This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: Tev+tJkI9jKQ+EOAlylg0SUjRSZZwwfhoMUxu5icsGE= Subject key identifier: CC:A5:6C:53:1B:24:86:27:87:A0:77:21:92:AB:CB:2C:5E:BB:8A:9D Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0329 Signing time: Tue 23 Dec 2025 01:17:11 +0000 Manifest this update: Tue 23 Dec 2025 01:17:10 +0000 Manifest next update: Tue 30 Dec 2025 01:17:10 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: 8pVa4fPH8zG37T+Mpy1DGDc+pK/OmqoM7Vtio06llO8=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Dec 23 01:17:10 2025 GMT Not After : Dec 30 01:17:10 2025 GMT Subject: CN=6949ed97-917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:7f:a1:60:24:0e:76:4b:83:ad:49:6b:19: d5:61:8b:28:e9:3c:16:68:19:98:28:45:50:27:81: ff:e5:e7:a7:3b:4e:4f:09:4d:7c:ab:a8:e5:c8:ae: 3d:78:51:62:40:bd:98:d0:dd:a0:33:f2:0c:6e:0f: 67:24:fc:01:9e:28:c8:3c:f1:55:28:cd:6a:d1:da: c0:ea:c3:38:c0:ef:b7:ae:a1:0c:c3:54:6e:4a:15: 59:af:90:05:92:8a:d5:5c:55:49:f7:8b:b5:18:cc: 61:78:97:1f:d1:87:ec:02:c8:7c:98:9a:4b:d6:b8: cd:33:83:1a:e0:72:d0:15:39:24:2e:c8:fd:3c:7f: 05:dd:a7:b4:41:36:63:99:80:84:32:06:51:0c:c6: ad:47:69:70:aa:82:3d:5e:08:f8:41:99:d2:25:12: d2:c1:29:1f:17:dc:cf:94:5e:09:4f:2e:dc:b0:7a: ff:71:5f:4a:d8:ce:5c:2d:e3:65:46:7f:59:8c:0b: a7:ed:a6:f5:73:2a:ae:e7:35:b7:07:f6:34:71:1f: 1b:17:05:b5:dd:34:19:e4:a5:2d:ba:30:e0:e9:13: 92:40:5a:97:72:e4:49:cc:2a:06:11:d4:4b:72:a2: 8c:e0:c4:62:53:a7:c0:0d:37:89:35:be:e0:06:90: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A5:6C:53:1B:24:86:27:87:A0:77:21:92:AB:CB:2C:5E:BB:8A:9D X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:56:0f:8b:65:f0:5e:57:f3:d0:16:03:45:13:1d:dd:a5:e6: b7:19:2f:17:07:16:63:6f:0b:c7:96:ab:1b:21:a9:0a:d4:c3: bc:6e:4e:8d:48:eb:cb:04:55:45:b6:62:6a:87:b2:31:d3:2a: c7:fa:4e:f0:8d:22:ee:50:27:2f:f5:eb:31:76:d0:bf:f9:1c: e7:0e:b9:2c:ad:22:94:eb:b9:fa:0e:98:2d:cd:9c:42:fa:7b: 41:98:05:6e:30:b6:b7:42:73:23:6f:eb:73:22:4f:2a:60:b5: fe:a1:3e:aa:9c:6b:a9:78:8c:44:5d:38:b0:1f:e8:61:7b:9e: 9d:86:cc:1b:15:1d:07:28:b5:88:20:cc:71:cb:0a:87:70:30: 0d:d8:a1:3e:fe:74:a3:d9:39:85:ff:89:bd:e2:96:06:e7:03: 0e:b1:c5:4c:15:6b:4c:a0:71:71:3e:44:b6:cc:01:c9:92:1e: ee:2b:fe:24:a1:da:dd:d9:c4:27:5d:39:a1:06:4a:74:2c:a9: bd:f4:d3:32:15:8d:2e:12:da:ae:86:c3:66:90:34:20:18:70: 9c:da:d8:45:c2:44:fd:8a:71:51:bd:af:3f:51:56:01:42:8b: dd:bd:be:a2:49:c1:9f:e3:da:da:32:12:05:36:be:ed:7d:b5: 02:bb:dd:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUxMjIzMDExNzEwWhcNMjUxMjMwMDExNzEwWjAYMRYwFAYD VQQDDA02OTQ5ZWQ5Ny05MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxt/oWAkDnZLg61JaxnVYYso6TwWaBmYKEVQJ4H/5eenO05PCU18q6jlyK49 eFFiQL2Y0N2gM/IMbg9nJPwBnijIPPFVKM1q0drA6sM4wO+3rqEMw1RuShVZr5AF korVXFVJ94u1GMxheJcf0YfsAsh8mJpL1rjNM4Ma4HLQFTkkLsj9PH8F3ae0QTZj mYCEMgZRDMatR2lwqoI9Xgj4QZnSJRLSwSkfF9zPlF4JTy7csHr/cV9K2M5cLeNl Rn9ZjAun7ab1cyqu5zW3B/Y0cR8bFwW13TQZ5KUtujDg6ROSQFqXcuRJzCoGEdRL cqKM4MRiU6fADTeJNb7gBpCpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMylbFMb JIYnh6B3IZKryyxeu4qdMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGVg+LZfBeV/PQFgNFEx3dpea3GS8XBxZjbwvHlqsbIakK1MO8bk6N SOvLBFVFtmJqh7Ix0yrH+k7wjSLuUCcv9esxdtC/+RznDrksrSKU67n6DpgtzZxC +ntBmAVuMLa3QnMjb+tzIk8qYLX+oT6qnGupeIxEXTiwH+hhe56dhswbFR0HKLWI IMxxywqHcDAN2KE+/nSj2TmF/4m94pYG5wMOscVMFWtMoHFxPkS2zAHJkh7uK/4k odrd2cQnXTmhBkp0LKm99NMyFY0uEtquhsNmkDQgGHCc2thFwkT9inFRva8/UVYB Qovdvb6iScGf49raMhIFNr7tfbUCu92I -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:57 2025 by rpki-client