This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: UfBKlxBGwWZ7FD/TIoqKuJipmIu1idPE/cnozRaapQY= Subject key identifier: 65:FB:10:AC:8D:60:D6:E7:ED:40:55:CA:11:34:08:24:0B:97:3D:2A Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 0203 Signing time: Sun 21 Dec 2025 01:39:29 +0000 Manifest this update: Sun 21 Dec 2025 01:39:29 +0000 Manifest next update: Sun 28 Dec 2025 01:39:29 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: znKXzTcWt7bEHc6wDhsKT0vVxUCwzAav+Z3JC92kv+s=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Dec 21 01:39:29 2025 GMT Not After : Dec 28 01:39:29 2025 GMT Subject: CN=69474fd1-ef0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:bd:23:05:4b:23:7f:5c:b7:a4:19:df:50: c8:e3:33:a1:31:ca:32:4b:1d:0f:0c:b2:f8:da:b1: 34:14:99:83:6e:40:db:a0:54:3c:88:f7:72:f0:29: ce:7e:d2:8e:bf:55:6e:15:ff:37:18:bf:99:59:63: de:98:bf:00:b2:a0:e7:34:39:a3:17:54:37:6b:62: 47:22:1f:56:46:37:9a:4b:1a:16:bf:0a:ea:32:7b: f6:54:40:f1:f9:2a:e5:34:c2:33:bb:e9:17:0f:3b: c6:a7:17:22:71:4b:77:05:88:e9:45:bb:6d:24:7f: 39:44:f6:4a:42:76:8a:be:8f:4e:98:fe:18:23:ae: 98:e9:e3:2d:0c:55:4d:f9:b0:66:39:0f:c6:73:8f: 95:f7:ee:11:06:24:05:66:99:8f:c1:f4:6d:99:a2: a8:b1:27:11:65:6e:b6:c2:20:a0:61:66:7c:92:5d: b9:54:18:24:8f:01:8e:f6:22:74:29:e7:29:22:ae: 62:16:f5:29:70:ab:83:83:77:48:bd:f4:45:86:15: a8:16:2e:bc:f1:52:21:68:07:29:3e:68:06:ac:b4: 72:b1:3e:07:8b:d5:da:2e:ce:7f:12:83:45:e4:a5: 31:15:0e:0d:6c:e6:4c:ad:26:e3:cf:df:bb:6c:34: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FB:10:AC:8D:60:D6:E7:ED:40:55:CA:11:34:08:24:0B:97:3D:2A X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:24:02:f4:74:a1:9d:5e:ef:69:1a:38:e6:cf:1e:aa:2e: 84:1c:92:65:2a:89:af:fe:34:99:cc:96:df:66:31:04:b6:bc: 07:68:2c:82:17:69:37:fe:7c:5a:13:74:cc:d9:5d:68:91:5c: ec:fa:f6:d7:62:82:91:0c:64:17:39:e5:5b:5d:d0:2b:b2:67: 39:00:b2:02:ee:82:01:7d:e6:7b:d7:1c:1b:82:b8:67:e9:da: 0b:01:df:02:6f:7b:b3:12:5b:40:6b:1d:7b:ee:fc:f9:5c:c2: fa:5f:9b:a1:ab:c4:c3:58:df:88:a2:cb:d3:f8:5a:bd:b8:a4: 77:43:ff:87:66:d3:30:ff:84:a2:f4:03:ce:13:dc:79:68:ee: f6:8f:8a:90:94:28:75:4b:5c:67:49:0f:b3:ee:a7:c3:25:25: cf:ca:00:aa:be:27:0c:96:e3:32:27:ae:44:7c:89:24:4a:05: 8a:43:7c:fb:71:e8:70:a0:65:ef:0c:7c:af:45:38:be:01:81: 95:be:4b:6b:62:b3:ae:e1:e1:07:10:f9:90:e1:bd:94:34:c7: 1b:ca:ec:82:dc:7a:59:bb:e7:9e:63:c8:d9:30:c2:1c:49:a9: 08:2c:24:da:71:31:b4:71:3c:0b:c2:99:2e:f5:39:b4:11:ba: 6c:ea:ef:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUxMjIxMDEzOTI5WhcNMjUxMjI4MDEzOTI5WjAYMRYwFAYD VQQDDA02OTQ3NGZkMS1lZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArna9IwVLI39ct6QZ31DI4zOhMcoySx0PDLL42rE0FJmDbkDboFQ8iPdy8CnO ftKOv1VuFf83GL+ZWWPemL8AsqDnNDmjF1Q3a2JHIh9WRjeaSxoWvwrqMnv2VEDx +SrlNMIzu+kXDzvGpxcicUt3BYjpRbttJH85RPZKQnaKvo9OmP4YI66Y6eMtDFVN +bBmOQ/Gc4+V9+4RBiQFZpmPwfRtmaKosScRZW62wiCgYWZ8kl25VBgkjwGO9iJ0 KecpIq5iFvUpcKuDg3dIvfRFhhWoFi688VIhaAcpPmgGrLRysT4Hi9XaLs5/EoNF 5KUxFQ4NbOZMrSbjz9+7bDT4HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX7EKyN YNbn7UBVyhE0CCQLlz0qMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCZCQC9HShnV7vaRo45s8eqi6EHJJlKomv/jSZzJbfZjEEtrwHaCyC F2k3/nxaE3TM2V1okVzs+vbXYoKRDGQXOeVbXdArsmc5ALIC7oIBfeZ71xwbgrhn 6doLAd8Cb3uzEltAax177vz5XML6X5uhq8TDWN+IosvT+Fq9uKR3Q/+HZtMw/4Si 9APOE9x5aO72j4qQlCh1S1xnSQ+z7qfDJSXPygCqvicMluMyJ65EfIkkSgWKQ3z7 cehwoGXvDHyvRTi+AYGVvktrYrOu4eEHEPmQ4b2UNMcbyuyC3HpZu+eeY8jZMMIc SakILCTacTG0cTwLwpku9Tm0Ebps6u+S -----END CERTIFICATE-----Generated at Mon Dec 22 07:22:42 2025 by rpki-client