This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: q63VhMRXdkOLfwJzx1I37r7AP6mvxnobJnRm/pLuM/w= Subject key identifier: 57:9F:42:82:BF:F4:CF:8D:89:E8:F2:A6:C9:9C:8C:B1:F2:2E:2B:EB Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 0421 Signing time: Sat 20 Dec 2025 23:36:11 +0000 Manifest this update: Sat 20 Dec 2025 23:36:10 +0000 Manifest next update: Sat 27 Dec 2025 23:36:10 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: xvy6CjtBtu2VihvnbjutdCFPhfal2dSSbuMRxV385ts=) 2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) 3: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Dec 20 23:36:10 2025 GMT Not After : Dec 27 23:36:10 2025 GMT Subject: CN=694732eb-872e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:bf:c6:c5:0a:c7:d8:5f:09:8a:38:20:3f: 2c:d3:10:f5:ec:e3:14:e9:a1:fa:06:50:80:55:49: 44:dd:85:8d:5e:0c:d6:0c:96:0b:93:c5:72:5f:8b: da:a6:d0:cf:18:62:ae:62:93:32:a4:84:21:f2:bb: e7:59:78:31:d7:d1:1d:69:57:76:1d:18:6b:23:19: f5:a1:52:8e:d6:d6:f2:8b:32:59:6b:4a:5e:c2:e6: 57:df:71:82:33:0b:8c:8a:05:d0:2b:59:0b:47:0b: 9d:80:2b:66:a1:61:1a:61:fc:2e:73:97:c9:2c:3c: 61:46:d2:ec:3b:69:08:bc:98:86:71:ce:24:7f:40: 11:35:98:10:47:f8:57:da:4b:4a:b4:a4:a1:c1:82: a6:87:81:20:0a:66:54:10:da:4d:c9:de:78:5a:55: f2:bc:11:d4:f9:1f:66:82:de:8d:2c:0c:49:15:6c: c2:c4:01:6e:4f:ff:86:98:51:f4:16:4b:d6:89:0b: cf:8a:dd:65:4c:72:ef:74:11:23:01:49:77:72:9e: 55:dc:41:4c:55:bf:dd:20:b7:84:86:bd:9a:08:e8: c4:76:0f:09:5f:d9:e1:0d:a1:54:d4:0f:75:20:88: 25:54:dc:41:49:2d:9e:e8:b9:f6:1f:55:24:80:a1: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:42:82:BF:F4:CF:8D:89:E8:F2:A6:C9:9C:8C:B1:F2:2E:2B:EB X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:40:3e:63:cf:f8:7f:c1:2b:95:ec:f9:f4:42:7c:a5:b1:45: bc:75:8d:f3:22:9e:a8:39:89:5b:b3:fb:c9:05:5a:c6:39:3e: 4e:a5:5e:8b:7d:15:db:fa:d8:bb:42:d9:43:0e:e3:a1:b8:cf: 05:13:9a:65:30:62:44:71:be:45:7c:20:4a:80:e6:01:13:89: f5:21:1a:98:51:36:04:8a:19:d6:a8:a2:36:74:c3:12:34:ca: 68:d4:66:73:6f:8f:f2:a6:4c:d0:6f:35:dd:11:bc:85:1b:5d: d4:d6:cb:57:c5:5b:ca:73:1f:3c:db:9e:58:69:7f:d1:58:99: f8:00:89:ac:c4:f5:d3:45:28:f8:a0:fb:39:76:1e:75:2f:65: 0c:dc:c1:0f:16:07:d8:90:d1:1c:21:d7:f3:75:70:45:8c:97: 37:1b:b5:18:2b:87:a9:62:56:02:4a:7d:2c:ec:19:96:aa:3f: ad:df:5f:81:fb:e1:a3:3b:be:66:f8:10:bf:04:26:89:56:c5: eb:12:c0:32:c6:62:a3:d1:5e:4a:9f:24:6e:31:8f:72:ac:33: 59:69:1c:e8:22:e8:55:09:30:68:f4:9d:0d:66:04:a6:c4:26: 2e:8a:ff:7d:e4:55:be:ed:78:16:a6:4a:d7:76:f6:fa:0d:8f: 26:3c:2c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUxMjIwMjMzNjEwWhcNMjUxMjI3MjMzNjEwWjAYMRYwFAYD VQQDDA02OTQ3MzJlYi04NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjj+/xsUKx9hfCYo4ID8s0xD17OMU6aH6BlCAVUlE3YWNXgzWDJYLk8VyX4va ptDPGGKuYpMypIQh8rvnWXgx19EdaVd2HRhrIxn1oVKO1tbyizJZa0pewuZX33GC MwuMigXQK1kLRwudgCtmoWEaYfwuc5fJLDxhRtLsO2kIvJiGcc4kf0ARNZgQR/hX 2ktKtKShwYKmh4EgCmZUENpNyd54WlXyvBHU+R9mgt6NLAxJFWzCxAFuT/+GmFH0 FkvWiQvPit1lTHLvdBEjAUl3cp5V3EFMVb/dILeEhr2aCOjEdg8JX9nhDaFU1A91 IIglVNxBSS2e6Ln2H1UkgKHT1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFefQoK/ 9M+NiejypsmcjLHyLivrMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIQD5jz/h/wSuV7Pn0QnylsUW8dY3zIp6oOYlbs/vJBVrGOT5OpV6L fRXb+ti7QtlDDuOhuM8FE5plMGJEcb5FfCBKgOYBE4n1IRqYUTYEihnWqKI2dMMS NMpo1GZzb4/ypkzQbzXdEbyFG13U1stXxVvKcx88255YaX/RWJn4AImsxPXTRSj4 oPs5dh51L2UM3MEPFgfYkNEcIdfzdXBFjJc3G7UYK4epYlYCSn0s7BmWqj+t31+B ++GjO75m+BC/BCaJVsXrEsAyxmKj0V5KnyRuMY9yrDNZaRzoIuhVCTBo9J0NZgSm xCYuiv995FW+7XgWpkrXdvb6DY8mPCw8 -----END CERTIFICATE-----Generated at Mon Dec 22 08:50:46 2025 by rpki-client