This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: BQePU87h1UoWzo8hd2qah1Wb2kqHgYyIvSR7a/nWoK8= Subject key identifier: 36:E3:73:5A:20:C6:C8:7E:9F:97:93:E8:AA:4D:5E:93:D8:B8:E8:7D Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 56 Signing time: Fri 19 Dec 2025 06:10:46 +0000 Manifest this update: Fri 19 Dec 2025 06:10:46 +0000 Manifest next update: Fri 26 Dec 2025 06:10:46 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: lmpLxvMWfiictQXT08lkhkrx654UctbozcTgXykcxkk=) 2: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) 3: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Dec 19 06:10:46 2025 GMT Not After : Dec 26 06:10:46 2025 GMT Subject: CN=6944ec66-3786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:bf:e7:b9:02:f3:c3:36:87:85:08:fd:43: 29:97:3b:dd:1f:df:9a:38:64:7f:bb:25:f6:9e:c3: 02:1d:a8:7e:f8:f5:c3:6a:0f:f8:10:0b:80:26:20: ba:c6:6e:21:5a:ef:db:b2:4d:dd:78:73:f9:48:54: a0:f6:c5:b8:1d:e1:d1:0b:95:3a:b3:39:35:cb:61: 56:96:9b:ce:a9:c4:e5:4a:69:20:98:cb:ed:bc:ce: 0b:2e:3c:0d:25:b8:c3:89:cb:61:80:2f:c2:ff:f0: fc:d9:bf:5b:ae:94:da:d1:42:22:8f:ed:d2:db:03: d2:cc:af:e2:11:57:b6:90:ff:9c:49:b8:c5:51:0d: 17:b5:42:a9:02:ed:d7:61:20:5d:27:39:80:09:67: 28:af:df:99:02:31:95:95:a4:28:4d:fc:b4:1c:84: e1:86:f4:d3:dc:8b:ca:48:c4:db:b1:c0:d9:6c:e2: 4b:a4:b4:54:95:3a:ab:8b:8a:11:40:de:dd:ed:1b: 82:51:4e:1c:7c:9c:34:43:c3:60:17:23:9d:55:e2: d8:3a:01:bf:53:67:38:7d:de:a7:56:6e:84:9d:4c: ce:93:da:8f:4c:34:eb:9c:91:75:0e:e2:d4:3c:d0: 51:c4:11:2b:0e:31:73:9e:53:b3:dd:c3:95:e0:ac: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E3:73:5A:20:C6:C8:7E:9F:97:93:E8:AA:4D:5E:93:D8:B8:E8:7D X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d7:c5:5f:33:9d:9a:10:6b:3d:d0:46:0f:d1:33:b8:11:1d: ac:f6:dd:92:b0:98:3b:f0:b5:0d:aa:81:a2:28:ce:9f:ac:3d: 88:e4:7b:27:35:2c:61:8e:26:61:d6:07:cf:c4:bf:23:01:d5: 01:9a:60:6c:bf:2f:e2:5a:d6:8c:b8:6d:a2:fc:18:77:e0:d1: 34:55:c9:b2:5c:00:79:b0:ee:ce:ee:e8:2b:94:fc:8b:6e:86: 66:74:7c:fc:a1:3a:ec:c9:a5:31:55:0e:4c:a6:08:ec:e7:81: 9d:f4:03:85:8a:7d:1d:f0:d3:98:a3:77:6d:a9:d8:2c:ec:c0: 3d:0a:1a:7c:25:4b:d6:69:40:c3:18:00:75:d6:29:10:b7:78: c2:1b:7a:d2:ea:3f:cf:f0:16:d1:3a:b3:12:f2:a9:48:38:56: 26:25:65:71:74:aa:99:7e:9e:27:f8:67:9c:a0:de:e6:be:75: 66:17:ac:11:6e:01:80:b4:ba:94:25:63:f4:e2:75:bf:2f:a3: 7e:eb:95:90:59:59:1c:f9:37:29:bf:bb:42:f9:36:85:18:c8: 51:f7:28:1f:f0:ff:c1:1e:d8:37:6b:f6:91:6f:6a:81:15:20: dc:df:fc:7f:79:f4:7a:34:27:a9:5d:7e:33:02:7b:66:95:16: 55:8d:ad:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTEyMTkwNjEwNDZaFw0yNTEyMjYwNjEwNDZaMBgxFjAUBgNV BAMMDTY5NDRlYzY2LTM3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOer/nuQLzwzaHhQj9QymXO90f35o4ZH+7JfaewwIdqH749cNqD/gQC4AmILrG biFa79uyTd14c/lIVKD2xbgd4dELlTqzOTXLYVaWm86pxOVKaSCYy+28zgsuPA0l uMOJy2GAL8L/8PzZv1uulNrRQiKP7dLbA9LMr+IRV7aQ/5xJuMVRDRe1QqkC7ddh IF0nOYAJZyiv35kCMZWVpChN/LQchOGG9NPci8pIxNuxwNls4kuktFSVOquLihFA 3t3tG4JRThx8nDRDw2AXI51V4tg6Ab9TZzh93qdWboSdTM6T2o9MNOuckXUO4tQ8 0FHEESsOMXOeU7Pdw5XgrJNfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNuNzWiDG yH6fl5Poqk1ek9i46H0wHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKjXxV8znZoQaz3QRg/RM7gRHaz23ZKwmDvwtQ2qgaIozp+sPYjkeyc1 LGGOJmHWB8/EvyMB1QGaYGy/L+Ja1oy4baL8GHfg0TRVybJcAHmw7s7u6CuU/Itu hmZ0fPyhOuzJpTFVDkymCOzngZ30A4WKfR3w05ijd22p2CzswD0KGnwlS9ZpQMMY AHXWKRC3eMIbetLqP8/wFtE6sxLyqUg4ViYlZXF0qpl+nif4Z5yg3ua+dWYXrBFu AYC0upQlY/Tidb8vo37rlZBZWRz5Nym/u0L5NoUYyFH3KB/w/8Ee2Ddr9pFvaoEV INzf/H959Ho0J6ldfjMCe2aVFlWNrWY= -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:28 2025 by rpki-client