This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: QZdLT9bhKjOReNuecbDmu2L/feiMstYLUlUAghe+bMs= Subject key identifier: 4A:09:D0:A3:EC:A7:B0:93:CB:22:3C:8F:4F:A0:DA:6F:51:04:71:61 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1E04 Signing time: Sun 28 Dec 2025 15:54:22 +0000 Manifest this update: Sun 28 Dec 2025 15:54:22 +0000 Manifest next update: Sun 04 Jan 2026 15:54:22 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: cB+Rkeg2s4QqPbNn8OurWv4zbucIe25lhaNdBfq+neg=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 15:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7705 (0x1e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Dec 28 15:54:22 2025 GMT Not After : Jan 4 15:54:22 2026 GMT Subject: CN=695152ae-4e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:8d:16:a6:4d:03:26:72:e3:5d:d0:66:10: 2b:42:27:38:64:d1:6a:d8:a8:39:8d:a9:13:12:97: a0:86:23:1a:c9:5e:dc:80:4c:b5:2f:e3:a9:28:d9: 28:98:62:ec:5a:f2:36:68:3e:34:b5:89:64:40:e0: 1f:b7:35:74:41:9b:39:7b:f3:c0:eb:fc:be:47:96: a1:b4:ff:93:94:cc:38:64:14:09:d0:da:50:ee:0e: d8:58:33:02:96:c4:d0:fd:86:21:63:37:ad:8e:eb: 9c:2d:0d:16:c0:1d:a7:8b:d2:9b:29:95:b6:f4:5f: 90:b1:3f:b4:bd:48:4b:31:0f:08:32:2b:3e:f1:c5: 51:73:7c:1a:c9:7a:f2:ce:8c:c0:16:cc:f0:33:cc: c5:ad:d2:70:aa:b9:f6:09:da:f5:cb:70:ff:8d:e3: fc:97:5f:17:d1:a6:18:39:64:b1:1b:34:99:c8:66: d8:20:e3:7e:9f:a4:81:78:d6:3b:a4:48:08:29:01: 8c:cb:c5:84:33:3d:70:38:6f:67:a6:13:36:bf:d6: da:f7:c9:f5:6f:54:b4:2d:b3:d0:2f:e1:65:29:1c: d9:c7:3f:f7:13:1e:d7:e8:79:2e:35:05:19:c4:ae: fc:80:85:f8:d8:3d:77:0e:59:b4:09:73:f1:e0:72: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:09:D0:A3:EC:A7:B0:93:CB:22:3C:8F:4F:A0:DA:6F:51:04:71:61 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:37:f8:1d:7c:d1:a3:e4:6c:6c:99:bb:96:14:ce:24:94:6e: fd:3b:70:2a:67:c9:da:0d:99:59:ba:0b:a4:2c:78:84:fe:23: 13:b6:96:b3:d5:b4:47:46:83:46:7e:f6:dc:21:28:be:08:e3: 7d:1b:be:6f:cd:90:f5:ee:04:db:9c:50:92:79:ff:75:d2:07: f3:71:85:a5:a3:3f:2c:56:8a:ef:02:84:c7:01:62:ac:ec:f9: 07:ba:d9:8d:79:94:af:a2:18:7c:01:1a:39:8f:4f:50:cc:93: 0e:c5:6b:b8:f1:73:46:df:e8:01:96:6a:84:73:ee:16:bd:3d: 98:24:87:dd:3e:c1:37:2b:2b:b6:ed:8c:86:57:cc:46:ba:cf: d4:14:32:08:2a:b1:bb:2c:9d:e8:c1:77:15:28:e6:9d:92:d9: 68:c3:bf:a9:16:6d:d7:14:b3:0c:60:d8:15:5c:ef:c5:82:79: 2f:f6:ee:88:2b:76:f1:e0:f4:63:90:43:9c:80:b3:be:c5:9a: 38:3e:2b:bf:a8:1d:32:1b:87:7b:df:64:6d:aa:e7:a3:0d:f8: 59:71:a0:08:b8:c3:10:92:82:28:25:75:db:10:66:ec:c2:c1: c0:8d:28:01:24:53:d4:78:9c:ff:db:8d:18:a6:21:78:f8:0c: b9:76:62:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjUxMjI4MTU1NDIyWhcNMjYwMTA0MTU1NDIyWjAYMRYwFAYD VQQDDA02OTUxNTJhZS00ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte6NFqZNAyZy413QZhArQic4ZNFq2Kg5jakTEpeghiMayV7cgEy1L+OpKNko mGLsWvI2aD40tYlkQOAftzV0QZs5e/PA6/y+R5ahtP+TlMw4ZBQJ0NpQ7g7YWDMC lsTQ/YYhYzetjuucLQ0WwB2ni9KbKZW29F+QsT+0vUhLMQ8IMis+8cVRc3wayXry zozAFszwM8zFrdJwqrn2Cdr1y3D/jeP8l18X0aYYOWSxGzSZyGbYION+n6SBeNY7 pEgIKQGMy8WEMz1wOG9nphM2v9ba98n1b1S0LbPQL+FlKRzZxz/3Ex7X6HkuNQUZ xK78gIX42D13Dlm0CXPx4HJVaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoJ0KPs p7CTyyI8j0+g2m9RBHFhMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPN/gdfNGj5GxsmbuWFM4klG79O3AqZ8naDZlZugukLHiE/iMTtpaz 1bRHRoNGfvbcISi+CON9G75vzZD17gTbnFCSef910gfzcYWloz8sVorvAoTHAWKs 7PkHutmNeZSvohh8ARo5j09QzJMOxWu48XNG3+gBlmqEc+4WvT2YJIfdPsE3Kyu2 7YyGV8xGus/UFDIIKrG7LJ3owXcVKOadktlow7+pFm3XFLMMYNgVXO/Fgnkv9u6I K3bx4PRjkEOcgLO+xZo4Piu/qB0yG4d732RtquejDfhZcaAIuMMQkoIoJXXbEGbs wsHAjSgBJFPUeJz/240YpiF4+Ay5dmLX -----END CERTIFICATE-----Generated at Mon Dec 29 22:48:15 2025 by rpki-client