This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft File: -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json) Hash identifier: D4H393BU4zqDSHqH9j5k14eVSDUSxJM7lFYmmop2u3Y= Subject key identifier: 51:DB:E6:93:D3:AE:B0:89:AA:26:D3:E7:F9:E6:66:CA:35:E1:C0:E9 Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 Certificate issuer: /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft Manifest number: 08FE Signing time: Thu 18 Dec 2025 21:08:00 +0000 Manifest this update: Thu 18 Dec 2025 21:07:59 +0000 Manifest next update: Thu 25 Dec 2025 21:07:59 +0000 Files and hashes: 1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: Itgi6+aanofz0YjJdVMpHypgm9/TqFpgFNZ2OK5FzO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Validity Not Before: Dec 18 21:07:59 2025 GMT Not After : Dec 25 21:07:59 2025 GMT Subject: CN=69446d30-1911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:bf:4d:e6:d9:6b:b8:e8:b5:85:14:2e:1f: d9:fe:d5:02:f6:5a:b3:fe:5d:36:3b:13:56:f3:75: ce:02:3e:33:b5:91:96:eb:8a:50:cc:cd:cf:52:70: cb:90:d8:fa:05:ce:80:b1:37:2b:67:2d:0f:f8:08: 28:68:fc:a8:8f:f9:9e:f0:e0:d6:fe:a8:a1:8a:aa: 16:f6:9b:4d:0a:dc:fd:09:c7:9a:fe:23:20:07:7f: 06:ab:89:27:27:95:1c:ef:70:99:9a:21:09:d5:58: ee:86:f9:14:e8:67:2b:8c:b1:32:a7:2f:ef:5d:94: 21:ab:d2:b9:55:19:85:39:25:5b:55:2d:0c:b9:2e: 7c:bb:ab:bd:05:63:09:1f:65:e5:fb:54:ad:55:e2: 1c:c5:8f:4d:17:58:3b:1f:1d:0e:3f:e2:94:f7:3f: 24:92:13:f3:8a:04:95:2d:d7:a1:e9:33:c7:c0:ab: 71:ab:99:61:a2:ed:b3:2a:16:ad:6e:ea:48:c4:2c: 64:9a:a1:ef:bc:53:05:91:c4:51:35:55:1f:4d:64: f3:66:76:c4:39:e4:01:23:19:0d:85:6f:4f:74:50: ea:4d:a2:2f:e3:ec:4f:ff:a9:0c:87:2b:b4:3c:ba: 70:cf:d2:70:97:a9:69:39:50:9a:4e:c9:bf:de:c5: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:E6:93:D3:AE:B0:89:AA:26:D3:E7:F9:E6:66:CA:35:E1:C0:E9 X509v3 Authority Key Identifier: keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:3b:61:2b:8c:32:20:5e:e2:b2:99:29:ca:17:45:3f:bb:96: 88:f9:10:d8:57:32:96:98:89:78:32:3d:25:fa:13:7a:77:48: be:3f:a2:22:7a:0c:92:36:ff:7e:d2:12:ab:57:a7:1f:0d:28: 45:8d:fd:80:91:0d:e1:78:96:cf:78:f5:c5:bf:ba:62:6d:1b: 14:00:cb:cf:ae:be:0e:32:b0:ff:9a:b6:eb:67:5c:28:78:cf: ed:13:0f:75:a9:52:12:48:a9:6c:5f:60:65:c6:0b:27:78:76: 69:39:bc:86:a0:62:49:b8:09:af:be:68:54:3b:f6:a4:c3:ea: a7:e2:89:ec:ff:7b:2b:d2:f2:ab:46:a9:ab:47:aa:8c:6f:97: 82:d9:03:12:78:a6:4c:2a:f3:28:5c:c7:75:0c:99:91:9c:a8: 83:53:ae:1d:98:77:38:65:bc:93:6c:e9:9a:5b:a7:3c:d0:8b: a3:0f:ed:51:9a:05:48:92:b8:5f:9c:fb:9c:14:d2:62:9f:6c: 1a:a5:a0:32:80:3e:c7:67:23:35:b8:ce:a9:63:94:93:62:c8: 98:62:ce:7c:84:b9:17:97:27:b7:ee:94:76:77:33:1f:6c:d9: 65:fb:b1:1b:24:61:5e:e8:62:be:d5:f0:19:80:a4:2c:54:e8: 56:86:17:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKEZBRDlCOTM3NzdEMENFQkEyQkI3QTZCNzhENTA3Rjc3 OTA5MjFDMDYwHhcNMjUxMjE4MjEwNzU5WhcNMjUxMjI1MjEwNzU5WjAYMRYwFAYD VQQDDA02OTQ0NmQzMC0xOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlm/TebZa7jotYUULh/Z/tUC9lqz/l02OxNW83XOAj4ztZGW64pQzM3PUnDL kNj6Bc6AsTcrZy0P+AgoaPyoj/me8ODW/qihiqoW9ptNCtz9Ccea/iMgB38Gq4kn J5Uc73CZmiEJ1VjuhvkU6GcrjLEypy/vXZQhq9K5VRmFOSVbVS0MuS58u6u9BWMJ H2Xl+1StVeIcxY9NF1g7Hx0OP+KU9z8kkhPzigSVLdeh6TPHwKtxq5lhou2zKhat bupIxCxkmqHvvFMFkcRRNVUfTWTzZnbEOeQBIxkNhW9PdFDqTaIv4+xP/6kMhyu0 PLpwz9Jwl6lpOVCaTsm/3sXvxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHb5pPT rrCJqibT5/nmZso14cDpMB8GA1UdIwQYMBaAFPrZuTd30M66K7emt41Qf3eQkhwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG Q0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpyb3J0NmEzalZCX2Q1Q1NI QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10bTVOM2ZRenJvcnQ2YTNqVkJfZDVDU0hBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpy b3J0NmEzalZCX2Q1Q1NIQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVO2ErjDIgXuKymSnKF0U/u5aI+RDYVzKWmIl4Mj0l+hN6d0i+P6Ii egySNv9+0hKrV6cfDShFjf2AkQ3heJbPePXFv7pibRsUAMvPrr4OMrD/mrbrZ1wo eM/tEw91qVISSKlsX2BlxgsneHZpObyGoGJJuAmvvmhUO/akw+qn4ons/3sr0vKr RqmrR6qMb5eC2QMSeKZMKvMoXMd1DJmRnKiDU64dmHc4ZbyTbOmaW6c80IujD+1R mgVIkrhfnPucFNJin2wapaAygD7HZyM1uM6pY5STYsiYYs58hLkXlye37pR2dzMf bNll+7EbJGFe6GK+1fAZgKQsVOhWhhcM -----END CERTIFICATE-----Generated at Fri Dec 19 17:35:32 2025 by rpki-client