This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: r9D6hOoHhVrr8iVn+beOWVJJ/NssL+MAtzCUwzL6G4M= Subject key identifier: 67:1D:7D:2F:59:29:D0:0B:5A:57:C2:C5:18:0A:AE:9F:C2:0A:A0:3F Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 042B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 0422 Signing time: Mon 22 Dec 2025 23:24:25 +0000 Manifest this update: Mon 22 Dec 2025 23:24:24 +0000 Manifest next update: Mon 29 Dec 2025 23:24:24 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: DeJQd3X/WLFs1tEmBEzNs9GWXpAVXSI7O7Eyq21Omjo=) 2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) 3: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Dec 22 23:24:24 2025 GMT Not After : Dec 29 23:24:24 2025 GMT Subject: CN=6949d329-9c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:37:67:80:3a:18:91:a0:b4:e0:e4:f3:5a: 2a:34:a8:2a:9a:f9:c2:a9:17:11:25:08:7d:b1:8f: 02:27:8a:ca:9b:6c:2d:8f:fa:63:b8:5b:09:32:ac: 56:7d:20:cf:e1:16:b8:09:8f:2f:3b:8d:9f:7d:eb: c2:df:b9:b0:f3:f0:bd:f3:e5:de:72:40:56:bd:90: 75:b5:f2:ce:32:81:8f:f1:12:59:8d:53:6a:ab:01: dc:a6:61:bb:2b:6e:b0:e5:89:01:5b:f6:85:39:88: f6:d5:6d:50:d5:ef:80:27:57:b3:36:8e:72:26:cb: 3e:35:7c:aa:92:b4:0e:90:3b:d0:51:d0:0c:b8:ae: 27:24:73:e0:ed:0f:e6:c1:a5:28:20:b2:63:74:c2: 43:d0:2e:eb:7c:43:3a:42:f7:1e:38:5c:cc:78:45: 9c:95:81:0e:4a:59:f0:85:95:a5:67:37:67:e1:70: 86:78:d9:80:95:3b:21:12:6a:30:e7:55:51:b5:ab: 94:40:02:1f:cc:6d:ea:7d:f3:ca:d6:55:5b:6d:ca: 49:1c:5b:c3:a5:17:1c:f4:73:78:34:26:8f:1b:73: 1b:dd:13:1e:b6:e7:4a:40:aa:7c:39:55:1a:14:ce: 34:9a:01:57:cd:c8:ba:ca:6a:5b:a7:44:75:e8:12: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:7D:2F:59:29:D0:0B:5A:57:C2:C5:18:0A:AE:9F:C2:0A:A0:3F X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:02:6d:3e:0f:e0:c8:26:65:84:cd:04:17:35:af:f7:c4:b9: 28:f6:99:1d:88:54:dd:68:47:12:33:b7:59:79:4a:09:6d:c1: 89:bc:58:36:83:79:cb:64:f7:5a:f6:f4:9b:8a:a1:5f:0b:65: 88:98:8d:1d:d4:16:b5:41:6a:af:83:19:a8:0d:d6:0d:08:cf: 6a:e2:cf:be:e0:ca:f2:da:3d:66:a0:ce:e0:b5:d5:70:8c:8d: 7a:8f:50:b4:44:86:07:fc:05:87:84:a6:6e:43:fb:d9:ca:a3: 84:0c:cc:82:78:b7:0c:c3:5c:4f:04:79:be:8f:fb:08:cb:63: 03:37:1e:cc:46:cc:95:94:4f:2b:06:e2:ca:c4:75:8d:83:fd: 6a:e6:7a:1b:a6:7a:5a:b8:bd:98:cb:28:f0:fd:6d:07:46:fa: ac:87:14:a1:93:28:66:fa:68:ed:54:06:6c:ee:c2:35:18:d2: a5:dc:37:89:6e:43:d8:86:7d:bc:5a:ec:25:7a:49:6d:63:fc: be:1d:14:ee:54:ec:df:c9:ce:b5:2c:2e:59:33:a5:04:49:69: 18:d2:0a:fe:17:97:53:bc:85:d4:c6:4c:4c:00:1b:1b:8c:94: fd:6a:52:70:52:ba:51:cf:0e:89:34:5a:d8:d4:88:d8:cc:4e: ab:96:9d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUxMjIyMjMyNDI0WhcNMjUxMjI5MjMyNDI0WjAYMRYwFAYD VQQDDA02OTQ5ZDMyOS05YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA83Z4A6GJGgtODk81oqNKgqmvnCqRcRJQh9sY8CJ4rKm2wtj/pjuFsJMqxW fSDP4Ra4CY8vO42ffevC37mw8/C98+XeckBWvZB1tfLOMoGP8RJZjVNqqwHcpmG7 K26w5YkBW/aFOYj21W1Q1e+AJ1ezNo5yJss+NXyqkrQOkDvQUdAMuK4nJHPg7Q/m waUoILJjdMJD0C7rfEM6QvceOFzMeEWclYEOSlnwhZWlZzdn4XCGeNmAlTshEmow 51VRtauUQAIfzG3qffPK1lVbbcpJHFvDpRcc9HN4NCaPG3Mb3RMetudKQKp8OVUa FM40mgFXzci6ympbp0R16BLjHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcdfS9Z KdALWlfCxRgKrp/CCqA/MB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZAm0+D+DIJmWEzQQXNa/3xLko9pkdiFTdaEcSM7dZeUoJbcGJvFg2 g3nLZPda9vSbiqFfC2WImI0d1Ba1QWqvgxmoDdYNCM9q4s++4Mry2j1moM7gtdVw jI16j1C0RIYH/AWHhKZuQ/vZyqOEDMyCeLcMw1xPBHm+j/sIy2MDNx7MRsyVlE8r BuLKxHWNg/1q5nobpnpauL2Yyyjw/W0HRvqshxShkyhm+mjtVAZs7sI1GNKl3DeJ bkPYhn28WuwlekltY/y+HRTuVOzfyc61LC5ZM6UESWkY0gr+F5dTvIXUxkxMABsb jJT9alJwUrpRzw6JNFrY1IjYzE6rlp1V -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:00 2025 by rpki-client