This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: E5qQKmkcK2v4xo7rCUAmdyGUxwSdL1a6+oy0w4KQedM= Subject key identifier: FB:19:5A:B2:D6:F1:D1:36:7E:07:E4:09:73:BE:DD:9B:9B:11:AF:0A Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0CB4 Signing time: Wed 10 Dec 2025 17:33:25 +0000 Manifest this update: Wed 10 Dec 2025 17:33:25 +0000 Manifest next update: Wed 17 Dec 2025 17:33:25 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: uTlr15iJl8dJN/wtsgi47a5cU/3RU9BFElgEQ1cwLhA=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Dec 10 17:33:25 2025 GMT Not After : Dec 17 17:33:25 2025 GMT Subject: CN=6939aee5-9feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:21:e9:8c:46:26:0d:c3:13:6a:93:e4:95:a4: 8b:03:4d:ed:51:70:90:7e:bd:25:f9:36:4c:be:d2: 77:1f:40:93:10:d5:1f:51:fa:0b:f7:ec:ff:e4:ea: 27:8d:c0:a0:a5:2c:33:9c:46:10:a2:cb:ad:e8:00: ee:62:3d:0f:a6:f4:55:af:89:55:c4:67:8c:84:56: c1:17:29:a7:a4:c7:fe:73:c8:49:5a:8c:07:1a:c6: b3:07:b4:29:a5:17:49:ee:26:a7:a3:ae:11:bf:36: b2:19:64:d9:95:a5:96:1d:2f:dd:03:4d:83:97:00: 2e:c7:0e:49:7d:f4:cf:3a:1a:9d:b3:78:97:ae:19: 8b:d8:c7:89:3f:45:29:48:9d:ba:d9:94:d2:20:96: c1:19:ea:02:e0:c1:d8:09:68:74:27:31:ee:06:73: de:a5:9d:9b:bf:2f:85:8b:a4:80:ee:f5:fb:3f:cf: 95:da:c2:76:a1:59:a8:d8:03:8c:46:4d:2e:85:d7: d3:40:83:76:bf:33:ee:a0:09:2e:07:0f:15:16:01: 49:01:73:e9:3f:61:03:5a:ad:fa:db:90:7f:b1:d2: 3c:35:94:00:b7:39:b1:c5:a1:9d:c0:31:42:59:1d: ae:16:60:72:f5:02:52:c4:6c:d6:8e:45:08:12:e0: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:19:5A:B2:D6:F1:D1:36:7E:07:E4:09:73:BE:DD:9B:9B:11:AF:0A X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ba:51:87:58:3c:18:de:92:9d:0e:9d:d5:20:0f:a0:bf:db: d4:f6:24:d0:c0:96:49:c1:5e:fb:d1:83:1d:a9:73:bb:81:cc: 85:46:9f:90:fc:4b:af:f0:e2:6c:1a:cb:03:02:52:e4:fa:f0: 69:32:ba:2d:3a:9c:9b:00:42:d0:2b:2e:52:cf:3a:a7:ae:0a: 35:41:85:95:a4:b1:bb:d1:ee:1f:c9:2e:ec:c5:fc:b3:55:80: 77:5d:2a:f7:48:3f:a5:37:31:60:55:35:d5:b4:f6:db:61:4e: 7c:1d:71:b5:5b:03:75:5f:e1:eb:ae:f3:80:83:c3:c7:3a:ee: 5a:e4:fc:98:1e:f8:ff:df:e4:d5:29:1f:5c:d2:e1:82:8e:cc: 55:27:6b:af:0d:93:d1:b3:7c:ef:43:21:35:87:6f:b3:0b:e5: 02:16:f7:93:21:b2:ae:d6:a9:f8:72:8c:2e:77:ea:0b:6e:63: be:ab:d7:f3:91:b7:98:88:4e:de:dd:fc:28:f7:e8:e4:64:0c: 0c:65:61:35:a5:5b:a2:09:00:9e:04:83:2a:92:9d:00:0a:43: eb:58:8b:9b:ef:ce:0d:32:73:03:9e:31:1c:46:80:1a:34:b1: 29:a8:82:09:6e:ae:ad:42:c8:b3:db:cb:b1:e6:7c:43:1c:9c: b0:89:12:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUxMjEwMTczMzI1WhcNMjUxMjE3MTczMzI1WjAYMRYwFAYD VQQDEw02OTM5YWVlNS05ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SHpjEYmDcMTapPklaSLA03tUXCQfr0l+TZMvtJ3H0CTENUfUfoL9+z/5Oon jcCgpSwznEYQosut6ADuYj0PpvRVr4lVxGeMhFbBFymnpMf+c8hJWowHGsazB7Qp pRdJ7iano64RvzayGWTZlaWWHS/dA02DlwAuxw5JffTPOhqds3iXrhmL2MeJP0Up SJ262ZTSIJbBGeoC4MHYCWh0JzHuBnPepZ2bvy+Fi6SA7vX7P8+V2sJ2oVmo2AOM Rk0uhdfTQIN2vzPuoAkuBw8VFgFJAXPpP2EDWq3625B/sdI8NZQAtzmxxaGdwDFC WR2uFmBy9QJSxGzWjkUIEuAK3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsZWrLW 8dE2fgfkCXO+3ZubEa8KMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVulGHWDwY3pKdDp3VIA+gv9vU9iTQwJZJwV770YMdqXO7gcyFRp+Q /Euv8OJsGssDAlLk+vBpMrotOpybAELQKy5Szzqnrgo1QYWVpLG70e4fyS7sxfyz VYB3XSr3SD+lNzFgVTXVtPbbYU58HXG1WwN1X+HrrvOAg8PHOu5a5PyYHvj/3+TV KR9c0uGCjsxVJ2uvDZPRs3zvQyE1h2+zC+UCFveTIbKu1qn4cowud+oLbmO+q9fz kbeYiE7e3fwo9+jkZAwMZWE1pVuiCQCeBIMqkp0ACkPrWIub784NMnMDnjEcRoAa NLEpqIIJbq6tQsiz28ux5nxDHJywiRJa -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:09 2025 by rpki-client