This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: 3KRJ5JVBv4PxiXHap8upqlpzgI5JUe8o+Z6y14Tv6oU= Subject key identifier: CA:B4:76:95:D8:55:3A:08:98:7D:35:83:A9:4A:4B:09:5C:F7:79:FC Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 04B0 Signing time: Thu 18 Dec 2025 23:15:39 +0000 Manifest this update: Thu 18 Dec 2025 23:15:38 +0000 Manifest next update: Thu 25 Dec 2025 23:15:38 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: ypVh1Br0KVaCOkGpP9ByXOpN8cOTjNTJt6KPXcpYeqA=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: 6hHqiNfY5NbXq0rHoOBfddkoknOt7EsTJSIiNwSogKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Dec 18 23:15:38 2025 GMT Not After : Dec 25 23:15:38 2025 GMT Subject: CN=69448b1a-69dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:57:1a:bd:f2:f5:e9:09:d8:bd:be:7a:f3: 85:bf:e4:66:cf:31:6a:ba:ed:76:70:40:71:8e:0e: bf:ec:b8:80:04:65:bf:eb:aa:a4:0a:9b:a5:55:94: 93:d9:80:0e:d6:7c:72:2e:e4:d6:9b:52:8e:db:d8: 6b:5c:4a:df:9b:f4:a7:b0:1f:49:93:b9:c4:c6:b7: 91:99:b4:5d:3e:21:56:dc:e9:78:8e:a1:a9:8d:7b: e6:7e:37:d5:0d:51:bd:7c:a1:f6:de:14:92:57:5e: aa:6d:5b:51:00:52:87:82:c7:22:25:65:3d:df:24: 5b:fc:a9:81:64:77:59:8e:0e:c7:f5:fb:6e:1f:b7: 47:74:8e:b3:c9:c4:42:16:a8:14:68:72:7d:73:70: 20:37:eb:16:9a:d8:9e:4c:b0:56:c0:ca:13:d6:e4: 31:84:9d:51:0e:8e:d3:b5:56:ed:5c:3b:ae:d5:a9: ef:9a:ec:81:55:c6:e8:85:15:54:52:5f:c5:91:7f: 88:80:f5:20:52:96:f6:35:f1:c7:f1:a9:67:7b:b2: 15:e4:68:4b:2a:4c:67:4c:45:a6:07:76:90:3e:02: 7c:c3:01:4e:d6:db:ff:2c:6f:4c:6a:41:7c:53:05: 70:4f:70:91:c3:25:9c:41:a2:0c:fb:bb:9b:04:13: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:76:95:D8:55:3A:08:98:7D:35:83:A9:4A:4B:09:5C:F7:79:FC X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:38:ab:d6:3e:a9:01:73:c0:cb:11:f3:93:a3:2f:5e:4c:cc: f5:07:56:5c:2b:f2:a8:6d:65:4a:1b:98:5e:89:48:7a:70:dc: 03:9e:e9:4e:06:84:e4:52:b0:22:32:3a:59:1d:cd:09:a7:45: cc:fa:f9:a7:05:d0:7f:b2:43:cc:08:2a:08:06:83:19:e9:0c: 11:e7:83:41:df:83:61:28:e6:88:ea:8d:81:24:b1:65:3e:93: 0c:dc:9f:7f:a5:9d:64:a1:56:68:09:3f:d8:3b:5b:0c:6c:01: 84:b5:73:f9:bf:b8:b1:20:c9:d2:1f:98:3e:dd:96:a5:3c:b0: 63:c7:c7:c3:a8:10:ba:e2:07:4f:14:c2:fa:37:79:1e:00:12: b2:d9:31:48:57:5b:30:b9:ea:b3:00:e5:c9:88:25:be:35:c2: 86:22:fa:89:52:7a:90:9b:5e:f1:0b:52:54:1e:90:fb:7b:f6: d2:ec:a0:f6:14:2c:2e:34:74:70:f0:8d:9e:b1:9e:29:06:35: 59:0c:e3:cd:26:5f:a1:07:e9:6f:7f:41:ff:f6:42:99:06:b4: 48:39:48:26:d3:ed:d5:9f:b8:77:fc:07:91:7b:e2:11:4b:bb: cd:79:c4:44:43:fd:74:ff:22:43:94:31:d0:27:42:07:66:4a: fd:cc:78:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUxMjE4MjMxNTM4WhcNMjUxMjI1MjMxNTM4WjAYMRYwFAYD VQQDDA02OTQ0OGIxYS02OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJlXGr3y9ekJ2L2+evOFv+RmzzFquu12cEBxjg6/7LiABGW/66qkCpulVZST 2YAO1nxyLuTWm1KO29hrXErfm/SnsB9Jk7nExreRmbRdPiFW3Ol4jqGpjXvmfjfV DVG9fKH23hSSV16qbVtRAFKHgsciJWU93yRb/KmBZHdZjg7H9ftuH7dHdI6zycRC FqgUaHJ9c3AgN+sWmtieTLBWwMoT1uQxhJ1RDo7TtVbtXDuu1anvmuyBVcbohRVU Ul/FkX+IgPUgUpb2NfHH8alne7IV5GhLKkxnTEWmB3aQPgJ8wwFO1tv/LG9MakF8 UwVwT3CRwyWcQaIM+7ubBBPzWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq0dpXY VToImH01g6lKSwlc93n8MB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtOKvWPqkBc8DLEfOToy9eTMz1B1ZcK/KobWVKG5heiUh6cNwDnulO BoTkUrAiMjpZHc0Jp0XM+vmnBdB/skPMCCoIBoMZ6QwR54NB34NhKOaI6o2BJLFl PpMM3J9/pZ1koVZoCT/YO1sMbAGEtXP5v7ixIMnSH5g+3ZalPLBjx8fDqBC64gdP FML6N3keABKy2TFIV1swueqzAOXJiCW+NcKGIvqJUnqQm17xC1JUHpD7e/bS7KD2 FCwuNHRw8I2esZ4pBjVZDOPNJl+hB+lvf0H/9kKZBrRIOUgm0+3Vn7h3/AeRe+IR S7vNecREQ/10/yJDlDHQJ0IHZkr9zHih -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:05 2025 by rpki-client