This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: pyftFxqMmnYxAHiZJJ1qJgHmoJAT88PDEMQEr+W9HOg= Subject key identifier: F9:42:7C:2A:25:B1:BA:23:91:DA:E6:50:61:F9:62:C7:5F:D6:A0:36 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C86 Signing time: Wed 10 Dec 2025 17:46:31 +0000 Manifest this update: Wed 10 Dec 2025 17:46:31 +0000 Manifest next update: Wed 17 Dec 2025 17:46:31 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: OIjxN7a5w3m3YG+KHs8MFGY/tnf8bmLabf4Ghmwx3ok=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Dec 10 17:46:31 2025 GMT Not After : Dec 17 17:46:31 2025 GMT Subject: CN=6939b1f7-1f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:f0:f9:4c:c5:42:51:fb:f4:7f:36:e0:98: 7f:80:35:14:d8:da:51:46:11:65:3c:91:86:da:d3: 47:ce:d6:3a:0a:1b:40:63:d9:92:4f:64:8b:96:69: 62:74:2a:e3:69:12:02:7c:d1:50:fc:c4:a1:ba:79: 61:fd:c2:40:a2:cd:8f:a5:e3:c1:1b:20:03:07:3a: 93:71:52:b7:f5:c4:69:05:07:81:17:95:2c:a2:94: 31:1c:c9:48:d6:b5:da:57:9f:bd:5e:b6:bd:70:ba: 2a:48:4f:bd:1c:a9:59:85:52:d4:29:32:32:b4:ba: cb:d6:44:7b:ba:97:38:5e:49:3c:ba:e8:cb:a0:1b: ca:86:82:5e:dc:91:50:94:fa:61:54:89:2a:55:db: eb:c0:f8:ad:52:d6:1b:92:fd:eb:80:8d:7e:e9:91: d9:b8:2d:f6:11:ae:bd:0e:1c:d3:f7:e2:4b:81:0d: 35:01:e8:b7:86:84:8d:e2:61:95:9f:e1:9c:e2:fc: 35:1c:d4:52:07:28:aa:f8:ae:76:0f:bc:bd:75:e9: f5:d9:4b:1e:36:97:bd:57:48:bd:8c:94:9c:95:06: 08:7f:f7:6b:c7:05:b7:fc:46:1c:c9:40:a9:3d:f3: bc:10:81:89:26:5f:ad:26:be:af:12:59:1c:0d:2c: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:7C:2A:25:B1:BA:23:91:DA:E6:50:61:F9:62:C7:5F:D6:A0:36 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b9:0e:0d:82:ff:ce:83:61:c9:2d:91:74:47:b6:f9:cd:67: 57:a7:a5:81:19:ab:5e:75:f8:93:c1:3f:5e:4f:5d:a9:df:2e: 32:f9:4c:44:e0:d6:dd:ec:3b:19:4d:1d:82:41:24:eb:d9:fa: 25:3d:b5:dd:a4:63:6b:90:1a:60:70:23:d6:8c:49:cf:47:e3: 74:e4:f0:66:bc:85:0c:e8:f6:4b:a7:69:ad:52:5e:2b:0a:75: 78:ed:d6:c5:62:49:0b:30:26:0e:51:2d:27:27:68:59:63:66: 21:c0:d7:72:7d:91:8b:2d:da:b4:f6:8a:6f:d5:9a:75:43:f0: ed:ee:39:0f:18:9c:85:e4:d5:a5:bc:09:c2:68:74:19:96:25: 6a:aa:87:49:ed:26:21:80:77:d7:7d:8b:77:ce:a7:bc:a6:92: 15:cd:fe:5c:82:8c:31:70:ea:a7:42:64:5c:ac:db:52:e8:aa: ac:9d:f5:43:ba:0e:c8:6b:e5:52:b9:be:82:bb:d7:a9:82:64: 56:be:1c:d6:e9:b1:f1:3a:4d:7c:cf:63:6c:be:0d:31:ab:cf: d9:2a:19:e3:5c:a2:1c:dc:66:67:5e:11:d8:2a:94:42:09:f9: 7d:e7:00:7c:26:39:0e:61:c0:ca:ef:f8:3d:56:96:8c:b4:33: 9e:ca:5e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUxMjEwMTc0NjMxWhcNMjUxMjE3MTc0NjMxWjAYMRYwFAYD VQQDEw02OTM5YjFmNy0xZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO/w+UzFQlH79H824Jh/gDUU2NpRRhFlPJGG2tNHztY6ChtAY9mST2SLlmli dCrjaRICfNFQ/MShunlh/cJAos2PpePBGyADBzqTcVK39cRpBQeBF5UsopQxHMlI 1rXaV5+9Xra9cLoqSE+9HKlZhVLUKTIytLrL1kR7upc4Xkk8uujLoBvKhoJe3JFQ lPphVIkqVdvrwPitUtYbkv3rgI1+6ZHZuC32Ea69DhzT9+JLgQ01Aei3hoSN4mGV n+Gc4vw1HNRSByiq+K52D7y9den12UseNpe9V0i9jJSclQYIf/drxwW3/EYcyUCp PfO8EIGJJl+tJr6vElkcDSwErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlCfCol sbojkdrmUGH5Ysdf1qA2MB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOuQ4Ngv/Og2HJLZF0R7b5zWdXp6WBGatedfiTwT9eT12p3y4y+UxE 4Nbd7DsZTR2CQSTr2folPbXdpGNrkBpgcCPWjEnPR+N05PBmvIUM6PZLp2mtUl4r CnV47dbFYkkLMCYOUS0nJ2hZY2YhwNdyfZGLLdq09opv1Zp1Q/Dt7jkPGJyF5NWl vAnCaHQZliVqqodJ7SYhgHfXfYt3zqe8ppIVzf5cgowxcOqnQmRcrNtS6KqsnfVD ug7Ia+VSub6Cu9epgmRWvhzW6bHxOk18z2Nsvg0xq8/ZKhnjXKIc3GZnXhHYKpRC Cfl95wB8JjkOYcDK7/g9VpaMtDOeyl4S -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:47 2025 by rpki-client