This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: 1IGNMFffYVr2F2tcg0xewhVoxH62DEjsPVJIo7cO9qs= Subject key identifier: EA:36:57:18:98:69:C8:39:8D:53:31:12:F8:3B:34:EF:07:85:7B:AF Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 23AE Signing time: Thu 18 Dec 2025 15:44:50 +0000 Manifest this update: Thu 18 Dec 2025 15:44:49 +0000 Manifest next update: Thu 25 Dec 2025 15:44:49 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: S//xCgqz2RLZIpHYzFirGA4YLpdy+FbjTkPdQjUmM9I=) 2: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 5: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9181 (0x23dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Dec 18 15:44:49 2025 GMT Not After : Dec 25 15:44:49 2025 GMT Subject: CN=69442171-b3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:d9:0b:72:8a:f4:0a:83:d9:e8:b0:99:e1: 06:09:23:f6:21:ad:35:e9:b4:e9:2c:41:c6:77:c9: ac:60:08:39:81:62:b9:df:72:76:d2:65:fb:0f:a3: 3d:a5:be:07:a0:d6:10:bd:6e:83:29:0c:07:f7:8c: 0a:89:5f:39:0c:e6:c5:40:a5:36:87:b7:13:e0:17: 39:71:c5:d7:ee:b0:88:74:50:33:73:fd:50:5c:0e: 69:b1:4a:b5:78:35:95:e7:20:4c:54:2e:db:c0:21: 15:44:6c:97:64:7e:c3:e2:1d:a9:25:43:a4:ea:16: 10:0f:5f:d1:f3:b9:7d:01:a5:05:e5:34:15:fb:4a: 12:cb:bb:5f:0c:ea:7d:5b:1c:82:8f:53:90:73:be: 15:4e:7b:1b:56:f5:b4:fb:bb:eb:6e:3e:11:53:66: 72:0a:99:5c:50:8c:0c:3b:a4:97:b2:d4:90:44:b2: f4:a7:20:7a:77:ca:e3:0c:44:b5:d4:aa:e8:e6:03: 89:6c:e6:b4:ec:7c:1b:73:6a:73:b5:74:85:67:de: 71:b2:fe:d6:a4:79:c6:56:23:29:16:48:24:6d:f9: 81:ee:f3:21:4e:a2:9d:55:8e:5d:cc:91:b6:a4:a7: 9e:82:03:57:ca:9d:59:49:68:3d:5d:6f:6d:ba:ee: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:36:57:18:98:69:C8:39:8D:53:31:12:F8:3B:34:EF:07:85:7B:AF X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e5:e4:ad:69:be:fa:59:cf:9b:e6:ab:60:0d:75:b8:21:01: f1:96:f5:e9:c7:01:66:c3:4b:e1:2f:cc:8d:e2:5d:0f:c8:8d: db:25:a4:dd:43:19:13:9c:8b:c9:2c:56:88:27:0f:86:6d:49: 33:ce:3e:3b:30:8a:7a:48:e2:0c:5d:e0:a7:d5:83:49:2b:50: d9:5a:5e:f0:77:df:b9:d5:25:32:18:50:fd:35:2d:8e:92:20: ba:ad:6d:c6:56:a1:2b:76:26:d4:71:8c:4e:72:b5:d1:99:24: 9e:e6:c8:7a:d6:70:b3:bd:16:3e:2e:6f:0a:f1:36:5b:ac:f2: ef:f7:95:c7:23:82:17:36:b6:19:69:f8:3a:84:47:3c:1f:9c: 9b:fd:e6:2f:08:0e:cc:57:02:d5:b9:34:e2:e3:d1:f3:c3:6d: 3e:4b:e1:0b:9d:bf:ad:38:1f:41:6a:4a:b7:54:a9:bb:6b:05: 44:68:fa:c4:d8:42:6d:e7:41:97:6c:d3:83:2e:b3:92:e9:95: 46:b1:20:a1:21:4e:17:23:81:cf:f4:f6:bf:e5:3f:41:69:7a: 80:eb:3e:22:73:c7:5c:13:a9:07:ab:ce:96:02:cc:29:c9:c1: 1d:58:9b:26:46:a3:83:92:36:a3:d2:69:e7:e5:93:9c:78:0c: ea:08:41:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMjE4MTU0NDQ5WhcNMjUxMjI1MTU0NDQ5WjAYMRYwFAYD VQQDDA02OTQ0MjE3MS1iM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzXZC3KK9AqD2eiwmeEGCSP2Ia016bTpLEHGd8msYAg5gWK533J20mX7D6M9 pb4HoNYQvW6DKQwH94wKiV85DObFQKU2h7cT4Bc5ccXX7rCIdFAzc/1QXA5psUq1 eDWV5yBMVC7bwCEVRGyXZH7D4h2pJUOk6hYQD1/R87l9AaUF5TQV+0oSy7tfDOp9 WxyCj1OQc74VTnsbVvW0+7vrbj4RU2ZyCplcUIwMO6SXstSQRLL0pyB6d8rjDES1 1Kro5gOJbOa07Hwbc2pztXSFZ95xsv7WpHnGViMpFkgkbfmB7vMhTqKdVY5dzJG2 pKeeggNXyp1ZSWg9XW9tuu4dTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOo2VxiY acg5jVMxEvg7NO8HhXuvMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV5eStab76Wc+b5qtgDXW4IQHxlvXpxwFmw0vhL8yN4l0PyI3bJaTd QxkTnIvJLFaIJw+GbUkzzj47MIp6SOIMXeCn1YNJK1DZWl7wd9+51SUyGFD9NS2O kiC6rW3GVqErdibUcYxOcrXRmSSe5sh61nCzvRY+Lm8K8TZbrPLv95XHI4IXNrYZ afg6hEc8H5yb/eYvCA7MVwLVuTTi49Hzw20+S+ELnb+tOB9Bakq3VKm7awVEaPrE 2EJt50GXbNODLrOS6ZVGsSChIU4XI4HP9Pa/5T9BaXqA6z4ic8dcE6kHq86WAswp ycEdWJsmRqODkjaj0mnn5ZOceAzqCEE8 -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:44 2025 by rpki-client