This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: XNS75BMkto2WtEkDjxnlOdIerKNYWAYNJ7pUwioo6go= Subject key identifier: 58:E2:5D:7D:A1:09:56:83:76:EB:4E:37:30:C7:C4:4C:E2:14:1E:1C Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 23AB Signing time: Fri 12 Dec 2025 15:45:23 +0000 Manifest this update: Fri 12 Dec 2025 15:45:22 +0000 Manifest next update: Fri 19 Dec 2025 15:45:22 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: OxhoAJjkayu21eKHkIEoGRGAY+QvSPuCc4Ys/jXEpZk=) 2: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 3: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 4: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) 5: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 15:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9178 (0x23da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Dec 12 15:45:22 2025 GMT Not After : Dec 19 15:45:22 2025 GMT Subject: CN=693c3893-1659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:6a:29:0a:17:9e:fc:4d:66:1b:cc:84:8b: 2d:ff:01:42:68:91:49:c2:57:45:3d:49:0d:ab:92: 86:4b:8b:54:6d:cc:22:1c:41:3f:d3:19:14:04:5a: fe:c3:2d:af:5c:ef:33:e2:09:3d:ca:19:b0:2b:0e: aa:e0:67:35:9b:da:e8:88:77:67:99:96:b4:79:99: 32:e9:e3:9e:05:c4:61:d3:6d:cc:69:8b:78:51:b3: 66:ec:d7:7a:02:4d:8b:27:9e:b6:09:b1:a0:c7:b6: 01:07:06:e5:c6:a9:08:21:ff:24:15:da:b2:54:f6: 9f:ba:0f:e1:7c:7e:d8:be:b9:9a:21:3e:e3:a9:5e: 4a:f0:17:bb:78:21:20:7c:16:22:89:bc:a3:72:ef: f7:14:80:64:0c:8e:1c:91:34:97:08:3d:a6:12:9c: 1c:4a:81:b5:0c:3e:f4:1a:17:f5:4e:d6:ca:20:e2: 85:27:30:7a:86:d7:d6:58:e1:7f:c4:39:a7:6f:e8: 71:78:31:d2:1f:2e:c1:11:f8:14:c5:fc:6d:ee:a8: 24:62:44:f9:5d:60:c8:fa:98:f6:eb:b6:95:fd:d1: 86:6e:26:24:09:61:c2:1d:ee:07:a0:e8:3f:80:d3: 44:71:60:7b:a8:29:93:bd:b7:6a:cd:a7:9a:e8:b0: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E2:5D:7D:A1:09:56:83:76:EB:4E:37:30:C7:C4:4C:E2:14:1E:1C X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:50:3b:8f:41:38:ce:12:89:81:7f:ae:bc:01:34:42:84:fc: 43:bc:61:b4:97:f8:c6:02:58:77:5d:fc:b5:71:cb:be:fd:07: 4b:af:45:e5:57:25:19:ad:33:92:4d:81:66:34:a1:2f:d5:05: 9f:48:f6:d4:d1:62:39:aa:b1:94:9e:f2:b3:7f:8e:ea:3b:a2: b5:e1:3e:d6:44:2f:3f:78:f4:34:9d:94:96:d3:91:e3:8c:f7: 7a:22:ba:b6:35:3a:9a:e0:20:64:f9:9a:8c:83:cc:d9:2f:ea: 86:cc:4c:28:5d:7c:09:62:fb:f7:14:7f:9f:1e:7e:31:b0:95: 44:57:eb:92:87:a8:73:b3:29:f9:cd:bd:f7:9b:33:5a:48:21: b8:93:3f:a8:c0:c1:71:98:90:e2:62:35:db:3c:20:d8:29:d4: 73:f0:29:f6:0a:49:56:c9:5e:ea:a8:91:74:48:51:72:7e:1d: 4d:07:b5:4c:6a:39:8d:9c:d8:53:a7:d9:d0:f8:a1:78:e3:37: 52:81:32:e1:0e:6a:aa:29:6d:c2:42:4e:11:2f:72:5e:64:bc: 04:50:ea:8d:97:36:ad:9a:70:44:be:08:30:4c:b2:aa:26:dd: 1c:e6:5a:58:fb:e2:5d:2c:74:30:f5:49:df:e5:00:20:a8:43: 49:5b:38:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMjEyMTU0NTIyWhcNMjUxMjE5MTU0NTIyWjAYMRYwFAYD VQQDDA02OTNjMzg5My0xNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttdqKQoXnvxNZhvMhIst/wFCaJFJwldFPUkNq5KGS4tUbcwiHEE/0xkUBFr+ wy2vXO8z4gk9yhmwKw6q4Gc1m9roiHdnmZa0eZky6eOeBcRh023MaYt4UbNm7Nd6 Ak2LJ562CbGgx7YBBwblxqkIIf8kFdqyVPafug/hfH7YvrmaIT7jqV5K8Be7eCEg fBYiibyjcu/3FIBkDI4ckTSXCD2mEpwcSoG1DD70Ghf1TtbKIOKFJzB6htfWWOF/ xDmnb+hxeDHSHy7BEfgUxfxt7qgkYkT5XWDI+pj267aV/dGGbiYkCWHCHe4HoOg/ gNNEcWB7qCmTvbdqzaea6LCP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjiXX2h CVaDdutONzDHxEziFB4cMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNUDuPQTjOEomBf668ATRChPxDvGG0l/jGAlh3Xfy1ccu+/QdLr0Xl VyUZrTOSTYFmNKEv1QWfSPbU0WI5qrGUnvKzf47qO6K14T7WRC8/ePQ0nZSW05Hj jPd6Irq2NTqa4CBk+ZqMg8zZL+qGzEwoXXwJYvv3FH+fHn4xsJVEV+uSh6hzsyn5 zb33mzNaSCG4kz+owMFxmJDiYjXbPCDYKdRz8Cn2CklWyV7qqJF0SFFyfh1NB7VM ajmNnNhTp9nQ+KF44zdSgTLhDmqqKW3CQk4RL3JeZLwEUOqNlzatmnBEvggwTLKq Jt0c5lpY++JdLHQw9Unf5QAgqENJWzhB -----END CERTIFICATE-----Generated at Sun Dec 14 17:24:24 2025 by rpki-client