This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft File: MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json) Hash identifier: 2vbo2aB2V5rDMJl64HJR4dArlPTuhbMV+XdrzPb6vAk= Subject key identifier: 57:9F:89:43:E2:56:0A:9C:9F:C8:9A:73:AF:A8:4D:6B:05:C1:D9:6B Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 06:50:50 +0000 Manifest this update: Fri 19 Dec 2025 06:50:49 +0000 Manifest next update: Fri 26 Dec 2025 06:50:49 +0000 Files and hashes: 1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: abHFHYHgloaAe9GSanvEMGcr9Nlz7HtuPmCIIK+JEBk=) 2: 127C35B4C52511F09456F21BC4F9AE02.roa (hash: nO3ZI61tCBJta8JPb4PdTpG+lV1HeV50ks8A1FY7r+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Validity Not Before: Dec 19 06:50:49 2025 GMT Not After : Dec 26 06:50:49 2025 GMT Subject: CN=6944f5ca-a337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:2e:76:26:db:de:6b:8f:d8:58:5b:bb:d6: b6:5d:5a:1e:bb:3f:34:85:be:b8:9d:2a:70:3e:fb: e4:01:7a:5c:36:38:c7:80:6d:d0:6f:fe:e2:cc:10: be:4b:80:a5:32:14:82:f2:9d:d9:3d:65:76:92:66: e0:62:fb:ec:8c:bc:97:32:b4:ff:73:54:5b:db:73: 68:f5:26:52:40:1d:8a:b5:63:ef:48:13:45:94:32: 78:3c:d7:4b:d2:bf:07:be:79:26:80:de:d2:ae:b3: 26:7a:eb:8b:3a:1b:af:00:5d:82:d2:28:c0:65:1e: 34:af:1b:b0:ca:fb:9d:42:dd:e5:50:fa:28:fb:8a: 81:33:56:0d:d5:4e:43:03:a7:84:3d:42:61:a8:a8: 6f:cc:ed:9a:d2:af:cc:3f:aa:8d:68:47:1f:05:c1: 34:d8:3e:dd:49:11:05:e9:66:0f:5f:4a:dc:a4:b3: 92:ff:6e:8c:20:c4:9a:b8:85:9f:8f:bd:29:96:f3: 45:5d:c0:72:10:9c:fc:ef:92:a5:1d:59:bc:75:31: 90:91:ce:10:29:4d:35:36:c4:de:64:a6:72:8e:75: 65:fd:44:2f:67:db:8f:22:81:f8:63:58:8b:ac:43: 61:93:1e:32:c5:51:e4:38:cb:33:4a:d9:4b:17:19: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:89:43:E2:56:0A:9C:9F:C8:9A:73:AF:A8:4D:6B:05:C1:D9:6B X509v3 Authority Key Identifier: keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1b:bd:7a:55:40:d1:9c:d6:58:e9:c0:8d:42:60:5b:43:8a: bb:76:6c:55:1e:8f:fd:03:1b:5a:1d:b3:f7:ff:f2:9d:af:20: 27:fe:17:1f:59:72:f4:57:75:38:d1:d2:f9:33:70:ba:7a:a0: 3f:e9:1c:49:a5:10:2c:3b:dc:2d:f8:ed:9f:5b:64:0a:41:37: 35:40:67:f9:9e:8c:13:41:71:eb:ad:56:47:52:ed:19:21:ec: f8:ad:0b:2a:77:85:a5:4d:61:b7:f0:40:94:73:e0:64:da:e8: 44:a7:2d:c7:49:dc:7a:4b:fd:13:90:80:ca:db:b7:73:62:fb: 31:ea:f3:fe:f1:9e:7c:6a:25:05:a5:23:92:58:44:ea:01:fd: bc:ae:ea:c2:30:15:20:49:74:21:c2:84:80:d5:71:b3:c5:46: 0b:c6:99:e5:54:c7:ac:ca:84:fb:b8:c1:c9:20:84:73:01:48: cc:c6:67:ab:30:66:a7:0c:38:10:07:7c:d5:ea:9c:48:8e:61: f9:6e:9a:cf:a0:00:0a:61:51:9c:65:78:0e:0c:75:86:96:46: cd:f5:3e:03:07:7d:c2:36:27:a7:de:ec:16:03:9b:7e:f0:1f: d2:d5:6a:e9:2f:79:6d:f2:58:6d:26:70:83:8a:fa:24:de:d8: 91:f6:12:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoMzEyNTc1REU0RDQ2NDNGQURGQUU0ODg3NkRGNDU2N0Q3 RDdDNjg1NjAeFw0yNTEyMTkwNjUwNDlaFw0yNTEyMjYwNjUwNDlaMBgxFjAUBgNV BAMMDTY5NDRmNWNhLWEzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDehy52Jtvea4/YWFu71rZdWh67PzSFvridKnA+++QBelw2OMeAbdBv/uLMEL5L gKUyFILyndk9ZXaSZuBi++yMvJcytP9zVFvbc2j1JlJAHYq1Y+9IE0WUMng810vS vwe+eSaA3tKusyZ664s6G68AXYLSKMBlHjSvG7DK+51C3eVQ+ij7ioEzVg3VTkMD p4Q9QmGoqG/M7ZrSr8w/qo1oRx8FwTTYPt1JEQXpZg9fStyks5L/bowgxJq4hZ+P vSmW80VdwHIQnPzvkqUdWbx1MZCRzhApTTU2xN5kpnKOdWX9RC9n248igfhjWIus Q2GTHjLFUeQ4yzNK2UsXGRa7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV5+JQ+JW CpyfyJpzr6hNawXB2WswHwYDVR0jBBgwFoAUMSV13k1GQ/rfrkiHbfRWfX18aFYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzg2MUIxMTEyQzUy NDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9yZnJraUhiZlJXZlgxOGFG WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVNWMTNrMUdRX3JmcmtpSGJmUldmWDE4YUZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE N0EzLzg2MUIxMTEyQzUyNDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9y ZnJraUhiZlJXZlgxOGFGWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0bvXpVQNGc1ljpwI1CYFtDirt2bFUej/0DG1ods/f/8p2vICf+Fx9Z cvRXdTjR0vkzcLp6oD/pHEmlECw73C347Z9bZApBNzVAZ/mejBNBceutVkdS7Rkh 7PitCyp3haVNYbfwQJRz4GTa6ESnLcdJ3HpL/ROQgMrbt3Ni+zHq8/7xnnxqJQWl I5JYROoB/byu6sIwFSBJdCHChIDVcbPFRgvGmeVUx6zKhPu4wckghHMBSMzGZ6sw ZqcMOBAHfNXqnEiOYflums+gAAphUZxleA4MdYaWRs31PgMHfcI2J6fe7BYDm37w H9LVaukveW3yWG0mcIOK+iTe2JH2Eh0= -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:59 2025 by rpki-client