This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: vcia27RYmbZUfaIPZ2pN7bciC/kRScPftlDhWvlrMVo= Subject key identifier: 11:18:8A:89:6B:FC:AD:33:57:C8:EB:64:AD:9C:C9:1F:01:BC:2A:E2 Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: F3 Signing time: Sun 07 Dec 2025 03:33:53 +0000 Manifest this update: Sun 07 Dec 2025 03:33:52 +0000 Manifest next update: Sun 14 Dec 2025 03:33:52 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 12ewftbqpByViadl29IyGIvQLzVxow3OpvXYFFgnU6s=) 2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Dec 7 03:33:52 2025 GMT Not After : Dec 14 03:33:52 2025 GMT Subject: CN=6934f5a1-b63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:0d:79:95:e2:c4:7d:c1:6a:5f:ec:f0:95: c9:de:db:cd:9e:f3:e3:46:95:48:c4:5a:5f:63:69: cd:e9:b1:48:a2:aa:90:28:53:84:46:a9:f4:72:f4: e4:8e:65:1a:90:e7:e0:c2:a0:e3:1d:64:b0:3c:67: f6:15:9f:ba:0d:59:dc:6d:1d:ba:a8:d6:ef:4f:f7: 62:04:f8:94:53:cc:9e:45:bc:79:6c:7b:6b:18:12: 32:40:ea:73:f0:06:26:3e:d3:d4:2e:fd:bf:ee:03: 93:c8:39:47:6d:ce:2c:0a:ea:f5:49:88:a6:b6:7d: d3:a4:3e:ed:1d:c6:85:35:ae:2f:5e:73:b8:42:b2: da:17:ab:33:a0:1e:4a:2a:d3:a4:0d:b3:c7:75:45: 8b:2e:0e:98:55:2e:a6:f9:ac:64:6a:c6:9f:56:5e: d9:a5:1e:3e:6e:78:92:f5:df:18:90:99:61:07:57: ea:fd:e4:3c:8b:55:8d:98:4a:b0:a8:53:b1:64:06: 3c:7d:46:02:c3:74:62:96:e1:21:67:69:ff:8d:77: 92:f8:40:48:a8:62:60:88:d6:68:cc:8d:42:a4:37: 06:b4:e1:fa:d0:90:3c:b1:7f:a9:11:54:fe:d7:98: c7:d8:67:c8:d8:32:7d:d3:3d:f7:68:8a:f5:ac:e6: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:18:8A:89:6B:FC:AD:33:57:C8:EB:64:AD:9C:C9:1F:01:BC:2A:E2 X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:32:9e:56:2f:2f:54:50:ae:50:18:cd:97:18:58:ce:a1:e8: e6:be:87:4d:57:3b:0f:70:02:94:49:b4:ca:21:d1:e3:3c:3b: 8c:d4:4d:54:b9:8b:3e:4a:74:6a:b9:f4:27:26:f0:d8:2e:3e: 58:d6:fa:1f:0e:d7:98:94:4c:38:29:b1:67:96:60:4b:5e:a0: 8d:2a:f9:5a:50:d1:53:7a:d5:63:63:45:b5:28:6d:5b:c8:07: 23:27:89:0e:61:62:f1:27:e4:db:d5:b0:63:59:a6:28:cd:bd: a8:8f:8d:50:e9:5d:f2:ca:b2:c3:e5:21:ba:6e:94:54:87:7c: 15:c8:36:f8:c5:e1:73:8d:bb:e3:a4:a8:ca:67:81:07:d9:a2: 99:7c:3e:99:f2:a8:e7:de:4a:21:22:93:2a:f7:06:ed:99:0c: e7:ea:a5:d4:47:20:c1:88:4f:7b:aa:07:86:01:4e:02:57:7d: 0e:c3:9d:4a:96:3f:e1:31:f0:a1:ae:14:ee:92:b6:98:23:06: 6c:78:85:6a:e6:3c:11:dd:cc:a9:6c:36:33:81:c9:e5:dd:24: 9e:0a:00:36:4f:77:4e:eb:b8:44:56:19:d8:4f:d0:fd:43:e5: e3:67:09:a7:db:68:ea:93:1e:fc:db:c9:56:9b:9b:2d:89:77: 8f:2a:0c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUxMjA3MDMzMzUyWhcNMjUxMjE0MDMzMzUyWjAYMRYwFAYD VQQDEw02OTM0ZjVhMS1iNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEoNeZXixH3Bal/s8JXJ3tvNnvPjRpVIxFpfY2nN6bFIoqqQKFOERqn0cvTk jmUakOfgwqDjHWSwPGf2FZ+6DVncbR26qNbvT/diBPiUU8yeRbx5bHtrGBIyQOpz 8AYmPtPULv2/7gOTyDlHbc4sCur1SYimtn3TpD7tHcaFNa4vXnO4QrLaF6szoB5K KtOkDbPHdUWLLg6YVS6m+axkasafVl7ZpR4+bniS9d8YkJlhB1fq/eQ8i1WNmEqw qFOxZAY8fUYCw3RiluEhZ2n/jXeS+EBIqGJgiNZozI1CpDcGtOH60JA8sX+pEVT+ 15jH2GfI2DJ90z33aIr1rOabbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEYiolr /K0zV8jrZK2cyR8BvCriMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeMp5WLy9UUK5QGM2XGFjOoejmvodNVzsPcAKUSbTKIdHjPDuM1E1U uYs+SnRqufQnJvDYLj5Y1vofDteYlEw4KbFnlmBLXqCNKvlaUNFTetVjY0W1KG1b yAcjJ4kOYWLxJ+Tb1bBjWaYozb2oj41Q6V3yyrLD5SG6bpRUh3wVyDb4xeFzjbvj pKjKZ4EH2aKZfD6Z8qjn3kohIpMq9wbtmQzn6qXURyDBiE97qgeGAU4CV30Ow51K lj/hMfChrhTukraYIwZseIVq5jwR3cypbDYzgcnl3SSeCgA2T3dO67hEVhnYT9D9 Q+XjZwmn22jqkx7828lWm5stiXePKgwn -----END CERTIFICATE-----Generated at Mon Dec 8 06:10:42 2025 by rpki-client