This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: jtgrQYwxUJc6LFQpYIwFtqGx6kDQql0Cb9in24ReXPk= Subject key identifier: 57:F7:CD:EE:72:1A:90:A0:F7:97:1E:6B:E0:57:0F:D5:BD:84:50:34 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C8B Signing time: Sat 20 Dec 2025 18:07:13 +0000 Manifest this update: Sat 20 Dec 2025 18:07:13 +0000 Manifest next update: Sat 27 Dec 2025 18:07:13 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: 26dCcvnshWaGFPz52bG6ft1hkGnQsid/+QvUv5nrNYs=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Dec 20 18:07:13 2025 GMT Not After : Dec 27 18:07:13 2025 GMT Subject: CN=6946e5d1-b808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d6:cd:02:80:cc:df:c3:52:71:28:55:91:94: 1f:26:23:32:eb:f5:f0:a8:e8:23:38:3e:da:a4:1a: 34:ba:70:6b:c0:c5:48:4f:71:80:6c:eb:01:ee:db: 2a:11:83:59:a5:30:4e:9c:d6:f4:cd:11:67:09:79: 70:e6:07:58:e9:57:35:5b:4f:64:00:1b:10:b1:6e: 71:5e:a8:71:a8:d2:db:55:93:7f:72:7d:f8:38:4d: 45:37:ee:4b:13:f0:47:9f:6a:f6:74:38:aa:70:54: 42:7e:6c:a0:8d:85:c8:d8:fa:a0:9a:b0:56:f0:69: 6f:b7:b3:87:4e:92:2b:8f:51:75:55:fe:07:94:27: 75:13:8d:52:b6:bd:bc:e9:01:02:66:02:1c:9b:ea: a7:48:23:66:56:a2:62:34:85:95:ee:24:bd:b3:36: d0:18:22:41:a7:56:e7:90:8e:b9:81:52:9d:37:1e: 74:6c:44:20:f5:c6:fc:03:0b:80:af:d8:45:9a:6e: bc:76:02:13:cc:56:06:78:8c:65:c3:c0:d8:f4:02: e5:69:43:f1:98:66:da:3f:fb:3d:07:33:98:b5:61: ba:a2:cd:d5:69:d4:5d:a6:75:22:d2:68:0f:df:77: 97:bc:1c:db:8c:66:fe:5b:68:b2:9b:20:84:5b:9b: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F7:CD:EE:72:1A:90:A0:F7:97:1E:6B:E0:57:0F:D5:BD:84:50:34 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c4:60:cb:69:b6:7a:8f:07:71:7f:17:e6:89:ba:2b:06:e8: 3f:2e:e0:60:61:26:dd:00:bf:c5:63:da:da:05:07:30:d1:f5: 7b:4b:bc:92:67:5e:b9:ec:1b:7e:29:d9:dc:24:45:2f:a0:2c: 93:34:4f:29:25:e3:e3:b2:d2:1a:87:58:0b:24:89:12:63:67: b2:30:75:02:dd:1e:b8:f5:70:f3:53:58:82:90:0d:d5:58:22: 32:7f:29:18:d9:37:5e:a5:04:93:5e:29:b1:45:8c:1e:44:fc: d3:c4:cc:47:04:f6:6d:33:28:35:7f:e0:65:d2:3b:86:21:cd: eb:e4:51:20:d4:30:71:b0:20:c2:f7:06:79:40:79:d3:87:69: 23:40:6b:55:a7:06:46:48:f2:7c:80:51:07:a7:fe:07:6d:93: 2b:65:98:ca:c7:36:41:61:ed:fc:f6:c5:8d:fb:62:2f:38:e1: a4:2e:9d:61:42:af:be:2f:4a:5c:78:53:5e:fd:5b:c0:ec:fb: 99:1f:f1:bb:5f:2a:10:c8:2a:55:1c:49:83:46:2d:f9:3f:c1: 25:d7:2c:f5:8b:d6:83:d0:97:6f:3a:6a:a2:8a:c0:8f:22:0d: b2:3b:f7:f8:aa:6c:11:56:9a:e4:c8:7b:05:ba:06:ab:30:fa: ef:1a:ee:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUxMjIwMTgwNzEzWhcNMjUxMjI3MTgwNzEzWjAYMRYwFAYD VQQDDA02OTQ2ZTVkMS1iODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59bNAoDM38NScShVkZQfJiMy6/XwqOgjOD7apBo0unBrwMVIT3GAbOsB7tsq EYNZpTBOnNb0zRFnCXlw5gdY6Vc1W09kABsQsW5xXqhxqNLbVZN/cn34OE1FN+5L E/BHn2r2dDiqcFRCfmygjYXI2PqgmrBW8Glvt7OHTpIrj1F1Vf4HlCd1E41Str28 6QECZgIcm+qnSCNmVqJiNIWV7iS9szbQGCJBp1bnkI65gVKdNx50bEQg9cb8AwuA r9hFmm68dgITzFYGeIxlw8DY9ALlaUPxmGbaP/s9BzOYtWG6os3VadRdpnUi0mgP 33eXvBzbjGb+W2iymyCEW5vD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFf3ze5y GpCg95cea+BXD9W9hFA0MB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRxGDLabZ6jwdxfxfmiborBug/LuBgYSbdAL/FY9raBQcw0fV7S7yS Z1657Bt+KdncJEUvoCyTNE8pJePjstIah1gLJIkSY2eyMHUC3R649XDzU1iCkA3V WCIyfykY2TdepQSTXimxRYweRPzTxMxHBPZtMyg1f+Bl0juGIc3r5FEg1DBxsCDC 9wZ5QHnTh2kjQGtVpwZGSPJ8gFEHp/4HbZMrZZjKxzZBYe389sWN+2IvOOGkLp1h Qq++L0pceFNe/VvA7PuZH/G7XyoQyCpVHEmDRi35P8El1yz1i9aD0JdvOmqiisCP Ig2yO/f4qmwRVprkyHsFugarMPrvGu4U -----END CERTIFICATE-----Generated at Sun Dec 21 04:46:40 2025 by rpki-client