This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: jT8JwLuc8xNy5L+cwLulf+Nj66TucrjK1ZqhE/Le1+U= Subject key identifier: 94:AF:29:6C:74:51:B8:76:FD:6C:F6:83:66:F5:C7:DC:15:73:3D:C9 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 350F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 3500 Signing time: Thu 18 Dec 2025 14:42:09 +0000 Manifest this update: Thu 18 Dec 2025 14:42:08 +0000 Manifest next update: Thu 25 Dec 2025 14:42:08 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: 1c8Mg0fPHBtBBki4yCaIC08XnCkCTHb//AFi9jQvD4k=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: gFJk3bH7mXlCaj14z9kV9xuGKxMKaTna9ngpZWUJXOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13583 (0x350f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Dec 18 14:42:08 2025 GMT Not After : Dec 25 14:42:08 2025 GMT Subject: CN=694412c1-6e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:a4:d9:1a:be:5a:2d:e1:da:8e:15:7d:1b: 79:4c:ce:87:ad:2d:14:32:68:58:51:9d:c7:d7:13: 8c:59:82:3f:b0:72:99:1a:70:c2:7c:bd:b1:84:b6: 5c:12:96:26:f5:58:81:b0:11:40:a6:c5:76:67:92: 20:9d:32:b9:da:42:6c:02:be:29:8c:1c:28:8d:43: 55:59:59:78:0b:48:a3:77:cb:18:8e:c7:12:20:fc: c1:82:7c:ff:32:34:d0:7b:7e:35:a4:b3:2a:ea:91: 89:fe:71:7c:98:78:5f:00:13:30:79:f8:41:b5:a3: 16:23:28:c7:2b:91:17:f4:4e:08:af:e1:b5:ec:eb: 68:80:f1:f9:e1:02:29:5d:71:cb:1e:8f:69:82:70: 4a:7d:18:26:78:40:4d:a1:cf:6e:1f:c1:da:31:d8: 79:08:83:96:71:a9:c1:b1:76:79:8c:bf:2d:0f:2f: eb:54:c1:33:09:9e:6c:43:47:f0:aa:8e:59:73:1f: 9f:a8:3b:d2:a3:95:97:17:58:e0:cb:f2:5e:be:1e: 53:c0:70:3c:77:8c:ce:b0:11:27:47:8d:d3:06:96: e9:de:60:b0:f1:c1:91:fe:f3:9a:39:63:85:9f:b4: 26:c9:81:0b:da:b5:d8:21:6e:47:75:fb:77:17:99: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AF:29:6C:74:51:B8:76:FD:6C:F6:83:66:F5:C7:DC:15:73:3D:C9 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e3:cc:1a:55:0f:25:e5:10:3d:86:8b:e6:a9:5c:97:b9:21: a7:93:09:de:49:62:5e:0f:b1:49:ed:e9:19:0f:de:5a:98:a2: a2:8d:5a:77:74:8c:0d:57:7b:89:cc:7c:9f:74:5c:da:53:56: b8:67:cc:35:aa:92:db:7a:ec:4f:54:1c:3a:8c:05:49:12:29: da:b7:6f:49:43:4e:a1:1e:b0:dc:26:d3:4b:80:32:80:8d:ea: 94:17:92:a3:3b:2e:90:dd:f5:12:15:72:c2:40:63:08:b1:36: e3:cd:ac:80:e9:4c:3a:7f:38:56:59:51:69:9b:49:4d:d3:a9: a8:d0:d6:36:66:b2:8e:a0:8e:81:49:42:a4:20:62:ad:db:f9: ff:0e:d3:5e:d2:18:52:ab:b4:9b:70:d2:b1:c4:5a:0f:aa:54: e2:f2:5e:c7:a4:3c:d1:37:31:87:6e:97:5d:10:e3:9f:94:42: cf:86:0d:9d:fa:51:88:20:c0:f7:12:4a:2c:f3:78:1c:83:c5: 3d:e9:00:c3:56:d8:8c:77:27:4c:da:08:3f:de:83:84:01:e3: 25:18:6a:10:85:38:e5:0e:45:dd:ea:a4:a4:d6:5a:51:2d:d7: 23:27:c2:78:db:cf:82:2f:49:ef:da:91:d5:60:c5:e8:12:f4: b5:a5:29:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUxMjE4MTQ0MjA4WhcNMjUxMjI1MTQ0MjA4WjAYMRYwFAYD VQQDDA02OTQ0MTJjMS02ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk+k2Rq+Wi3h2o4VfRt5TM6HrS0UMmhYUZ3H1xOMWYI/sHKZGnDCfL2xhLZc EpYm9ViBsBFApsV2Z5IgnTK52kJsAr4pjBwojUNVWVl4C0ijd8sYjscSIPzBgnz/ MjTQe341pLMq6pGJ/nF8mHhfABMwefhBtaMWIyjHK5EX9E4Ir+G17OtogPH54QIp XXHLHo9pgnBKfRgmeEBNoc9uH8HaMdh5CIOWcanBsXZ5jL8tDy/rVMEzCZ5sQ0fw qo5Zcx+fqDvSo5WXF1jgy/Jevh5TwHA8d4zOsBEnR43TBpbp3mCw8cGR/vOaOWOF n7QmyYEL2rXYIW5Hdft3F5mrZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSvKWx0 Ubh2/Wz2g2b1x9wVcz3JMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY48waVQ8l5RA9hovmqVyXuSGnkwneSWJeD7FJ7ekZD95amKKijVp3 dIwNV3uJzHyfdFzaU1a4Z8w1qpLbeuxPVBw6jAVJEinat29JQ06hHrDcJtNLgDKA jeqUF5KjOy6Q3fUSFXLCQGMIsTbjzayA6Uw6fzhWWVFpm0lN06mo0NY2ZrKOoI6B SUKkIGKt2/n/DtNe0hhSq7SbcNKxxFoPqlTi8l7HpDzRNzGHbpddEOOflELPhg2d +lGIIMD3Ekos83gcg8U96QDDVtiMdydM2gg/3oOEAeMlGGoQhTjlDkXd6qSk1lpR LdcjJ8J428+CL0nv2pHVYMXoEvS1pSlt -----END CERTIFICATE-----Generated at Fri Dec 19 04:22:09 2025 by rpki-client