This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: k/S4g5FGeyIFxvit1eW6gYG4/5N5vNlWaKiZaF4iea4= Subject key identifier: 3B:82:E3:89:5C:14:05:11:C5:85:E4:05:4E:BA:7E:69:A8:DA:C3:B8 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 01C2 Signing time: Fri 19 Dec 2025 02:16:00 +0000 Manifest this update: Fri 19 Dec 2025 02:15:59 +0000 Manifest next update: Fri 26 Dec 2025 02:15:59 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: 6UpV57wilxauJm6vFQIJHr9pglHsDdipMX+ZEdxvrNw=) 2: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=) 3: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=) 4: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=) 5: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=) 6: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=) 7: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=) 8: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=) 9: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=) 10: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Dec 19 02:15:59 2025 GMT Not After : Dec 26 02:15:59 2025 GMT Subject: CN=6944b560-906a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e9:10:96:8a:c6:6a:a3:3c:de:e7:74:6a:45: e6:26:cf:57:c5:69:c8:00:b4:5c:20:53:0e:29:14: 06:ca:fc:b4:71:e4:85:1f:40:28:e2:2b:78:43:c9: 4c:45:cd:c4:7c:fc:de:ae:5b:8c:02:b0:7a:ed:25: 1a:99:63:27:a8:15:58:78:20:37:53:c8:f3:6e:c2: 42:d1:cb:e1:df:00:f5:1b:24:cf:ee:67:5d:01:56: b8:ae:84:57:b0:6f:90:06:f0:cd:ab:a4:c9:b8:3c: 16:dc:86:54:36:f4:7d:ab:0a:c0:33:41:25:44:bf: 93:a7:13:c1:0c:8f:8e:64:3d:d8:38:cd:aa:9e:b5: c8:db:8c:7b:49:dc:64:e5:d5:29:2d:d0:30:a4:50: 77:f7:0d:5c:df:95:b9:17:a5:02:34:80:9a:16:ae: f9:4e:b6:d7:59:37:b3:7b:f8:fe:d5:b7:ed:cb:80: f3:79:f5:dd:14:3d:21:04:cb:e6:31:44:8e:ac:f1: 8c:94:fb:36:11:95:d5:ac:81:b8:32:90:dc:ca:09: 35:d1:5c:7a:1c:17:87:70:24:27:f4:bf:7a:5a:72: ef:7b:58:83:d0:37:dd:06:bb:29:da:3b:b4:19:75: 04:f4:a5:1c:9c:08:64:28:23:aa:89:dc:7d:05:e1: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:E3:89:5C:14:05:11:C5:85:E4:05:4E:BA:7E:69:A8:DA:C3:B8 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f3:0a:8c:17:91:eb:d9:6e:11:a7:e8:d5:ee:7d:48:8a:5e: b6:22:0e:ed:6c:a3:78:7e:b9:b8:97:fb:e8:11:f7:81:64:9b: eb:ea:e7:c1:d2:dd:4e:fb:00:5f:27:11:71:18:09:98:3a:ae: b3:05:7c:c0:3a:e2:e4:2c:d3:27:4b:d0:82:b2:40:d3:c1:9b: fb:66:10:56:d4:f3:8d:0a:f1:69:3c:e3:0c:67:1c:8f:cf:c6: 5f:a6:c9:9d:90:6c:84:40:fe:7e:b7:6f:fb:8a:a5:d9:14:e0: 71:8e:03:14:b5:70:af:49:fc:4d:0a:d5:4b:11:94:6a:32:50: ac:aa:59:df:0f:d6:45:9e:93:ac:95:71:61:17:6a:64:1a:78: 84:8e:f4:1c:70:39:a9:e5:f9:f7:8a:82:d8:57:3f:65:ab:0e: e0:47:5a:ab:f6:2e:57:cd:67:20:53:63:b0:98:b8:c4:b3:df: d2:ea:86:b6:50:a5:d2:d5:6d:66:08:32:0f:5c:61:de:da:80: 8d:d3:da:c0:05:cc:56:07:50:e6:7a:31:56:4e:9a:14:61:a2: 9e:1a:cc:13:bd:ad:d6:31:90:5e:ee:1f:4d:a9:d0:cc:1e:11: b6:ce:f1:be:e6:15:cc:98:0e:ba:a3:83:92:31:98:e3:51:ad: 9a:d2:d7:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUxMjE5MDIxNTU5WhcNMjUxMjI2MDIxNTU5WjAYMRYwFAYD VQQDDA02OTQ0YjU2MC05MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ukQlorGaqM83ud0akXmJs9XxWnIALRcIFMOKRQGyvy0ceSFH0Ao4it4Q8lM Rc3EfPzerluMArB67SUamWMnqBVYeCA3U8jzbsJC0cvh3wD1GyTP7mddAVa4roRX sG+QBvDNq6TJuDwW3IZUNvR9qwrAM0ElRL+TpxPBDI+OZD3YOM2qnrXI24x7Sdxk 5dUpLdAwpFB39w1c35W5F6UCNICaFq75TrbXWTeze/j+1bfty4DzefXdFD0hBMvm MUSOrPGMlPs2EZXVrIG4MpDcygk10Vx6HBeHcCQn9L96WnLve1iD0DfdBrsp2ju0 GXUE9KUcnAhkKCOqidx9BeF9UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuC44lc FAURxYXkBU66fmmo2sO4MB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy8wqMF5Hr2W4Rp+jV7n1Iil62Ig7tbKN4frm4l/voEfeBZJvr6ufB 0t1O+wBfJxFxGAmYOq6zBXzAOuLkLNMnS9CCskDTwZv7ZhBW1PONCvFpPOMMZxyP z8ZfpsmdkGyEQP5+t2/7iqXZFOBxjgMUtXCvSfxNCtVLEZRqMlCsqlnfD9ZFnpOs lXFhF2pkGniEjvQccDmp5fn3ioLYVz9lqw7gR1qr9i5XzWcgU2OwmLjEs9/S6oa2 UKXS1W1mCDIPXGHe2oCN09rABcxWB1DmejFWTpoUYaKeGswTva3WMZBe7h9NqdDM HhG2zvG+5hXMmA66o4OSMZjjUa2a0tdE -----END CERTIFICATE-----Generated at Sat Dec 20 00:26:33 2025 by rpki-client