This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: DCi5Fzs82S/4Zo354CdR9HhHjO4qpQDKx3bL7Us/nos= Subject key identifier: D6:B4:4D:DC:45:79:E8:75:9B:A4:FD:9F:5D:AA:83:67:60:50:9F:4B Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 1021 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 1008 Signing time: Sat 06 Dec 2025 16:57:09 +0000 Manifest this update: Sat 06 Dec 2025 16:57:08 +0000 Manifest next update: Sat 13 Dec 2025 16:57:08 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: DbBz4Xeiw7DOwWKeCYfbCJ+SCRKg6c9YZzDhzDiPwL0=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) 5: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nmmwbRgeg6x+DwLWt0s6OMWtS0zyAxCJ4V/dXBc7nRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4129 (0x1021) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Dec 6 16:57:08 2025 GMT Not After : Dec 13 16:57:08 2025 GMT Subject: CN=69346064-3b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:ae:9e:1a:60:54:ff:91:43:3e:86:06:e3: c8:10:aa:e3:e9:95:ef:d9:c2:89:00:f5:46:5e:d5: 78:bb:31:9e:ab:1f:e2:d1:8d:22:f7:6c:7f:3c:5a: a7:4f:6f:de:0d:b9:4e:be:39:37:9e:26:b1:f7:70: 3a:46:aa:bd:4b:68:f8:a8:81:f2:84:87:b7:4d:c2: 5e:ab:3f:4a:1c:3e:59:d9:34:a6:fa:67:6e:eb:cf: ec:fa:2b:33:cc:93:13:41:3b:1f:d2:87:84:ec:77: c7:0a:c6:2e:a0:fc:6d:c7:1c:b6:18:b6:e6:a8:30: 23:5f:a8:a6:fc:b4:b2:84:4d:2a:2d:44:01:88:1a: 95:6e:a0:06:4a:43:81:c7:71:d0:5c:e7:4a:ea:17: 67:7d:18:70:1d:05:3e:54:c2:12:af:a0:f5:5c:31: 92:02:b2:66:b4:52:ed:11:e9:d8:cf:5b:09:de:82: 38:0b:56:3c:98:42:39:93:49:4c:b8:42:13:3a:1b: 6b:d9:3c:8c:1f:0c:d7:f1:98:6d:22:70:7f:43:3f: 61:a3:cf:0e:49:7f:ee:25:14:1f:7b:bf:0d:fe:b6: 46:d3:74:34:6c:20:da:16:b7:7e:42:57:d3:69:57: 74:19:ef:cc:31:45:dd:af:07:cf:95:61:0d:08:9e: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B4:4D:DC:45:79:E8:75:9B:A4:FD:9F:5D:AA:83:67:60:50:9F:4B X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:84:7b:00:96:e9:90:84:ec:e0:1a:10:68:f2:56:81:2c:bc: 1b:3b:bb:83:b9:84:65:ee:5a:ed:31:68:09:e1:90:10:25:59: 1f:bc:29:43:82:bc:c6:c9:19:ff:d3:19:18:12:ff:6a:ba:1e: 92:6a:33:7d:7d:23:30:13:49:ff:74:8d:0f:80:dc:a7:c4:09: 24:b4:aa:78:a6:4c:0a:c9:a0:ee:d5:50:b5:42:dc:63:47:1b: 91:4b:e0:9a:e8:c8:3d:17:7d:0c:6e:35:87:ef:13:75:4a:3e: 83:32:5d:05:37:33:b3:a5:bc:12:77:21:41:1d:34:06:d4:fb: 1e:89:bc:bb:ce:4e:5c:62:8a:0c:30:fb:5f:cb:7d:62:2e:74: ce:2b:b3:f6:f5:60:3b:e0:00:d5:8f:d2:71:66:ce:e3:38:e7: 78:a6:18:2c:1c:61:a2:b3:11:b6:ac:97:d9:59:b5:b3:c8:2e: a9:55:e2:e9:fb:1e:9a:d4:58:fd:f8:a7:d8:52:9c:45:b0:e5: 90:83:92:3b:45:24:b2:f9:72:8a:88:dd:ae:28:d1:07:9f:44: 28:04:c6:2f:db:f3:85:e4:a5:01:42:9f:f2:96:91:9c:1b:fa: 99:a2:73:0c:d8:17:25:86:69:34:51:3a:c0:dc:3f:1c:35:1e: 3d:25:0a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUxMjA2MTY1NzA4WhcNMjUxMjEzMTY1NzA4WjAYMRYwFAYD VQQDEw02OTM0NjA2NC0zYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYWunhpgVP+RQz6GBuPIEKrj6ZXv2cKJAPVGXtV4uzGeqx/i0Y0i92x/PFqn T2/eDblOvjk3niax93A6Rqq9S2j4qIHyhIe3TcJeqz9KHD5Z2TSm+mdu68/s+isz zJMTQTsf0oeE7HfHCsYuoPxtxxy2GLbmqDAjX6im/LSyhE0qLUQBiBqVbqAGSkOB x3HQXOdK6hdnfRhwHQU+VMISr6D1XDGSArJmtFLtEenYz1sJ3oI4C1Y8mEI5k0lM uEITOhtr2TyMHwzX8ZhtInB/Qz9ho88OSX/uJRQfe78N/rZG03Q0bCDaFrd+QlfT aVd0Ge/MMUXdrwfPlWENCJ5axQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa0TdxF eeh1m6T9n12qg2dgUJ9LMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhHsAlumQhOzgGhBo8laBLLwbO7uDuYRl7lrtMWgJ4ZAQJVkfvClD grzGyRn/0xkYEv9quh6SajN9fSMwE0n/dI0PgNynxAkktKp4pkwKyaDu1VC1Qtxj RxuRS+Ca6Mg9F30MbjWH7xN1Sj6DMl0FNzOzpbwSdyFBHTQG1Pseiby7zk5cYooM MPtfy31iLnTOK7P29WA74ADVj9JxZs7jOOd4phgsHGGisxG2rJfZWbWzyC6pVeLp +x6a1Fj9+KfYUpxFsOWQg5I7RSSy+XKKiN2uKNEHn0QoBMYv2/OF5KUBQp/ylpGc G/qZonMM2Bclhmk0UTrA3D8cNR49JQrn -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:59 2025 by rpki-client