This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: BALLqAhVCjpAPsYlIt47/3y/LeDSDkzCSsujmaXYXeU= Subject key identifier: B1:DD:93:85:F9:92:DA:09:07:BC:23:B0:C2:E0:8C:59:09:E1:3B:02 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2164 Signing time: Mon 22 Dec 2025 15:44:34 +0000 Manifest this update: Mon 22 Dec 2025 15:44:33 +0000 Manifest next update: Mon 29 Dec 2025 15:44:33 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: 604+NOBaBGkhNATQXQ32mzr/dcd0M9iFDSWefX7QR/Q=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8560 (0x2170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Dec 22 15:44:33 2025 GMT Not After : Dec 29 15:44:33 2025 GMT Subject: CN=69496762-d112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:34:67:71:d1:38:e2:c7:d4:88:e3:3d:e8: dc:69:75:94:8e:c4:23:4d:b6:5a:14:cf:8d:bb:38: 85:e5:b6:ed:2a:b4:0e:09:7e:32:07:fd:13:9b:ac: ab:80:1e:35:b6:1b:33:25:b6:5f:91:09:53:a1:75: dd:15:77:fd:f7:7e:df:24:f1:57:9b:5d:c6:f4:50: 2d:25:25:6e:23:e9:1d:ec:b3:64:24:9f:01:20:71: 0b:46:a0:83:03:1e:5a:b6:4b:cf:51:3c:78:02:68: 9b:42:37:4a:81:b2:a3:74:b8:eb:25:86:8c:52:2d: 4f:98:fb:22:eb:ea:68:69:10:4f:2e:b9:18:47:fb: 2f:7c:da:0f:2d:f1:5f:36:89:65:af:54:a8:d1:69: 98:af:56:e4:1b:6e:d2:1a:4f:24:b6:59:de:01:e6: cf:cb:7c:df:da:86:9a:44:66:d1:f3:39:84:0d:fa: ca:3d:64:cc:83:f7:67:03:d2:64:c3:fb:d1:f9:1f: f5:60:6b:ba:86:0f:ba:3f:ee:ea:13:27:d4:cc:eb: 7a:a7:44:c6:92:79:43:57:68:b4:27:2b:6c:5f:0f: b0:9e:78:3a:14:ee:b2:5b:3e:d6:f3:fb:00:71:37: 35:53:b4:3b:de:61:48:e4:55:6d:1f:ca:ee:4c:f3: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DD:93:85:F9:92:DA:09:07:BC:23:B0:C2:E0:8C:59:09:E1:3B:02 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1b:1a:04:9a:b4:4c:82:43:20:f8:71:6a:a2:b7:1c:57:88: 3e:b6:36:0c:98:cd:94:1a:fe:1b:d2:aa:a8:cd:52:8a:7e:3e: 2a:36:d6:1b:7b:82:a9:57:3e:7f:82:bd:6f:f8:c5:4c:c8:78: 41:78:84:8a:30:07:dc:54:33:c0:28:0c:aa:4b:c9:12:5d:03: d0:8a:06:31:25:69:a9:4f:98:63:32:20:76:e6:41:06:ca:3a: 40:82:5d:93:31:c2:20:2a:8b:13:fb:83:01:80:25:81:12:c0: df:e6:1d:eb:ca:f1:f2:30:18:3e:b6:7e:1c:5b:0d:c2:20:f5: 4d:ea:ca:31:ec:ad:36:8b:d7:5b:8b:09:a1:ba:56:b3:9f:8e: 8d:77:7b:9b:25:53:be:94:43:ad:85:bb:89:22:b9:4e:65:02: c5:62:22:5e:cd:6f:2e:b6:69:09:17:75:ba:c9:df:da:86:21: 04:e4:95:7e:59:fb:51:03:c3:34:a2:be:11:e5:a7:b4:9b:af: 6f:5e:3c:75:bd:21:c7:a3:13:20:9d:9e:5b:ca:b1:df:b8:82: 5d:bb:77:81:4e:99:58:ef:92:20:3a:9f:84:7c:98:0d:ad:13: 97:4e:1e:a1:bc:2e:bf:0e:39:c1:3a:d2:1e:5f:27:11:67:9d: 17:61:13:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUxMjIyMTU0NDMzWhcNMjUxMjI5MTU0NDMzWjAYMRYwFAYD VQQDDA02OTQ5Njc2Mi1kMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj6k0Z3HROOLH1IjjPejcaXWUjsQjTbZaFM+NuziF5bbtKrQOCX4yB/0Tm6yr gB41thszJbZfkQlToXXdFXf9937fJPFXm13G9FAtJSVuI+kd7LNkJJ8BIHELRqCD Ax5atkvPUTx4AmibQjdKgbKjdLjrJYaMUi1PmPsi6+poaRBPLrkYR/svfNoPLfFf Nollr1So0WmYr1bkG27SGk8ktlneAebPy3zf2oaaRGbR8zmEDfrKPWTMg/dnA9Jk w/vR+R/1YGu6hg+6P+7qEyfUzOt6p0TGknlDV2i0JytsXw+wnng6FO6yWz7W8/sA cTc1U7Q73mFI5FVtH8ruTPOvYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHdk4X5 ktoJB7wjsMLgjFkJ4TsCMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGGxoEmrRMgkMg+HFqorccV4g+tjYMmM2UGv4b0qqozVKKfj4qNtYb e4KpVz5/gr1v+MVMyHhBeISKMAfcVDPAKAyqS8kSXQPQigYxJWmpT5hjMiB25kEG yjpAgl2TMcIgKosT+4MBgCWBEsDf5h3ryvHyMBg+tn4cWw3CIPVN6sox7K02i9db iwmhulazn46Nd3ubJVO+lEOthbuJIrlOZQLFYiJezW8utmkJF3W6yd/ahiEE5JV+ WftRA8M0or4R5ae0m69vXjx1vSHHoxMgnZ5byrHfuIJdu3eBTplY75IgOp+EfJgN rROXTh6hvC6/DjnBOtIeXycRZ50XYRPW -----END CERTIFICATE-----Generated at Tue Dec 23 16:30:34 2025 by rpki-client