This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: YQSJ1Y0bU6iZ/xFL+l8RGCEyGn8YIANn8f8MOa71N9o= Subject key identifier: B8:91:3E:EB:0D:61:72:07:4E:95:E6:5E:A5:D7:12:36:2B:1D:5B:6A Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 01B3 Signing time: Sun 21 Dec 2025 02:22:28 +0000 Manifest this update: Sun 21 Dec 2025 02:22:28 +0000 Manifest next update: Sun 28 Dec 2025 02:22:28 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: CJYNiLTjGFJMEMOkX9IHJNUvTfFBybgYs2mnOHUjtfk=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: Dec 21 02:22:28 2025 GMT Not After : Dec 28 02:22:28 2025 GMT Subject: CN=694759e4-0f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:73:c8:de:84:ee:34:db:92:3c:dc:0a:7e: 60:a5:09:72:82:f7:1b:94:bb:82:d0:c9:68:4e:b9: ec:e5:fd:24:ab:5d:c4:65:4e:6d:95:c8:54:1c:98: bf:83:2c:7c:de:70:ea:f6:bd:78:c6:da:d3:82:ce: 52:6b:b8:60:fb:06:80:22:b4:11:f9:a0:a2:88:0e: 6c:bc:a6:ab:94:3a:7f:e8:dc:db:80:b9:44:95:8d: d9:3c:c5:f4:b0:43:ed:c8:da:7d:1a:7f:d2:d6:e8: 93:8c:65:9a:ab:8e:b9:4f:e3:f0:28:90:74:58:ae: 74:8b:c9:af:64:c0:bb:49:5d:4f:a9:fb:99:bf:49: 4d:e0:e7:fb:0e:18:19:b0:90:f1:df:e7:8a:dd:39: 68:7d:32:24:a6:45:ab:76:68:c9:3b:2b:1f:57:6f: 5a:dd:37:b9:45:60:23:fd:95:64:e8:4d:70:e7:e1: f8:8f:a4:1f:05:47:b3:16:72:1f:a9:58:05:e9:49: e5:45:b5:7a:fd:5b:a7:13:1e:21:81:df:d9:94:88: 62:42:1a:82:e2:16:d5:80:d1:99:6e:b5:db:a4:c1: 3e:43:5f:c0:6e:05:0b:53:b3:6a:68:23:ce:e2:15: 89:e4:0f:83:b1:56:ca:d0:3c:96:bf:b5:46:53:d2: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:91:3E:EB:0D:61:72:07:4E:95:E6:5E:A5:D7:12:36:2B:1D:5B:6A X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:db:81:a6:26:5b:36:9f:3e:ee:0c:14:34:93:81:a9:46:73: 11:c6:f6:bf:7e:76:60:20:fb:8e:a4:ea:c5:8d:a5:58:a1:6a: 98:d1:80:fb:50:4e:ea:77:a8:26:db:bf:00:f9:23:ae:8a:53: b7:53:6b:19:1a:1f:9e:1c:44:d1:1a:ab:93:47:a8:59:38:0c: 0b:57:2e:ce:1d:68:33:d8:34:6f:99:a2:75:df:02:32:e7:17: bc:09:e6:64:d4:a0:bf:98:d6:b4:9e:1b:88:e1:e2:1b:87:7f: 34:71:46:4e:90:f4:13:89:91:22:d9:c1:24:a3:bd:14:69:e4: 26:0a:01:19:3f:d5:95:cd:fe:2f:ac:a0:bb:56:cf:89:13:99: eb:0f:d9:c6:19:4b:b5:d1:c5:c3:85:af:c0:39:66:2f:59:7f: 5e:31:7a:39:96:5e:11:b6:ed:de:be:ce:81:dd:ef:41:8d:a5: 4b:f4:b0:1b:89:50:9a:62:ed:9f:47:fd:22:6c:41:c8:5f:62: 2d:cb:35:fd:d7:ea:80:b2:ad:06:b5:1a:22:0d:c6:39:9f:56: fc:79:5a:9f:26:d2:e8:c7:ed:cf:84:4a:2d:eb:3c:9b:e8:d9: b9:1d:55:01:ac:88:0f:1f:77:01:2d:fc:12:b8:c2:2f:10:e2: 6c:35:7c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUxMjIxMDIyMjI4WhcNMjUxMjI4MDIyMjI4WjAYMRYwFAYD VQQDDA02OTQ3NTllNC0wZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuClzyN6E7jTbkjzcCn5gpQlygvcblLuC0MloTrns5f0kq13EZU5tlchUHJi/ gyx83nDq9r14xtrTgs5Sa7hg+waAIrQR+aCiiA5svKarlDp/6NzbgLlElY3ZPMX0 sEPtyNp9Gn/S1uiTjGWaq465T+PwKJB0WK50i8mvZMC7SV1PqfuZv0lN4Of7DhgZ sJDx3+eK3TlofTIkpkWrdmjJOysfV29a3Te5RWAj/ZVk6E1w5+H4j6QfBUezFnIf qVgF6UnlRbV6/VunEx4hgd/ZlIhiQhqC4hbVgNGZbrXbpME+Q1/AbgULU7NqaCPO 4hWJ5A+DsVbK0DyWv7VGU9LiCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiRPusN YXIHTpXmXqXXEjYrHVtqMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf24GmJls2nz7uDBQ0k4GpRnMRxva/fnZgIPuOpOrFjaVYoWqY0YD7 UE7qd6gm278A+SOuilO3U2sZGh+eHETRGquTR6hZOAwLVy7OHWgz2DRvmaJ13wIy 5xe8CeZk1KC/mNa0nhuI4eIbh380cUZOkPQTiZEi2cEko70UaeQmCgEZP9WVzf4v rKC7Vs+JE5nrD9nGGUu10cXDha/AOWYvWX9eMXo5ll4Rtu3evs6B3e9BjaVL9LAb iVCaYu2fR/0ibEHIX2ItyzX91+qAsq0GtRoiDcY5n1b8eVqfJtLox+3PhEot6zyb 6Nm5HVUBrIgPH3cBLfwSuMIvEOJsNXyH -----END CERTIFICATE-----Generated at Sun Dec 21 13:45:13 2025 by rpki-client