This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json) Hash identifier: F+z2ea70nciFavkLPkWPGK3o7D0ojNvhd8AnKsc5L1c= Subject key identifier: D5:B8:B5:A9:55:06:26:10:23:56:24:CD:C3:C3:66:61:59:47:46:0B Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft Manifest number: 5D Signing time: Tue 23 Dec 2025 06:01:05 +0000 Manifest this update: Tue 23 Dec 2025 06:01:05 +0000 Manifest next update: Tue 30 Dec 2025 06:01:05 +0000 Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: pC5UxLL1LpCWwS//KSbyz8dN3FEmUrcVq4m2QGGrP+0=) 2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: kbwAloXsrTWCITEmD+odpUzfYSBQf6qqCRC37VKW0HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Validity Not Before: Dec 23 06:01:05 2025 GMT Not After : Dec 30 06:01:05 2025 GMT Subject: CN=694a3021-a441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:11:d2:ef:46:9c:90:6f:1d:b2:26:1a:ba: 16:ba:df:fd:4e:2c:f7:d6:c3:21:b9:28:08:90:fd: 75:7e:69:58:22:0f:cc:35:f5:2d:5e:36:45:5a:fc: 57:d0:f6:46:d1:8b:72:d5:08:ac:55:3b:c8:f7:2b: f8:50:69:4d:2d:c0:85:89:2e:98:08:a7:99:37:72: 72:69:b1:8b:19:09:e5:2b:15:a3:86:11:22:72:2a: 11:c2:27:9f:53:2a:76:25:63:6d:af:b9:e1:69:1b: fe:39:b4:57:f8:c0:fc:d5:6e:b2:4b:b3:0b:8b:5f: 6e:c1:7b:cc:e9:87:95:c4:ed:f4:96:5d:90:38:95: b8:d4:4f:88:f5:4f:f6:6e:52:af:75:8d:b2:4a:cd: 78:8e:c7:15:8f:db:13:fe:f9:00:03:92:63:11:25: 3b:a5:14:29:d8:a0:4d:cd:f4:bd:d6:9d:a9:ca:3d: 90:61:40:c4:19:58:7e:e2:54:2b:2b:f7:85:26:a5: 4b:56:f3:bc:2e:17:bf:77:a5:7b:f7:a4:ed:0e:bc: 11:5f:88:27:82:41:4b:6b:67:af:af:ee:48:81:ef: 1e:3e:c3:6f:de:f7:f6:51:6b:26:81:70:86:50:11: cf:f6:fe:68:aa:a8:62:1c:02:46:86:af:05:61:fd: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:B5:A9:55:06:26:10:23:56:24:CD:C3:C3:66:61:59:47:46:0B X509v3 Authority Key Identifier: keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:39:cb:c0:64:1b:80:ef:07:6c:29:5f:e9:9c:92:4d:26:1b: 35:f9:12:53:b4:d4:85:32:2e:0e:57:4d:53:68:95:be:3f:9d: 7d:5a:7a:d1:58:31:58:d1:1b:b5:a1:92:1b:f0:bb:60:76:1c: 5a:9c:61:e1:fc:10:a6:2f:af:af:58:87:c6:22:8b:08:d9:9c: de:21:4b:0b:f6:05:df:b1:e0:62:1f:ac:9c:a6:65:2c:94:e4: 2a:10:a8:a7:73:74:ea:e5:35:18:18:ec:b7:38:f8:a0:75:20: 94:f0:a1:e6:69:64:14:55:02:2c:da:29:86:2a:4d:64:4c:ff: ce:1d:35:54:7d:ad:90:9f:7c:60:c2:44:bc:f3:7a:08:43:8f: 16:dc:f9:49:df:3d:67:2b:a3:ad:c6:4d:5c:ac:ea:0c:69:a3: fd:4d:60:f9:50:89:fc:e0:4c:ef:e0:51:8b:c5:e9:5f:5f:25: f7:b5:0d:5d:a9:5b:f6:eb:be:5d:6e:c0:68:98:d7:c0:62:82: 6c:f1:f0:d5:fe:84:e8:a1:bf:3f:b5:5a:18:63:41:df:9a:b4: d8:67:fb:d1:13:f4:df:2d:4c:b8:68:52:47:6c:63:e2:42:ae: ed:e8:ce:a2:ee:d2:62:f2:fd:25:dd:d2:4d:e9:99:3a:b7:16: 40:8c:65:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjZFRjExMC8GA1UEBRMoOUEwMjNCODBBQkNGNEU2Nzk3RDM4OEMwREU4MTYwQTE2 RUIxNURGRTAeFw0yNTEyMjMwNjAxMDVaFw0yNTEyMzAwNjAxMDVaMBgxFjAUBgNV BAMMDTY5NGEzMDIxLWE0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/DxHS70ackG8dsiYauha63/1OLPfWwyG5KAiQ/XV+aVgiD8w19S1eNkVa/FfQ 9kbRi3LVCKxVO8j3K/hQaU0twIWJLpgIp5k3cnJpsYsZCeUrFaOGESJyKhHCJ59T KnYlY22vueFpG/45tFf4wPzVbrJLswuLX27Be8zph5XE7fSWXZA4lbjUT4j1T/Zu Uq91jbJKzXiOxxWP2xP++QADkmMRJTulFCnYoE3N9L3WnanKPZBhQMQZWH7iVCsr 94UmpUtW87wuF793pXv3pO0OvBFfiCeCQUtrZ6+v7kiB7x4+w2/e9/ZRayaBcIZQ Ec/2/miqqGIcAkaGrwVh/dBLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1bi1qVUG JhAjViTNw8NmYVlHRgswHwYDVR0jBBgwFoAUmgI7gKvPTmeX04jA3oFgoW6xXf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNkVGL0FDQkY2RjJBNTc0 MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1lWDA0akEzb0Znb1c2eFhm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWdJN2dLdlBUbWVYMDRqQTNvRmdvVzZ4WGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NkVGL0FDQkY2RjJBNTc0MjExRjBCRURCNDU1Q0M0RjlBRTAyL21nSTdnS3ZQVG1l WDA0akEzb0Znb1c2eFhmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI45y8BkG4DvB2wpX+mckk0mGzX5ElO01IUyLg5XTVNolb4/nX1aetFY MVjRG7Whkhvwu2B2HFqcYeH8EKYvr69Yh8YiiwjZnN4hSwv2Bd+x4GIfrJymZSyU 5CoQqKdzdOrlNRgY7Lc4+KB1IJTwoeZpZBRVAizaKYYqTWRM/84dNVR9rZCffGDC RLzzeghDjxbc+UnfPWcro63GTVys6gxpo/1NYPlQifzgTO/gUYvF6V9fJfe1DV2p W/brvl1uwGiY18Bigmzx8NX+hOihvz+1WhhjQd+atNhn+9ET9N8tTLhoUkdsY+JC ru3ozqLu0mLy/SXd0k3pmTq3FkCMZds= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:17 2025 by rpki-client