This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: 1dSvA94KG68QG9K5jpqcCaVK69klC+Nt+VFOa3wRbLU= Subject key identifier: 9C:3A:16:5D:6B:8B:A8:90:E0:68:65:0F:58:77:95:42:3B:00:48:54 Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 0F Signing time: Fri 19 Dec 2025 06:53:12 +0000 Manifest this update: Fri 19 Dec 2025 06:53:11 +0000 Manifest next update: Fri 26 Dec 2025 06:53:11 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: y21UvOOBbFgg8sAhExcq8XIvnwM4qfnBLu7WidaV1Bk=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: ibYzYu8RH8C02kfa+CuxIWX8fTb9oHtMSxPb31nALF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Dec 19 06:53:11 2025 GMT Not After : Dec 26 06:53:11 2025 GMT Subject: CN=6944f658-caa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:85:18:89:80:d0:09:af:de:ae:05:fe:e1: ee:0f:14:1c:4c:26:c8:d5:13:1f:16:49:d9:49:25: 53:c2:90:af:13:01:f5:4d:ee:1f:f3:d8:f4:4d:be: fd:07:65:c2:61:c9:bd:e6:f0:ec:d0:f8:08:97:26: de:da:3e:fb:18:0e:3c:49:4c:12:92:ab:ea:8b:b8: bf:72:25:09:47:84:18:38:e4:d6:26:50:e2:bf:9d: e6:14:07:f6:18:29:4d:20:4b:84:fc:59:19:1e:20: b9:a5:d6:d1:2a:26:7f:d0:3c:9f:f2:f1:ac:dd:4f: eb:3a:b7:03:37:b6:b0:03:48:82:e8:ab:d3:c1:0f: ef:b6:ba:2a:88:be:38:ca:af:96:fa:be:93:7d:64: e7:5e:16:f1:df:51:82:31:51:d9:07:5d:01:24:20: 70:60:74:41:1f:d9:0e:35:90:82:86:b3:85:ac:ae: 24:43:21:65:b7:da:e5:41:06:71:ea:26:19:da:0c: b3:3e:d5:01:d2:e7:56:40:99:77:18:58:aa:5c:41: 50:dc:f5:15:c3:67:5c:b9:35:74:37:f3:02:e8:55: 4e:4e:2c:06:6e:79:17:fb:85:cd:6c:ef:5f:84:a9: 00:a1:5d:bd:8a:1e:c0:49:2c:9b:ee:0a:04:60:5f: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3A:16:5D:6B:8B:A8:90:E0:68:65:0F:58:77:95:42:3B:00:48:54 X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:56:7b:9e:fd:35:d7:3f:cf:3e:4d:8b:98:54:f0:16:35:eb: 9c:d3:ca:12:00:6d:af:9a:eb:60:cc:15:75:53:4a:7b:52:f8: c2:da:fc:d2:ef:2f:92:3a:2f:f5:16:41:51:2a:3c:0c:32:ac: 46:a4:8d:b6:f3:26:0c:bf:c6:57:c3:2f:79:37:7a:05:56:fb: 42:fe:80:f8:1e:c4:b4:28:81:eb:c1:1e:ff:af:5a:98:0b:2b: 24:45:0b:49:b7:38:47:3f:fe:1a:62:60:82:6b:b5:25:d6:2a: c2:f8:e4:2f:43:e0:a6:a2:dd:ea:0d:6f:9a:6d:b7:68:b0:ec: c4:fb:d9:e0:e5:27:b2:4a:1d:27:1e:08:5e:60:28:59:fd:db: 51:e2:90:67:85:2c:ac:f7:33:06:50:e6:bd:99:5a:4b:a4:8d: da:c5:b7:7e:d5:38:b4:e6:34:10:78:f9:ef:33:fb:41:fc:19: 5e:c3:5f:f4:ee:0e:ff:e7:54:66:7a:ef:de:c9:f6:67:d9:b7: a8:f3:2c:7f:bf:23:e2:0f:ef:91:6a:14:ec:1e:a4:65:60:14: 94:b7:36:0b:73:88:75:e2:92:88:8c:ec:6e:07:77:02:46:c3: df:3a:1a:08:9e:d6:c5:11:6e:f0:00:74:6d:3d:81:4b:37:c0: bc:e3:db:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNTEyMTkwNjUzMTFaFw0yNTEyMjYwNjUzMTFaMBgxFjAUBgNV BAMMDTY5NDRmNjU4LWNhYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrX4UYiYDQCa/ergX+4e4PFBxMJsjVEx8WSdlJJVPCkK8TAfVN7h/z2PRNvv0H ZcJhyb3m8OzQ+AiXJt7aPvsYDjxJTBKSq+qLuL9yJQlHhBg45NYmUOK/neYUB/YY KU0gS4T8WRkeILml1tEqJn/QPJ/y8azdT+s6twM3trADSILoq9PBD++2uiqIvjjK r5b6vpN9ZOdeFvHfUYIxUdkHXQEkIHBgdEEf2Q41kIKGs4WsriRDIWW32uVBBnHq JhnaDLM+1QHS51ZAmXcYWKpcQVDc9RXDZ1y5NXQ38wLoVU5OLAZueRf7hc1s71+E qQChXb2KHsBJLJvuCgRgX45lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnDoWXWuL qJDgaGUPWHeVQjsASFQwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMFWe579Ndc/zz5Ni5hU8BY165zTyhIAba+a62DMFXVTSntS+MLa/NLv L5I6L/UWQVEqPAwyrEakjbbzJgy/xlfDL3k3egVW+0L+gPgexLQogevBHv+vWpgL KyRFC0m3OEc//hpiYIJrtSXWKsL45C9D4Kai3eoNb5ptt2iw7MT72eDlJ7JKHSce CF5gKFn921HikGeFLKz3MwZQ5r2ZWkukjdrFt37VOLTmNBB4+e8z+0H8GV7DX/Tu Dv/nVGZ6797J9mfZt6jzLH+/I+IP75FqFOwepGVgFJS3NgtziHXikoiM7G4HdwJG w986Ggie1sURbvAAdG09gUs3wLzj29s= -----END CERTIFICATE-----Generated at Fri Dec 19 18:45:44 2025 by rpki-client