This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: zBw9AjKNCQlqmpOJk7Q5rekpMphxV225WdKoki0wQQY= Subject key identifier: 87:C7:08:53:7B:18:C7:AA:C0:17:2F:1D:23:55:0D:BE:FD:69:96:A1 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 28 Signing time: Tue 02 Dec 2025 22:33:18 +0000 Manifest this update: Tue 02 Dec 2025 22:33:18 +0000 Manifest next update: Tue 09 Dec 2025 22:33:18 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: kqQ6PHrXeC1PY0RHaLPRJjQnUXGR0dHES4nbmIv2hVA=) 2: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: Yq/6jVPQzAm5hgRP7rXQoplDCQWlPs9QKDxMJ3MAfy8=) 3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: U7Bt5g8XtBArxtex2r2qjcE8yon03irN5KZgG3SqjtY=) 4: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: UyaIPOR5BtYKD7ht1J5Z5vKBp3WQiWRuvIXcjTfMuds=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: SMOUlqbPMt2kafk5s8X5CGmsl0wmXm2GKsiELLusKwQ=) 6: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: y8ARtlnKOFD/ZdcLD/y5W8SXczj42QeGDvwDvopZPC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Dec 2 22:33:18 2025 GMT Not After : Dec 9 22:33:18 2025 GMT Subject: CN=692f692e-fe0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:ac:65:df:28:1e:fb:0a:15:12:54:c4:3e: 8a:95:cc:c1:dd:01:f5:b6:d6:64:19:27:e8:fa:14: 47:0b:27:dc:df:0b:4c:1a:9a:82:8a:97:8f:bc:b1: b1:16:77:7e:9d:63:6c:3d:76:d4:06:31:86:48:18: 81:17:37:be:03:a6:54:bc:db:95:9f:4a:ce:da:0a: fa:2a:f9:2a:64:59:ab:83:5e:26:80:5d:e2:84:8a: cd:55:04:58:1a:33:40:18:da:f2:09:78:9b:f4:51: 29:4a:a8:19:82:c9:72:6c:47:ca:1d:09:cf:a9:63: ca:80:9f:c3:b8:01:f7:ff:51:36:64:81:56:b3:b3: b1:c6:ab:06:d0:23:50:db:1b:82:10:e9:d9:eb:44: 39:9e:bc:05:fd:37:e6:7e:40:df:c6:c9:55:c4:5b: 19:fa:eb:55:fa:37:a2:53:72:26:f7:3c:61:28:d1: 17:d6:4a:95:f4:94:0c:aa:cd:a7:79:0d:aa:14:fc: fb:6c:d7:d7:25:3d:a7:76:ce:11:70:fd:28:64:d3: ca:e6:42:21:29:99:14:d4:b1:47:01:57:45:10:ca: b0:21:5d:da:ec:c3:10:bf:b8:da:a8:88:01:79:6f: 2f:45:75:1f:a4:6f:c1:03:84:c6:f4:a9:57:6c:a7: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:08:53:7B:18:C7:AA:C0:17:2F:1D:23:55:0D:BE:FD:69:96:A1 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:46:d1:9f:8b:a7:f1:3e:2f:b0:f9:62:0c:35:c2:b5:2b:e7: ba:58:9b:15:d8:ce:79:a0:ca:f8:53:5f:54:3a:7b:09:7b:76: 74:37:f3:cb:e5:99:fa:55:af:7d:6e:92:3e:30:57:1d:56:be: ef:91:d3:02:ed:81:55:ad:23:b3:85:83:0f:26:35:32:3d:3e: 3a:95:9c:f8:f9:8d:10:9d:98:18:34:dd:09:0a:ea:12:27:ce: a1:f0:6f:1b:fd:b3:f0:5c:76:23:c5:6b:a7:5c:b1:28:0f:d8: 55:58:1b:65:9d:02:39:18:96:8e:03:18:a8:82:5d:e9:05:53: ee:e6:74:4b:ec:35:51:21:d8:41:24:f6:fc:17:e5:fd:5e:c6: b0:da:7e:95:9c:06:ec:97:fb:0e:f1:b9:4d:69:64:d8:f6:7f: 07:d4:e6:5c:24:4c:ff:0b:a5:71:51:2d:66:74:4d:29:26:ec: 94:5e:11:8f:ee:ba:47:0c:38:d4:96:b9:10:b2:0e:1d:21:49: b0:bf:2e:a2:f1:59:49:ca:9c:9a:f4:ce:51:ad:87:40:e2:49: 92:99:0b:2b:97:39:8b:da:83:4f:af:46:fe:a6:b0:17:71:44: b3:7d:34:83:8f:1f:e9:9a:85:13:a0:79:bd:d8:2f:82:0b:20: f7:90:20:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTEyMDIyMjMzMThaFw0yNTEyMDkyMjMzMThaMBgxFjAUBgNV BAMTDTY5MmY2OTJlLWZlMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaTKxl3yge+woVElTEPoqVzMHdAfW21mQZJ+j6FEcLJ9zfC0wamoKKl4+8sbEW d36dY2w9dtQGMYZIGIEXN74DplS825WfSs7aCvoq+SpkWauDXiaAXeKEis1VBFga M0AY2vIJeJv0USlKqBmCyXJsR8odCc+pY8qAn8O4Aff/UTZkgVazs7HGqwbQI1Db G4IQ6dnrRDmevAX9N+Z+QN/GyVXEWxn661X6N6JTcib3PGEo0RfWSpX0lAyqzad5 DaoU/Pts19clPad2zhFw/Shk08rmQiEpmRTUsUcBV0UQyrAhXdrswxC/uNqoiAF5 by9FdR+kb8EDhMb0qVdsp0NvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh8cIU3sY x6rAFy8dI1UNvv1plqEwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzli UTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1G0Z+Lp/E+L7D5Ygw1wrUr57pYmxXYznmgyvhTX1Q6ewl7dnQ388vl mfpVr31ukj4wVx1Wvu+R0wLtgVWtI7OFgw8mNTI9PjqVnPj5jRCdmBg03QkK6hIn zqHwbxv9s/BcdiPFa6dcsSgP2FVYG2WdAjkYlo4DGKiCXekFU+7mdEvsNVEh2EEk 9vwX5f1exrDafpWcBuyX+w7xuU1pZNj2fwfU5lwkTP8LpXFRLWZ0TSkm7JReEY/u ukcMONSWuRCyDh0hSbC/LqLxWUnKnJr0zlGth0DiSZKZCyuXOYvag0+vRv6msBdx RLN9NIOPH+mahROgeb3YL4ILIPeQIJY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:38 2025 by rpki-client