This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: ueAXpyDkbC3jO6+V2AtfBqalPpj9wE43Q9d2vXx1RLo= Subject key identifier: D0:4E:EB:A2:3B:27:26:37:8E:89:E8:90:86:6E:64:84:BD:A3:97:00 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 23AF Signing time: Sat 20 Dec 2025 15:40:18 +0000 Manifest this update: Sat 20 Dec 2025 15:40:17 +0000 Manifest next update: Sat 27 Dec 2025 15:40:17 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: AMRm6Oun20ndlu3XY+GE61LCaEh2sFJUrfgSfXXPcu0=) 2: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) 3: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9182 (0x23de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Dec 20 15:40:17 2025 GMT Not After : Dec 27 15:40:17 2025 GMT Subject: CN=6946c361-98a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:28:b4:63:85:05:d5:d3:bc:0d:98:54:7f: db:a5:4c:cd:b7:2d:2f:5d:32:e6:6c:c0:93:c5:e3: e1:c3:94:73:07:cb:48:31:a7:c1:ba:4c:7b:c8:06: 18:46:05:f8:dc:be:bf:03:7c:ca:e0:52:eb:43:2a: 34:06:ba:36:0a:33:7f:3b:15:94:e7:2b:1d:d7:00: 42:fb:f1:23:91:39:43:c4:69:34:d2:63:e4:1d:45: 60:a6:35:ba:f7:ba:9e:07:1c:77:dd:b4:4d:31:a5: 73:64:ef:bd:4d:ad:6f:a5:18:3a:5e:ba:e0:59:f2: 42:10:df:d2:a7:0e:7c:fc:4d:25:8f:6a:28:38:b7: 0a:11:22:9f:54:ef:09:87:87:ff:11:b5:ae:84:aa: 32:aa:f5:ef:ba:43:71:a7:62:f6:b6:1c:45:1d:5c: 78:da:5e:a2:2b:68:bd:f0:2d:21:21:4a:c9:fb:a5: fd:26:ce:68:8f:dd:f1:2e:ef:cd:03:b6:bc:06:2a: 0f:93:15:5c:5c:81:a7:79:fa:1c:dc:60:a7:f2:e2: 8d:14:52:42:ef:4b:9f:f0:f5:91:d3:49:40:99:18: 1f:84:1f:fd:9f:f7:a4:7d:c6:fc:dc:63:4e:b2:85: 12:fa:36:ab:07:1c:77:a7:3f:e5:66:ec:92:40:48: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:EB:A2:3B:27:26:37:8E:89:E8:90:86:6E:64:84:BD:A3:97:00 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:df:3e:9a:c8:52:9e:4c:f4:45:02:e9:0d:af:b4:a1:54:94: 57:bc:6b:00:f6:0f:33:9e:20:2c:5e:3b:89:a6:1b:fa:10:08: bd:ae:0b:45:67:28:d8:e1:ca:79:ff:6a:ca:fa:50:94:e3:d0: 03:d9:7c:45:de:2d:f4:67:a2:04:6b:67:80:13:d1:86:81:02: cf:d9:ad:fe:a8:7e:a2:f6:56:ef:ea:ec:26:e8:d5:d3:7a:ff: b7:df:7b:a6:6f:de:83:ee:49:61:ac:27:17:b0:cc:29:c3:82: 51:af:2d:a0:38:70:f9:ed:e0:0f:db:5f:24:dd:ab:b6:a4:61: 60:fc:4b:e7:1d:b6:b3:8f:63:e7:8d:fb:4a:36:40:37:ab:49: a4:c0:40:11:3f:32:86:cb:3a:01:7a:e3:72:fd:3d:b9:e6:95: 1c:db:a9:75:81:a6:11:2f:df:6e:81:6a:1a:3a:a5:4b:81:82: e3:25:cb:74:75:d0:2d:56:c5:d1:1a:77:87:c6:1e:7f:9a:12: fa:c2:3f:bf:6d:56:8e:4f:3f:6e:90:3f:b8:47:ac:d9:8c:c4: f2:55:89:e6:ff:62:fb:aa:7b:ff:18:23:29:d6:fc:4f:e9:b8: f8:ff:7e:94:ee:2f:a5:cf:19:1f:f2:06:d8:7b:20:b0:60:7a: e1:7a:4c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMjIwMTU0MDE3WhcNMjUxMjI3MTU0MDE3WjAYMRYwFAYD VQQDDA02OTQ2YzM2MS05OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArugotGOFBdXTvA2YVH/bpUzNty0vXTLmbMCTxePhw5RzB8tIMafBukx7yAYY RgX43L6/A3zK4FLrQyo0Bro2CjN/OxWU5ysd1wBC+/EjkTlDxGk00mPkHUVgpjW6 97qeBxx33bRNMaVzZO+9Ta1vpRg6XrrgWfJCEN/Spw58/E0lj2ooOLcKESKfVO8J h4f/EbWuhKoyqvXvukNxp2L2thxFHVx42l6iK2i98C0hIUrJ+6X9Js5oj93xLu/N A7a8BioPkxVcXIGnefoc3GCn8uKNFFJC70uf8PWR00lAmRgfhB/9n/ekfcb83GNO soUS+jarBxx3pz/lZuySQEjsxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBO66I7 JyY3jonokIZuZIS9o5cAMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX3z6ayFKeTPRFAukNr7ShVJRXvGsA9g8zniAsXjuJphv6EAi9rgtF ZyjY4cp5/2rK+lCU49AD2XxF3i30Z6IEa2eAE9GGgQLP2a3+qH6i9lbv6uwm6NXT ev+333umb96D7klhrCcXsMwpw4JRry2gOHD57eAP218k3au2pGFg/EvnHbazj2Pn jftKNkA3q0mkwEARPzKGyzoBeuNy/T255pUc26l1gaYRL99ugWoaOqVLgYLjJct0 ddAtVsXRGneHxh5/mhL6wj+/bVaOTz9ukD+4R6zZjMTyVYnm/2L7qnv/GCMp1vxP 6bj4/36U7i+lzxkf8gbYeyCwYHrhekzY -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:41 2025 by rpki-client