This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft File: MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json) Hash identifier: 3JiaAPJZsd/c3FVNq8zbpj6S7Z6vjpe3DqWlikmkEYg= Subject key identifier: 57:5F:DB:D9:5D:48:BA:A5:5B:EB:AA:75:E9:F0:CE:79:83:45:41:DF Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft Manifest number: 27 Signing time: Tue 23 Dec 2025 06:37:17 +0000 Manifest this update: Tue 23 Dec 2025 06:37:16 +0000 Manifest next update: Tue 30 Dec 2025 06:37:16 +0000 Files and hashes: 1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: kFyFD3wI95KpBlMq0aE/klVocuO+VYe/mEEJcxL15hM=) 2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: JoD8kUiZwN5GvjZHTmd4zfRH7p3bIH8RB5NX5m2Vdis=) 3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: pfVRnkrqeM6DrdQhe1mmG2XLA7a4TS/iBPWv6lTwlhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Validity Not Before: Dec 23 06:37:16 2025 GMT Not After : Dec 30 06:37:16 2025 GMT Subject: CN=694a389d-e3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:c5:95:26:12:65:17:9a:01:ff:73:f2:5b: f1:a0:2d:70:e6:fe:40:4a:65:10:b5:87:b8:ce:99: 74:62:af:14:b0:76:d0:79:d2:00:88:8e:a6:02:d2: 1d:fa:af:4a:f9:a2:f5:5e:ed:bf:cf:99:e1:9d:ff: 2b:58:bd:2d:42:a2:14:6a:b1:b2:d0:18:54:b7:00: 25:6f:9b:2a:18:37:f6:b4:99:d5:0a:41:e2:36:49: f4:51:60:60:2a:e8:13:3d:0e:17:3b:63:a2:b1:b2: 39:d7:ba:b2:d0:97:09:c9:a2:40:c1:80:0e:a9:60: 8a:98:68:ed:4f:aa:da:05:17:cc:f6:91:28:b5:fd: 43:a8:5d:a1:49:8c:99:c6:36:d9:3b:41:ff:65:28: 3c:7e:36:44:0b:5c:e0:75:e4:d5:24:79:8b:e8:2d: c4:9e:ed:b0:a4:1d:ee:db:ce:3d:21:c8:b1:f3:f5: b5:af:a1:73:19:b1:ce:94:65:13:c8:73:0a:ec:5d: 68:59:6b:09:f2:b5:38:28:37:c7:c5:cb:52:df:5b: 8d:be:e5:76:0d:ca:5f:50:6e:83:6a:b7:08:4e:de: dc:39:83:76:c1:f9:7f:99:66:99:c2:e5:24:a3:79: 1f:cc:d9:ae:45:c8:3b:71:01:90:37:86:31:74:bd: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5F:DB:D9:5D:48:BA:A5:5B:EB:AA:75:E9:F0:CE:79:83:45:41:DF X509v3 Authority Key Identifier: keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:85:b3:5a:73:25:38:bc:3a:18:2e:5d:b4:6e:1d:04:49:bf: b3:14:76:82:7f:cd:9a:be:d4:7d:e4:84:5e:3b:44:b4:9e:17: ee:1d:03:3d:79:9e:ea:6d:a8:23:dd:e3:4c:e7:5e:3a:8a:c3: 2f:ec:d7:ee:35:a7:ee:d7:16:69:3c:27:25:56:a1:e7:56:9d: af:58:6a:94:5c:9d:90:c3:f6:e0:99:05:8f:60:59:ad:8b:38: 21:e9:66:b7:bd:69:48:1e:dd:44:0e:0b:8d:eb:be:09:d9:bd: 75:7a:e7:fc:5a:2f:d7:36:ad:87:be:7b:15:f7:fb:ef:68:d0: 63:10:82:bb:d8:50:82:61:a5:19:53:fc:0a:eb:64:5b:18:dc: c2:ba:db:03:73:30:58:bf:50:82:4e:b7:54:61:5a:21:44:46: 2b:4d:cc:c1:50:e4:b8:4d:ed:d1:35:8b:09:c6:3d:d6:0e:5e: 37:e6:a9:63:68:ed:b4:f5:3d:75:89:df:9e:b8:6e:d9:ab:93: 22:69:5a:df:e6:55:fb:c1:ec:28:ed:0b:78:ed:fa:ee:45:2f: f1:6c:60:c5:e2:c6:69:ff:13:24:9b:54:ad:0f:64:0e:da:40: e1:e1:8f:59:dd:76:98:f6:b6:e8:d8:f0:84:ba:7d:10:90:92: b4:85:9a:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RUZFRTExMC8GA1UEBRMoMzE0MkExQTg2MUQ5QTQ0QTkzMjdGMDY2MTlGRUM4QTZB OTYyQjQyMzAeFw0yNTEyMjMwNjM3MTZaFw0yNTEyMzAwNjM3MTZaMBgxFjAUBgNV BAMMDTY5NGEzODlkLWUzZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCicWVJhJlF5oB/3PyW/GgLXDm/kBKZRC1h7jOmXRirxSwdtB50gCIjqYC0h36 r0r5ovVe7b/PmeGd/ytYvS1CohRqsbLQGFS3ACVvmyoYN/a0mdUKQeI2SfRRYGAq 6BM9Dhc7Y6KxsjnXurLQlwnJokDBgA6pYIqYaO1PqtoFF8z2kSi1/UOoXaFJjJnG Ntk7Qf9lKDx+NkQLXOB15NUkeYvoLcSe7bCkHe7bzj0hyLHz9bWvoXMZsc6UZRPI cwrsXWhZawnytTgoN8fFy1LfW42+5XYNyl9QboNqtwhO3tw5g3bB+X+ZZpnC5SSj eR/M2a5FyDtxAZA3hjF0vTdzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV1/b2V1I uqVb66p16fDOeYNFQd8wHwYDVR0jBBgwFoAUMUKhqGHZpEqTJ/BmGf7IpqlitCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFRkVFLzBGOUU5MUY4QjNE MTExRjA4NkMyMkQ1QUM0RjlBRTAyL01VS2hxR0hacEVxVEpfQm1HZjdJcHFsaXRD TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVVLaHFHSFpwRXFUSl9CbUdmN0lwcWxpdENNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF RkVFLzBGOUU5MUY4QjNEMTExRjA4NkMyMkQ1QUM0RjlBRTAyL01VS2hxR0hacEVx VEpfQm1HZjdJcHFsaXRDTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOFs1pzJTi8OhguXbRuHQRJv7MUdoJ/zZq+1H3khF47RLSeF+4dAz15 nuptqCPd40znXjqKwy/s1+41p+7XFmk8JyVWoedWna9YapRcnZDD9uCZBY9gWa2L OCHpZre9aUge3UQOC43rvgnZvXV65/xaL9c2rYe+exX3++9o0GMQgrvYUIJhpRlT /ArrZFsY3MK62wNzMFi/UIJOt1RhWiFERitNzMFQ5LhN7dE1iwnGPdYOXjfmqWNo 7bT1PXWJ3564btmrkyJpWt/mVfvB7CjtC3jt+u5FL/FsYMXixmn/EySbVK0PZA7a QOHhj1nddpj2tujY8IS6fRCQkrSFmkM= -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:11 2025 by rpki-client