This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: i2jvJoWD5sy5PV/D+vnv96KOrc8Bjm8bJLcyiFbZAU4= Subject key identifier: D5:0E:F8:52:57:80:74:7A:71:80:2D:74:72:A6:0C:61:AA:DC:E9:D7 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 0A31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 0A29 Signing time: Mon 22 Dec 2025 19:10:33 +0000 Manifest this update: Mon 22 Dec 2025 19:10:32 +0000 Manifest next update: Mon 29 Dec 2025 19:10:32 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: UwJ0kcl+cIRRhAdFM4kBfsK0EFOPrTEeA7tLiDx+mJQ=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Dec 22 19:10:32 2025 GMT Not After : Dec 29 19:10:32 2025 GMT Subject: CN=694997a9-9dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:54:1b:60:49:7d:22:9a:59:b2:33:f8:0e: e2:e4:e6:79:41:96:74:b8:46:1c:5b:8f:10:07:27: ff:db:34:31:70:0c:86:2b:b5:68:f7:98:40:f1:54: 7d:99:dd:41:e6:20:5e:65:a9:49:9c:09:ad:de:35: ce:1d:26:93:d6:38:80:d5:0f:79:6d:cd:fb:82:fb: c1:5e:31:08:33:d9:21:15:43:be:f3:38:64:73:88: 27:2b:cc:ff:09:1f:0f:42:dd:7c:d5:25:87:6a:b7: 6d:9f:74:ac:5b:5f:c0:ad:77:1e:13:7d:5e:03:1b: d4:0f:28:a0:29:b7:b1:aa:b8:32:84:22:ac:ea:71: 3e:19:4a:1b:17:e6:c7:fc:05:ff:75:5b:11:65:c5: f1:33:da:b8:45:3f:34:29:01:59:c3:89:ad:9c:0e: 13:05:20:29:2e:89:bf:40:f9:c4:c7:93:59:10:ca: 70:0e:3e:47:99:9b:ea:d4:f9:dc:1c:e6:c8:1c:80: 11:9a:24:cf:9f:0a:24:27:4f:18:a3:ea:8b:1f:3f: 0d:6a:91:d9:28:a1:26:2b:52:19:00:df:54:41:2c: e7:f9:0a:42:67:54:52:81:42:b3:d3:31:dd:f6:62: a5:23:35:b3:e7:df:1b:27:bb:1c:fb:70:da:b4:bc: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:F8:52:57:80:74:7A:71:80:2D:74:72:A6:0C:61:AA:DC:E9:D7 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4d:77:bd:38:bd:5e:d0:e8:47:7c:81:8b:f1:5b:71:d1:10: 12:f4:0c:ca:92:1e:cd:1d:86:5a:c7:9d:7e:24:42:96:94:5a: 70:81:61:b4:6d:8c:34:30:88:8c:db:b0:6c:cb:81:71:95:c4: 17:d4:2e:7f:85:50:fb:d9:e5:7c:81:63:84:cb:05:42:c3:a9: 7d:5b:d8:b3:78:74:42:47:ce:9a:4c:e1:ae:99:ce:82:ce:ab: 23:33:57:f4:b4:05:86:35:f7:e5:e4:26:02:0f:03:57:37:98: 79:81:16:7c:b7:a3:8f:26:14:f6:ec:3d:93:c0:f2:6c:12:f6: c1:d4:8e:68:3e:24:45:f4:e1:e4:7e:8c:76:08:6f:69:c2:e1: a3:2c:8f:65:ca:3c:a8:d2:cf:b7:a8:38:ea:98:09:5c:ff:cc: 43:9a:d5:c4:31:a9:ee:7b:07:79:f7:51:0d:18:a4:9d:60:e9: 3a:18:8c:2e:47:3b:97:c3:1b:a8:45:5f:68:d0:78:22:48:0e: 0f:77:e2:58:37:9a:69:8a:f4:cc:7b:1b:be:b4:cc:bb:a5:b0: 66:81:c1:6e:fc:e4:37:1e:1b:7d:c6:f3:84:b1:96:04:1c:62: 4d:7e:cb:ee:df:67:c4:73:fb:f2:f8:56:84:e1:17:be:e0:ef: ad:57:d9:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUxMjIyMTkxMDMyWhcNMjUxMjI5MTkxMDMyWjAYMRYwFAYD VQQDDA02OTQ5OTdhOS05ZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5RUG2BJfSKaWbIz+A7i5OZ5QZZ0uEYcW48QByf/2zQxcAyGK7Vo95hA8VR9 md1B5iBeZalJnAmt3jXOHSaT1jiA1Q95bc37gvvBXjEIM9khFUO+8zhkc4gnK8z/ CR8PQt181SWHardtn3SsW1/ArXceE31eAxvUDyigKbexqrgyhCKs6nE+GUobF+bH /AX/dVsRZcXxM9q4RT80KQFZw4mtnA4TBSApLom/QPnEx5NZEMpwDj5HmZvq1Pnc HObIHIARmiTPnwokJ08Yo+qLHz8NapHZKKEmK1IZAN9UQSzn+QpCZ1RSgUKz0zHd 9mKlIzWz598bJ7sc+3DatLyA1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUO+FJX gHR6cYAtdHKmDGGq3OnXMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlTXe9OL1e0OhHfIGL8Vtx0RAS9AzKkh7NHYZax51+JEKWlFpwgWG0 bYw0MIiM27Bsy4FxlcQX1C5/hVD72eV8gWOEywVCw6l9W9izeHRCR86aTOGumc6C zqsjM1f0tAWGNffl5CYCDwNXN5h5gRZ8t6OPJhT27D2TwPJsEvbB1I5oPiRF9OHk fox2CG9pwuGjLI9lyjyo0s+3qDjqmAlc/8xDmtXEManuewd591ENGKSdYOk6GIwu RzuXwxuoRV9o0HgiSA4Pd+JYN5ppivTMexu+tMy7pbBmgcFu/OQ3Hht9xvOEsZYE HGJNfsvu32fEc/vy+FaE4Re+4O+tV9nZ -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:33 2025 by rpki-client