This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: AsZ3oQABYdE25KSYycnVBI0oEoqSBtoXB1ayoXN9NAQ= Subject key identifier: F1:8D:84:E2:31:EB:FF:22:72:8B:53:A9:93:20:A9:21:40:36:05:AB Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0CAD Signing time: Mon 22 Dec 2025 17:53:43 +0000 Manifest this update: Mon 22 Dec 2025 17:53:42 +0000 Manifest next update: Mon 29 Dec 2025 17:53:42 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: JLaP9bfrv8K5vlv/w0Dgk+LDJY0Zv74P8dT0LrBiXzo=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: nPz5etvH54CH9fTIMVloTiUDB5Qsl1I9QXbAO8u0vO8=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: yDcvIxrioePtxpeJhvFLHJCVBxiycv8OBxChNhzEutw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Dec 22 17:53:42 2025 GMT Not After : Dec 29 17:53:42 2025 GMT Subject: CN=694985a7-bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:a4:c3:17:f0:a8:5f:ae:d6:11:ff:2c:d9: e1:71:6c:51:58:e2:6e:b4:21:f8:a4:f5:ae:ce:7e: 66:24:c3:cd:03:f4:60:25:7b:a0:c8:70:c6:39:7c: 07:96:da:8d:37:aa:c4:43:39:62:3b:bd:9a:e0:6f: d1:8d:c1:02:4a:07:38:30:73:b9:c6:cb:af:ce:5e: a6:72:32:11:35:21:10:9d:bf:f3:59:c5:6a:a7:7e: 3f:90:2f:58:9d:da:e0:84:11:f1:43:29:b8:98:fa: 52:72:3d:07:9e:5f:1b:80:7b:22:5b:7f:99:9e:e3: 22:e4:ea:06:ed:3b:22:f6:27:71:5b:00:80:96:aa: 67:05:98:bb:8b:24:ca:18:dd:0f:09:ef:c7:f5:39: 5d:cc:fa:04:d6:d7:68:a9:01:ec:87:af:45:f2:2b: ed:28:46:cd:37:06:3c:05:15:94:5c:0c:85:5e:cf: f4:af:aa:c1:a1:5d:6c:67:9e:2b:e5:71:49:44:70: 31:4a:20:eb:8c:5f:4a:c0:0b:29:d0:c8:60:63:42: cf:30:d1:d2:c8:22:0c:3c:a6:42:f2:3f:1a:6a:96: 62:76:99:5f:8c:39:29:4f:9a:59:e0:c6:e8:6e:05: 6d:9f:db:f3:dc:e8:bf:4b:67:15:34:74:59:a6:6b: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8D:84:E2:31:EB:FF:22:72:8B:53:A9:93:20:A9:21:40:36:05:AB X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:f8:53:e2:dd:3e:92:2b:8c:5a:79:5f:4e:22:7c:af:84:31: 9b:e2:f8:53:ec:26:75:7e:e2:f2:62:a4:18:8f:99:dd:58:6b: 6b:b4:40:9f:f3:2b:ec:6d:9b:22:8b:7f:a7:88:fe:ad:ac:5d: 03:ae:49:88:fe:15:c9:a6:d5:4b:3e:03:5b:6e:b6:73:b7:4e: f1:10:b7:95:ae:b9:a8:c9:a2:4c:64:54:82:03:37:81:73:a9: 23:d7:97:a9:91:fc:eb:5b:5c:f8:30:f8:ac:50:ca:2e:66:13: a3:e8:13:d6:74:a4:f5:5e:61:68:d6:bd:96:bc:b2:49:aa:9f: 6b:73:ef:cd:13:b8:a2:9c:68:21:f2:0b:25:b0:87:94:b4:30: 0c:63:73:52:a1:c2:6c:d6:68:ce:42:6d:6e:e1:d8:38:71:67: 54:d2:1d:80:a0:94:97:be:12:e1:9f:98:ed:32:e4:c6:71:f9: 55:4f:c7:f4:42:3d:06:9d:88:d8:9a:9e:d1:94:e3:64:d7:a1: ef:29:e3:67:01:16:48:fe:b9:b9:76:8d:e5:a7:19:41:0e:b8: bb:8b:f1:32:43:e2:32:1f:17:ce:94:ce:4f:12:74:6f:d5:f9: 4f:d7:03:ff:08:89:7c:07:80:26:86:78:e3:c2:c7:9d:85:c7: e6:3b:92:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUxMjIyMTc1MzQyWhcNMjUxMjI5MTc1MzQyWjAYMRYwFAYD VQQDDA02OTQ5ODVhNy1iZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleCkwxfwqF+u1hH/LNnhcWxRWOJutCH4pPWuzn5mJMPNA/RgJXugyHDGOXwH ltqNN6rEQzliO72a4G/RjcECSgc4MHO5xsuvzl6mcjIRNSEQnb/zWcVqp34/kC9Y ndrghBHxQym4mPpScj0Hnl8bgHsiW3+ZnuMi5OoG7Tsi9idxWwCAlqpnBZi7iyTK GN0PCe/H9TldzPoE1tdoqQHsh69F8ivtKEbNNwY8BRWUXAyFXs/0r6rBoV1sZ54r 5XFJRHAxSiDrjF9KwAsp0MhgY0LPMNHSyCIMPKZC8j8aapZidplfjDkpT5pZ4Mbo bgVtn9vz3Oi/S2cVNHRZpmvRrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGNhOIx 6/8icotTqZMgqSFANgWrMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI+FPi3T6SK4xaeV9OInyvhDGb4vhT7CZ1fuLyYqQYj5ndWGtrtECf 8yvsbZsii3+niP6trF0DrkmI/hXJptVLPgNbbrZzt07xELeVrrmoyaJMZFSCAzeB c6kj15epkfzrW1z4MPisUMouZhOj6BPWdKT1XmFo1r2WvLJJqp9rc+/NE7iinGgh 8gslsIeUtDAMY3NSocJs1mjOQm1u4dg4cWdU0h2AoJSXvhLhn5jtMuTGcflVT8f0 Qj0GnYjYmp7RlONk16HvKeNnARZI/rm5do3lpxlBDri7i/EyQ+IyHxfOlM5PEnRv 1flP1wP/CIl8B4AmhnjjwsedhcfmO5LF -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:32 2025 by rpki-client