This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: 0KSRdfmZsTAbVikBYbl8XyKXwMxe3pIwzJF8DlUW7Ko= Subject key identifier: 85:0E:7A:BC:3B:20:47:B7:5C:5B:68:F5:88:84:D5:FC:6B:FD:DF:D9 Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 01E6 Signing time: Sat 27 Dec 2025 01:50:00 +0000 Manifest this update: Sat 27 Dec 2025 01:49:59 +0000 Manifest next update: Sat 03 Jan 2026 01:49:59 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: ZzhxIr5GBYvIrpXeg5nL8tPMt+BaNGiaaLUNilYfd1E=) 2: 960C9032C72711F0BD856955C4F9AE02.roa (hash: PfnQedwApVfjJ4O5rlVi1EBEAKOdEI6iu/GpGFC7Hzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 01:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Dec 27 01:49:59 2025 GMT Not After : Jan 3 01:49:59 2026 GMT Subject: CN=694f3b48-3fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ff:d6:24:ed:49:7f:ce:43:f7:c4:6c:3a:38: 93:23:26:f2:14:0f:4b:ed:4d:f6:af:db:75:d7:de: ec:f8:af:17:d8:8c:4a:a0:19:6e:99:d9:79:97:ad: 11:ac:50:3d:4f:bb:d6:61:dc:3e:3e:5f:f1:2d:c8: d6:e8:68:a2:3f:47:61:7d:d1:c2:27:51:82:60:20: 35:d9:9f:cb:15:1a:fd:8b:ff:9f:bd:3e:1b:bc:f0: d1:7f:68:c0:90:02:b0:9f:f7:66:ec:4b:5a:ea:86: ec:ab:8c:af:04:9d:47:14:b7:73:e7:0d:06:c9:07: 98:01:19:67:06:ff:00:e6:f1:e1:6c:a6:fd:5d:53: 4a:0f:3f:a0:0a:7c:ab:9a:53:4b:ab:6f:eb:a2:4f: e3:7e:56:4b:c1:1f:8b:62:8c:0f:c9:7c:78:1d:7c: 5d:0f:0b:52:61:89:31:92:83:a3:f7:6b:4c:65:99: 20:28:05:39:c9:a2:d6:c1:28:dd:af:8c:c9:bb:0a: 47:9c:b8:9e:c4:ab:77:9d:52:36:60:94:eb:95:44: f6:66:4f:09:25:ba:b8:2c:a6:1f:e7:33:a0:87:0b: 85:bf:87:58:1a:17:e0:4c:13:50:45:db:ba:56:5b: 0f:9f:8f:3f:eb:a9:7b:c1:ff:07:19:22:fe:8b:71: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0E:7A:BC:3B:20:47:B7:5C:5B:68:F5:88:84:D5:FC:6B:FD:DF:D9 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9b:f1:2c:bb:81:68:e3:15:02:2d:97:6f:55:15:27:bc:79: 18:29:2d:93:2f:35:d6:c4:e4:8d:d0:44:9e:0b:45:4d:b3:82: 9c:bf:5d:bd:34:98:2d:b2:98:36:a7:84:c6:88:62:9f:63:f5: d2:85:f3:76:26:1f:4b:07:89:f9:20:2e:d3:36:2a:38:68:66: 32:f3:03:62:a7:fa:be:aa:ea:4a:bf:a1:30:02:0f:ff:fc:c1: c9:f6:e3:d5:a6:26:7b:9d:7d:3c:fe:e9:23:62:91:c2:e1:54: f7:d9:95:1b:16:50:96:2d:e1:99:0c:a7:9b:2f:b4:3a:11:a6: 0c:25:67:8e:bf:ff:f1:f5:41:de:a9:91:c0:0d:19:73:51:12: 02:13:66:80:4a:44:92:e9:68:44:4c:fc:de:cb:6d:99:fa:16: e9:a2:bb:e5:19:8e:95:5f:b6:19:51:4e:d2:0f:af:ea:bd:a1: b8:92:e2:8f:83:ea:b4:8e:f5:82:2f:9f:7b:55:d4:b5:a5:15: 9c:16:57:35:89:40:8c:19:10:2b:1e:97:cd:85:46:cc:2e:61: 74:dd:14:af:fc:d3:ad:4b:2c:a3:c0:f7:ee:6c:c2:5f:fb:58: 32:dc:fd:51:75:c8:5d:aa:38:66:90:f7:8e:e6:5c:d8:a1:17: b2:f7:f6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUxMjI3MDE0OTU5WhcNMjYwMTAzMDE0OTU5WjAYMRYwFAYD VQQDDA02OTRmM2I0OC0zZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg//WJO1Jf85D98RsOjiTIybyFA9L7U32r9t1197s+K8X2IxKoBlumdl5l60R rFA9T7vWYdw+Pl/xLcjW6GiiP0dhfdHCJ1GCYCA12Z/LFRr9i/+fvT4bvPDRf2jA kAKwn/dm7Eta6obsq4yvBJ1HFLdz5w0GyQeYARlnBv8A5vHhbKb9XVNKDz+gCnyr mlNLq2/rok/jflZLwR+LYowPyXx4HXxdDwtSYYkxkoOj92tMZZkgKAU5yaLWwSjd r4zJuwpHnLiexKt3nVI2YJTrlUT2Zk8JJbq4LKYf5zOghwuFv4dYGhfgTBNQRdu6 VlsPn48/66l7wf8HGSL+i3GJDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUOerw7 IEe3XFto9YiE1fxr/d/ZMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZm/Esu4Fo4xUCLZdvVRUnvHkYKS2TLzXWxOSN0ESeC0VNs4Kcv129 NJgtspg2p4TGiGKfY/XShfN2Jh9LB4n5IC7TNio4aGYy8wNip/q+qupKv6EwAg// /MHJ9uPVpiZ7nX08/ukjYpHC4VT32ZUbFlCWLeGZDKebL7Q6EaYMJWeOv//x9UHe qZHADRlzURICE2aASkSS6WhETPzey22Z+hbporvlGY6VX7YZUU7SD6/qvaG4kuKP g+q0jvWCL597VdS1pRWcFlc1iUCMGRArHpfNhUbMLmF03RSv/NOtSyyjwPfubMJf +1gy3P1RdchdqjhmkPeO5lzYoRey9/b5 -----END CERTIFICATE-----Generated at Sat Dec 27 10:50:06 2025 by rpki-client