:63:1d: 0b:ca:26:96:2b:94:70:f6:9d:f4:96:28:33:aa:d1:30:7c:61: 6d:7c:b5:55:ef:4c:e5:8d:7d:13:bb:40:12:de:97:2d:20:a2: d7:88:70:37:bd:fb:22:eb:f1:0f:f4:06:d9:7e:72:a7:67:cf: 87:15:a9:36:33:49:fe:39:07:12:77:f7:ed:41:36:2f:83:04: 89:18:20:bb:df:bd:9c:4e:33:e7:cc:4e:ea:61:ea:1e:ae:56: 0a:b8:d3:7c:97:c0:83:34:a3:6c:23:5d:de:01:9e:4a:6d:fe: 6c:c8:5e:3a:9e:c9:1f:db:7c:91:cc:45:7d:7a:b9:1f:5d:39: cb:2a:b6:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDk5QzEwNkU4N0ZFMUQ2NDExQUVDNzFGODAzOTQ2MjJD ODgxQUFBRDkwHhcNMjUxMjIzMDM1NTUxWhcNMjUxMjMwMDM1NTUxWjAYMRYwFAYD VQQDDA02OTRhMTJjNy1hNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqE0SMi6FQDWXe8HvsNW47+ah1qeCm0qq08TbaJj9yd9c//u/XKB5VeqofLMe xTjSm6LKyb+4rlyQW7e73XH+2pmcQaLBckb65w+WWIDDYYUGFQu+MqPOgiQGws3M 9+/rRMoa60OrodvpWM6hC/SjREIqjgpU23N5tDzd8zVQIwiXc3IaFS9PBljjHOvt PXm6POEs/BqrzEukVtqBuTpg1fguAdwOtxem7jraYVrXWmO5wdfpqRoBTUkL3TLs oVbqMJNR1iP9tRQc9xxvEytOYPQhZC+CD0McZJKyocrmn3Xt6k/W4pcuJrrJfr6M lfwtwG2Xa0iwASaPtxtSG6de5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNwqFBE 6WF0opS5Ck/ArEa8lviAMB8GA1UdIwQYMBaAFJnBBuh/4dZBGuxx+AOUYiyIGqrZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8zNjUxNDBFRTQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFrRWE3SEg0QTVSaUxJZ2Fx dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8zNjUxNDBFRTQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFr RWE3SEg0QTVSaUxJZ2FxdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZmTJJqSLivptjKrJ6WCIrUyE0ulv5g8mx27tpE5Gc7Wf5ph9sulrE E6/XubTQrrdX4Zr1DAaFrVBpuCF1+L0XeyX9tNuNJRRUCLxzhTij0IyAP4UxMBOk xh57LxKifmI8nwFazgYmatA3hg8z+lpdclcLM2mCk84B21AfYx0LyiaWK5Rw9p30 ligzqtEwfGFtfLVV70zljX0Tu0AS3pctIKLXiHA3vfsi6/EP9AbZfnKnZ8+HFak2 M0n+OQcSd/ftQTYvgwSJGCC7372cTjPnzE7qYeoerlYKuNN8l8CDNKNsI13eAZ5K bf5syF46nskf23yRzEV9erkfXTnLKrYv -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:44 2025 by rpki-client