This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft File: moOQ_87kYoLKpxzdePBmlPjT1bY.mft (raw, json) Hash identifier: SggV0+P7TP981100h3r8+1zKiILSeI0Uexvdi7okzrk= Subject key identifier: B1:F9:A9:F8:3F:53:A2:93:D6:72:30:5F:B9:64:3B:05:E9:DC:E2:43 Authority key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6 Certificate issuer: /CN=A918B531/serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft Manifest number: 5D Signing time: Tue 23 Dec 2025 06:00:16 +0000 Manifest this update: Tue 23 Dec 2025 06:00:16 +0000 Manifest next update: Tue 30 Dec 2025 06:00:16 +0000 Files and hashes: 1: moOQ_87kYoLKpxzdePBmlPjT1bY.crl (hash: 9xZ4s7kbdlJmjWLwDgy9l3vcyKTidf3WvAyvk9Iab+8=) 2: C0B3AE3056F511F0AF865C85C4F9AE02.roa (hash: Kq4RGZv8vbdYw9gIflVVj8xPIzA+Pq4dcfxTuqEJ7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6 Validity Not Before: Dec 23 06:00:16 2025 GMT Not After : Dec 30 06:00:16 2025 GMT Subject: CN=694a2ff0-c600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:68:76:6c:99:7a:26:97:ae:55:f5:06:68: d3:d3:5b:74:8d:9c:52:78:22:4b:92:16:28:20:e9: 13:84:16:d4:03:67:26:bc:51:f9:3b:49:60:78:90: eb:3d:47:e4:cb:e6:92:22:a6:fd:5f:db:ba:e8:2b: 9a:8d:60:30:e5:e2:b5:7d:12:31:aa:4d:b1:fe:d4: 07:fc:bd:f1:ad:56:f5:89:23:26:fd:76:d3:94:2b: 96:20:cf:87:22:0d:f6:50:93:98:10:31:ba:82:f3: ac:13:ea:4c:93:88:61:f0:74:9d:9a:77:ef:5b:fe: 4f:d5:ee:b8:3f:6d:57:f7:45:07:a9:62:63:e9:15: 28:d4:bb:0d:85:85:54:7a:c0:57:67:73:12:b0:0b: 7b:52:65:c9:94:99:f2:03:a6:cd:24:78:26:ac:1c: 6a:23:a4:f6:e3:1c:fe:4a:8d:8f:e4:8c:4d:74:05: 0e:b5:19:54:ec:78:ab:39:a2:6b:41:b1:9d:7e:f1: 78:69:da:d4:72:d2:f7:3a:10:fe:39:e5:af:d2:d8: 50:d2:d9:15:a8:d4:5e:35:8c:d7:e6:9e:28:9e:bd: 50:c3:75:c7:5c:d5:6b:ec:19:49:00:2f:82:2d:a1: 57:27:5b:6c:70:bd:d2:1b:29:40:42:61:88:b7:0e: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F9:A9:F8:3F:53:A2:93:D6:72:30:5F:B9:64:3B:05:E9:DC:E2:43 X509v3 Authority Key Identifier: keyid:9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:2b:44:24:3a:f0:d2:ca:cd:fe:78:40:4c:a0:ce:40:6c:5e: df:51:22:35:56:3f:a4:36:b0:91:7a:50:dc:4f:9f:14:c3:90: ba:b7:eb:a9:dd:1c:cb:1b:5d:ff:8d:9a:23:2d:22:d8:6a:9c: 90:5b:74:75:90:42:9b:a9:c5:88:2c:64:59:22:b5:bf:b4:33: e5:35:94:0b:5c:25:79:10:25:5b:62:31:f7:da:40:1b:da:80: 60:bb:2f:e1:28:6b:87:4f:d1:66:03:70:7d:b7:81:9a:4e:14: 04:83:ee:ec:ce:65:15:5b:cc:73:54:39:36:23:41:69:6d:a6: 66:a2:96:14:22:37:60:d8:a1:da:22:12:7f:77:6a:97:46:0c: 32:d8:ca:6f:51:42:95:5e:f5:85:a8:7b:9d:b2:81:d3:2d:db: 1d:84:11:29:11:26:97:62:fc:d8:76:d4:80:d9:68:ab:ab:c8: 05:ba:57:ff:45:ed:ee:84:6d:8e:ec:0b:54:61:d7:9d:27:0b: 55:a3:a7:9c:39:f7:db:1d:d0:d6:8b:c8:87:cb:55:86:b1:44: da:36:a6:41:1f:47:cd:ce:9b:ef:53:a4:d5:ed:10:e3:fb:65: 2a:40:2e:1e:b7:23:a3:12:9c:47:dc:e1:32:f5:5f:07:20:68: f8:7e:2c:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjUzMTExMC8GA1UEBRMoOUE4MzkwRkZDRUU0NjI4MkNBQTcxQ0RENzhGMDY2OTRG OEQzRDVCNjAeFw0yNTEyMjMwNjAwMTZaFw0yNTEyMzAwNjAwMTZaMBgxFjAUBgNV BAMMDTY5NGEyZmYwLWM2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWhmh2bJl6JpeuVfUGaNPTW3SNnFJ4IkuSFigg6ROEFtQDZya8Ufk7SWB4kOs9 R+TL5pIipv1f27roK5qNYDDl4rV9EjGqTbH+1Af8vfGtVvWJIyb9dtOUK5Ygz4ci DfZQk5gQMbqC86wT6kyTiGHwdJ2ad+9b/k/V7rg/bVf3RQepYmPpFSjUuw2FhVR6 wFdncxKwC3tSZcmUmfIDps0keCasHGojpPbjHP5KjY/kjE10BQ61GVTseKs5omtB sZ1+8Xhp2tRy0vc6EP455a/S2FDS2RWo1F41jNfmniievVDDdcdc1WvsGUkAL4It oVcnW2xwvdIbKUBCYYi3DvtZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsfmp+D9T opPWcjBfuWQ7Benc4kMwHwYDVR0jBBgwFoAUmoOQ/87kYoLKpxzdePBmlPjT1bYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNTMxLzAxODQ5NDUyNTZG NTExRjBCODM5NEI4NEM0RjlBRTAyL21vT1FfODdrWW9MS3B4emRlUEJtbFBqVDFi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbW9PUV84N2tZb0xLcHh6ZGVQQm1sUGpUMWJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NTMxLzAxODQ5NDUyNTZGNTExRjBCODM5NEI4NEM0RjlBRTAyL21vT1FfODdrWW9M S3B4emRlUEJtbFBqVDFiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKorRCQ68NLKzf54QEygzkBsXt9RIjVWP6Q2sJF6UNxPnxTDkLq366nd HMsbXf+NmiMtIthqnJBbdHWQQpupxYgsZFkitb+0M+U1lAtcJXkQJVtiMffaQBva gGC7L+Eoa4dP0WYDcH23gZpOFASD7uzOZRVbzHNUOTYjQWltpmailhQiN2DYodoi En93apdGDDLYym9RQpVe9YWoe52ygdMt2x2EESkRJpdi/Nh21IDZaKuryAW6V/9F 7e6EbY7sC1Rh150nC1Wjp5w599sd0NaLyIfLVYaxRNo2pkEfR83Om+9TpNXtEOP7 ZSpALh63I6MSnEfc4TL1XwcgaPh+LIE= -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:51 2025 by rpki-client