This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: MMrIdU0y/mpPNUG9eEmsTY1xrkUtt6iBEisrZWVo59w= Subject key identifier: 6A:C4:0A:32:12:D5:5F:CC:91:6B:C1:C7:48:22:F5:58:B8:1C:E6:D0 Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 9F Signing time: Sun 21 Dec 2025 05:33:39 +0000 Manifest this update: Sun 21 Dec 2025 05:33:39 +0000 Manifest next update: Sun 28 Dec 2025 05:33:39 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: l9cGFkHFX/Dp9Y6VUIhrfD/tzpnsyrpVm1Eq5SCY8DU=) 2: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 3: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: z5pNn5MCpBCUyinVeJo6KP/NY4KOLsdKNCmIbn+dSOY=) 4: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: 1OAyMVa0XBUo/ryUsoyI81mxhEqjOM4w6I8EktKs9g0=) 5: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Dec 21 05:33:39 2025 GMT Not After : Dec 28 05:33:39 2025 GMT Subject: CN=694786b3-4664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:5d:8e:ca:8a:f7:ef:e1:b5:ec:08:42:c4: e2:10:dd:7d:3b:61:c6:4f:70:b3:64:2f:28:d0:8b: 64:1a:8c:38:cb:4b:73:50:f2:12:c4:eb:93:5f:b4: 81:c7:32:c6:24:65:7c:8c:80:c8:e8:7e:6e:2c:10: a2:65:7c:c1:4e:ff:44:9a:61:34:4d:d1:45:7f:f3: 77:35:c1:43:4d:cf:98:13:60:24:3b:8b:81:6b:97: 0c:f3:fe:5f:32:44:95:f0:35:9a:a9:4f:82:b5:7c: 00:67:aa:20:93:15:c2:87:4a:09:79:1e:56:18:1c: e0:36:5c:1e:41:d7:0a:27:46:4c:b1:a9:2f:08:37: da:88:54:92:ea:5f:58:89:74:6b:56:52:fb:5f:a2: b8:57:41:60:c2:f2:0a:85:ef:ed:1e:27:18:63:b0: 76:9a:8b:84:12:1e:0d:84:b9:9c:e9:78:9b:30:bd: 8b:a1:c8:0d:7f:2e:a3:f0:4e:8a:82:3c:2d:39:6d: dc:6d:a5:92:62:f5:f3:93:26:e7:29:cb:16:59:49: 75:d4:a2:e5:9b:cb:d7:c6:8a:cd:35:43:60:c6:bd: a3:d2:33:67:1c:44:32:04:1f:2e:5c:97:6e:5b:bb: 45:30:32:cc:19:e8:92:89:8d:f1:b1:4d:9e:c4:6a: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C4:0A:32:12:D5:5F:CC:91:6B:C1:C7:48:22:F5:58:B8:1C:E6:D0 X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:43:a9:c6:96:cd:a3:12:23:c3:fd:53:c6:98:d3:04:04:64: b7:bc:27:70:33:9e:2b:1b:ab:c8:02:1e:03:74:87:a2:e5:3e: c3:93:e4:e5:b2:78:df:b5:80:73:80:60:7d:2f:26:0e:bf:2b: 78:c6:ff:4b:51:cf:06:71:48:69:e0:93:ec:f3:e3:7f:99:1f: 02:3e:26:14:5b:f8:86:2f:59:df:07:69:02:08:9d:55:d1:dc: 85:d5:af:ba:f0:a4:cc:e4:d2:8d:8b:76:af:8e:11:4b:e5:fe: 82:3a:52:cb:67:d3:ff:11:fc:53:fe:dd:b2:3e:d4:80:00:c9: 6f:d2:bf:8f:e6:6c:d7:68:49:c9:47:3a:04:e0:fa:2e:4e:7d: e5:0a:70:bf:e6:8d:16:d6:37:ab:0a:3f:13:40:c3:3f:1b:18: 19:1e:71:10:d9:61:6a:db:de:eb:0e:32:e3:a3:b3:50:ed:5d: 8f:05:00:e6:a9:9f:b3:a9:95:c2:05:50:62:1c:45:27:7f:67: f5:92:cd:d2:77:bd:bd:65:e5:73:bd:ab:2b:1a:91:08:5f:15: 84:6c:53:6d:3b:11:5c:34:c2:56:87:c6:42:e0:6a:a8:66:80: ce:d1:31:65:e0:ed:4a:cc:37:49:c8:04:4d:8a:ed:18:b5:46: 48:17:ff:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF OUM0Njg2QTAwHhcNMjUxMjIxMDUzMzM5WhcNMjUxMjI4MDUzMzM5WjAYMRYwFAYD VQQDDA02OTQ3ODZiMy00NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrddjsqK9+/htewIQsTiEN19O2HGT3CzZC8o0ItkGow4y0tzUPISxOuTX7SB xzLGJGV8jIDI6H5uLBCiZXzBTv9EmmE0TdFFf/N3NcFDTc+YE2AkO4uBa5cM8/5f MkSV8DWaqU+CtXwAZ6ogkxXCh0oJeR5WGBzgNlweQdcKJ0ZMsakvCDfaiFSS6l9Y iXRrVlL7X6K4V0FgwvIKhe/tHicYY7B2mouEEh4NhLmc6XibML2LocgNfy6j8E6K gjwtOW3cbaWSYvXzkybnKcsWWUl11KLlm8vXxorNNUNgxr2j0jNnHEQyBB8uXJdu W7tFMDLMGeiSiY3xsU2exGq/SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrECjIS 1V/MkWvBx0gi9Vi4HObQMB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTgwQy9ERTk4RUFGMEZCNjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkw dDhyR3d4LTRYMEhweEdocUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXQ6nGls2jEiPD/VPGmNMEBGS3vCdwM54rG6vIAh4DdIei5T7Dk+Tl snjftYBzgGB9LyYOvyt4xv9LUc8GcUhp4JPs8+N/mR8CPiYUW/iGL1nfB2kCCJ1V 0dyF1a+68KTM5NKNi3avjhFL5f6COlLLZ9P/EfxT/t2yPtSAAMlv0r+P5mzXaEnJ RzoE4PouTn3lCnC/5o0W1jerCj8TQMM/GxgZHnEQ2WFq297rDjLjo7NQ7V2PBQDm qZ+zqZXCBVBiHEUnf2f1ks3Sd729ZeVzvasrGpEIXxWEbFNtOxFcNMJWh8ZC4Gqo ZoDO0TFl4O1KzDdJyARNiu0YtUZIF/+E -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:13 2025 by rpki-client