This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: CAC5zDJbASOxvFOAy8Yne1IpQEV2JddHVwy1RUiVMSk= Subject key identifier: FD:29:34:4E:E4:4E:1C:E9:A9:09:82:A0:90:22:9B:21:62:63:03:99 Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 197D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 1972 Signing time: Mon 22 Dec 2025 16:10:14 +0000 Manifest this update: Mon 22 Dec 2025 16:10:13 +0000 Manifest next update: Mon 29 Dec 2025 16:10:13 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: iUXISthu9Y1bpOcfd0tCAqYUsxwta2jaAx08UbeBQDg=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: E6UpldRotsggXgn0nl1/UsRHEfM+J1lVtu1dNLHwKlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6525 (0x197d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: Dec 22 16:10:13 2025 GMT Not After : Dec 29 16:10:13 2025 GMT Subject: CN=69496d66-0451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:15:b1:e6:b5:52:8c:e3:b7:68:ea:1f:a0: 13:72:90:89:4b:3b:e8:9e:80:cc:a5:2a:46:75:3f: eb:6f:11:9d:29:37:6b:f3:2b:f0:6f:74:9d:a3:fe: 40:16:0f:0d:e1:83:64:0e:c8:2a:cf:56:72:16:3b: 75:90:75:c0:84:02:a4:13:0f:2b:df:90:ad:db:9f: 8b:ee:d4:70:70:ec:05:62:ba:32:35:4d:54:f7:92: 56:ec:3a:fd:6c:01:cf:45:42:5d:cd:3b:aa:ba:61: fc:82:24:f4:fc:e7:d6:d4:fb:19:86:7c:a8:00:83: cc:9c:b8:40:a9:ed:a7:4b:d0:9e:c1:2c:8d:29:98: 19:f0:0d:f5:c2:2a:1b:22:47:55:ba:87:d6:88:da: 73:93:35:bc:a6:e0:4d:02:d2:98:ba:be:75:95:fc: b7:1f:88:16:df:c3:3d:61:a9:ec:1e:9d:7e:7c:9f: 6e:93:67:9b:3b:45:c3:48:b8:cd:de:92:92:3b:67: 72:06:8e:2a:e5:b9:8e:50:dc:82:e6:90:13:d5:40: e2:b5:21:c8:aa:48:0d:25:2f:1f:5e:28:82:2e:bb: 77:85:85:73:9a:84:a5:d8:17:8b:44:0b:49:9a:78: 7c:ea:5e:ae:28:8e:7d:5d:e7:46:9a:b3:e4:c3:a5: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:34:4E:E4:4E:1C:E9:A9:09:82:A0:90:22:9B:21:62:63:03:99 X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:dd:f6:07:32:18:bf:dd:ff:e9:3a:89:0a:26:b6:95:0f:fe: c4:af:42:62:b7:5b:03:09:74:ab:7b:20:38:25:c3:70:c2:40: 70:d1:12:91:38:cb:65:61:5c:55:79:c6:62:fe:92:f0:72:24: a9:48:e0:ed:fc:28:d8:ce:63:34:6f:1d:2a:7a:59:b8:52:60: f2:3b:c1:1e:df:ef:83:f5:b3:46:c2:75:04:bc:16:a2:08:a9: 8b:c0:e5:d1:0b:94:ba:06:a4:30:de:b2:4b:01:89:ec:de:98: e5:e7:c3:77:34:14:0c:4f:50:ff:e3:fc:84:40:c7:49:62:b4: 3b:b5:eb:3b:86:1b:ae:75:90:ec:4d:e6:76:48:07:6f:5f:3d: 03:58:5a:22:6c:f9:1f:1a:da:6f:17:06:e5:b2:a1:c7:04:79: c4:6f:a7:be:62:27:36:6a:5b:bd:3f:9a:6a:5b:0b:50:78:bd: d3:ae:e9:0b:13:9e:9f:90:f5:9d:e8:f7:d1:1e:f6:76:f6:d3: 2e:cc:c9:e8:6d:f3:fc:cf:5e:bf:fe:06:e0:84:25:87:b9:b3: 3a:c4:e0:36:7d:0f:be:ff:3d:78:6e:18:84:6c:ec:87:a7:4a: c7:a4:eb:a4:0a:17:b3:a3:ab:81:18:25:cc:76:45:36:31:08: 6c:56:dc:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjUxMjIyMTYxMDEzWhcNMjUxMjI5MTYxMDEzWjAYMRYwFAYD VQQDDA02OTQ5NmQ2Ni0wNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmoVsea1Uozjt2jqH6ATcpCJSzvonoDMpSpGdT/rbxGdKTdr8yvwb3Sdo/5A Fg8N4YNkDsgqz1ZyFjt1kHXAhAKkEw8r35Ct25+L7tRwcOwFYroyNU1U95JW7Dr9 bAHPRUJdzTuqumH8giT0/OfW1PsZhnyoAIPMnLhAqe2nS9CewSyNKZgZ8A31wiob IkdVuofWiNpzkzW8puBNAtKYur51lfy3H4gW38M9YansHp1+fJ9uk2ebO0XDSLjN 3pKSO2dyBo4q5bmOUNyC5pAT1UDitSHIqkgNJS8fXiiCLrt3hYVzmoSl2BeLRAtJ mnh86l6uKI59XedGmrPkw6W40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0pNE7k ThzpqQmCoJAimyFiYwOZMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq3fYHMhi/3f/pOokKJraVD/7Er0Jit1sDCXSreyA4JcNwwkBw0RKR OMtlYVxVecZi/pLwciSpSODt/CjYzmM0bx0qelm4UmDyO8Ee3++D9bNGwnUEvBai CKmLwOXRC5S6BqQw3rJLAYns3pjl58N3NBQMT1D/4/yEQMdJYrQ7tes7hhuudZDs TeZ2SAdvXz0DWFoibPkfGtpvFwblsqHHBHnEb6e+Yic2alu9P5pqWwtQeL3TrukL E56fkPWd6PfRHvZ29tMuzMnobfP8z16//gbghCWHubM6xOA2fQ++/z14bhiEbOyH p0rHpOukChezo6uBGCXMdkU2MQhsVtxZ -----END CERTIFICATE-----Generated at Mon Dec 22 22:33:39 2025 by rpki-client