This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: Mj6u8M/HEGSAuNF5tqeP/BWkYNH/LtyIhbQHjsaReWQ= Subject key identifier: CD:31:EA:71:A9:C2:FD:9B:E0:28:FD:FF:45:29:8A:D0:22:66:AB:43 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 5A Signing time: Sun 21 Dec 2025 06:11:52 +0000 Manifest this update: Sun 21 Dec 2025 06:11:51 +0000 Manifest next update: Sun 28 Dec 2025 06:11:51 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: 9jv7lJrAVzGR2H0/6wCH1WV46P/qBDHgQsCLv9IbIoo=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: RjBz7DM9PWj4EYARJmqJIScM3PQCM6ck/UDuntxMtmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Dec 21 06:11:51 2025 GMT Not After : Dec 28 06:11:51 2025 GMT Subject: CN=69478fa7-76e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:02:e1:cb:f4:9d:9d:23:50:e2:fc:2a:24: 12:e2:e1:00:d2:cd:de:f9:d8:b9:2c:3a:c6:10:0e: 87:bd:87:fd:be:76:9f:1b:4f:a6:cd:ed:6d:19:4a: 63:f2:a1:02:90:b3:2f:ca:96:58:7f:cb:96:04:63: a8:b5:c3:5f:4d:4d:17:d2:a4:b4:50:9f:a0:64:b0: 57:64:3f:09:48:93:9b:64:b9:6d:16:65:51:1f:82: 37:5a:3c:63:23:ed:42:ed:71:56:42:28:d3:9d:7c: d6:19:3e:c1:65:03:18:5f:76:33:ea:ef:0e:64:bf: 05:84:7d:0f:6c:55:70:82:4e:61:3b:bf:5e:a9:4d: dd:51:c8:2d:f2:25:99:7c:42:ff:94:25:23:d6:c5: 5a:2c:b0:4d:d9:71:bd:6b:f1:a1:fe:d6:c1:0a:25: 84:20:43:71:17:e2:02:93:da:f6:d4:bb:3f:3d:23: 5e:51:14:3e:e6:61:b0:ba:0f:1a:06:32:04:82:5b: 28:57:86:0e:38:90:06:c9:c0:7e:20:99:9e:98:6d: 57:82:18:54:9e:5e:36:ab:f4:b7:fc:5c:e1:46:c2: 3b:fe:03:02:b0:5c:53:9b:a8:5a:e5:2f:c8:ab:c6: 3a:9d:9b:41:e6:04:aa:b0:5c:06:88:35:22:a1:84: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:EA:71:A9:C2:FD:9B:E0:28:FD:FF:45:29:8A:D0:22:66:AB:43 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:66:77:88:db:00:57:6d:84:7b:40:09:38:6d:19:d7:35:6f: 87:04:eb:e8:3a:1c:dc:f9:03:46:38:7f:cc:31:7c:d0:8a:a8: 07:46:d6:31:35:5a:9c:cf:9e:10:fb:64:93:4f:0e:70:44:f9: dc:86:da:91:89:7a:9e:b8:84:79:98:79:92:dd:22:84:6c:85: 9e:9e:13:65:3e:cb:7b:23:b2:91:af:03:0e:54:1c:29:ae:86: 22:08:42:1f:90:0b:f6:f3:ed:b3:d1:d5:e0:58:6e:15:0d:96: 63:36:43:8a:2a:e7:72:8e:37:29:64:fd:2f:b2:9f:b0:78:8d: 89:6e:cb:b5:79:ec:09:03:79:53:57:3f:89:59:5a:ad:65:be: d2:04:56:c8:28:33:38:df:dd:38:4d:63:31:11:de:33:97:e0: 75:13:08:ac:54:e3:a9:7e:03:c3:c7:13:b5:39:aa:2e:03:75: 2d:e9:9e:e3:ea:b7:a6:8d:79:5d:31:f9:a0:03:62:a6:a4:6c: 53:3b:aa:91:bb:84:d3:fb:02:b0:14:19:3d:c8:e6:59:6e:cc: 09:3b:b8:55:f9:ab:81:35:ce:4b:cc:b0:19:de:12:86:56:40: 7a:5d:f4:bc:cd:8e:25:b0:02:47:07:06:29:94:f3:22:2f:d8: f0:32:59:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoMzBENzE5RjlDNkQzN0UyQUM5RjRENkQ0QjFGN0Q5NzhF QzJBMzI4OTAeFw0yNTEyMjEwNjExNTFaFw0yNTEyMjgwNjExNTFaMBgxFjAUBgNV BAMMDTY5NDc4ZmE3LTc2ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJBALhy/SdnSNQ4vwqJBLi4QDSzd752LksOsYQDoe9h/2+dp8bT6bN7W0ZSmPy oQKQsy/Kllh/y5YEY6i1w19NTRfSpLRQn6BksFdkPwlIk5tkuW0WZVEfgjdaPGMj 7ULtcVZCKNOdfNYZPsFlAxhfdjPq7w5kvwWEfQ9sVXCCTmE7v16pTd1RyC3yJZl8 Qv+UJSPWxVossE3Zcb1r8aH+1sEKJYQgQ3EX4gKT2vbUuz89I15RFD7mYbC6DxoG MgSCWyhXhg44kAbJwH4gmZ6YbVeCGFSeXjar9Lf8XOFGwjv+AwKwXFObqFrlL8ir xjqdm0HmBKqwXAaINSKhhCjtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzTHqcanC /ZvgKP3/RSmK0CJmq0MwHwYDVR0jBBgwFoAUMNcZ+cbTfirJ9NbUsffZeOwqMokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzREL0ZDMjA5MTM4NThE RDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1v ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTU5jWi1jYlRmaXJKOU5iVXNmZlplT3dxTW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzREL0ZDMjA5MTM4NThERDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmly SjlOYlVzZmZaZU93cU1vay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRmd4jbAFdthHtACThtGdc1b4cE6+g6HNz5A0Y4f8wxfNCKqAdG1jE1 WpzPnhD7ZJNPDnBE+dyG2pGJep64hHmYeZLdIoRshZ6eE2U+y3sjspGvAw5UHCmu hiIIQh+QC/bz7bPR1eBYbhUNlmM2Q4oq53KONylk/S+yn7B4jYluy7V57AkDeVNX P4lZWq1lvtIEVsgoMzjf3ThNYzER3jOX4HUTCKxU46l+A8PHE7U5qi4DdS3pnuPq t6aNeV0x+aADYqakbFM7qpG7hNP7ArAUGT3I5lluzAk7uFX5q4E1zkvMsBneEoZW QHpd9LzNjiWwAkcHBimU8yIv2PAyWRE= -----END CERTIFICATE-----Generated at Sun Dec 21 15:23:14 2025 by rpki-client