This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: cWnhDf9emyvzwA9Kr7GfBNXh8rXLsA7t4sbZe0kGfsw= Subject key identifier: DA:53:A2:91:2E:AF:E3:86:B7:3F:14:DB:89:79:9E:F7:A4:C7:C0:3D Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 196A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 1931 Signing time: Mon 22 Dec 2025 16:13:32 +0000 Manifest this update: Mon 22 Dec 2025 16:13:31 +0000 Manifest next update: Mon 29 Dec 2025 16:13:31 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: SUSCqsSYog5OiTkaF2n56AXbijXvNtjKAZZLdu0SiCg=) 2: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: CSY6qOROtmw30A6xQccy8vmsJfZI5dJ5MZbhg1cI3+o=) 3: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: R8XRFOIDeyA0zkEPG1aEWumISmv4uchl7mAPbuAAI+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6506 (0x196a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Dec 22 16:13:31 2025 GMT Not After : Dec 29 16:13:31 2025 GMT Subject: CN=69496e2c-9b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:8a:22:f2:a3:b2:80:aa:21:f1:0e:52:dd: 9e:6f:d4:92:e2:7f:b6:bb:0c:bd:61:4a:b0:14:b2: cd:6b:8e:b6:6e:03:02:f3:93:9a:2e:6f:be:b7:c2: ef:ad:f1:c4:8d:24:c3:84:12:e0:d5:70:0a:ee:2f: d5:22:6a:aa:29:0b:2a:3a:0b:bc:a8:45:ab:f1:2a: cd:bb:76:03:5d:9d:51:f4:73:71:7c:bf:4a:7b:30: 31:33:8b:2a:fd:06:e2:8b:f8:3d:8f:f7:bf:04:81: d8:1e:d4:a5:51:67:db:5d:d6:d1:25:0c:aa:07:91: 52:88:55:e9:f6:14:9e:e4:c6:ac:ff:9f:11:da:c6: a2:93:cd:fb:5c:23:a3:d7:78:6a:5a:b6:be:99:58: 0f:4f:57:48:a0:2c:3c:21:64:bf:98:1b:e6:c9:ef: aa:f2:e4:40:1c:b1:20:d1:de:2d:bd:53:61:6a:eb: 1e:73:15:7a:d0:c3:03:d5:f0:fe:f8:40:b3:0b:e9: 67:1c:e5:dc:97:c1:8a:5a:3c:06:fe:ed:b8:bf:1a: e3:62:37:03:c7:2e:4d:79:ef:02:78:a7:25:f7:1f: 8d:0f:44:82:1c:7b:c5:70:bb:41:bb:be:44:4b:e0: 46:15:1f:e3:d5:ab:73:6f:06:e9:8f:ff:45:24:d0: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:53:A2:91:2E:AF:E3:86:B7:3F:14:DB:89:79:9E:F7:A4:C7:C0:3D X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b0:f5:d2:05:e7:a4:bd:ca:60:4f:33:60:7e:b8:e0:cb:cf: 4d:19:31:08:51:f6:65:b0:72:3a:eb:a8:04:30:1c:29:92:c5: 95:38:ba:a6:82:70:51:50:7d:f8:92:a7:09:b2:4e:64:f3:53: e8:65:56:c7:1a:b2:70:7c:28:55:17:2b:76:ba:8d:1b:ef:71: c3:f7:f5:ce:8f:67:b7:c8:48:9b:d9:d2:19:33:ba:a2:d9:11: ee:a3:47:0a:23:73:27:a3:aa:59:f3:cd:2b:5b:bf:d7:18:ed: a7:62:c6:d8:9a:59:de:29:5f:13:9c:17:69:d5:fe:59:35:ef: 22:96:86:92:91:8f:c7:b9:ff:09:54:f2:d6:89:42:91:10:62: 7f:e9:87:9b:3f:57:4a:fd:21:61:80:05:ec:46:ea:ee:59:11: d6:22:55:55:0c:43:97:00:19:d2:52:03:60:d5:d0:25:e2:5a: 84:cc:9c:53:bf:96:1a:9b:a3:81:02:97:4d:98:b3:e3:4c:13: 03:1e:e1:6c:c1:8e:e7:4d:a2:a1:f5:1a:41:1e:ec:ec:41:6d: d9:fe:e5:b7:9b:ba:98:0e:2b:2a:db:15:ba:69:71:46:33:a7: 8e:77:d5:1b:0f:e0:3e:ff:b7:da:26:9f:66:43:48:06:3c:8e: 29:c9:3c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUxMjIyMTYxMzMxWhcNMjUxMjI5MTYxMzMxWjAYMRYwFAYD VQQDDA02OTQ5NmUyYy05YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSmKIvKjsoCqIfEOUt2eb9SS4n+2uwy9YUqwFLLNa462bgMC85OaLm++t8Lv rfHEjSTDhBLg1XAK7i/VImqqKQsqOgu8qEWr8SrNu3YDXZ1R9HNxfL9KezAxM4sq /Qbii/g9j/e/BIHYHtSlUWfbXdbRJQyqB5FSiFXp9hSe5Mas/58R2saik837XCOj 13hqWra+mVgPT1dIoCw8IWS/mBvmye+q8uRAHLEg0d4tvVNhausecxV60MMD1fD+ +ECzC+lnHOXcl8GKWjwG/u24vxrjYjcDxy5Nee8CeKcl9x+ND0SCHHvFcLtBu75E S+BGFR/j1atzbwbpj/9FJNDSKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpTopEu r+OGtz8U24l5nvekx8A9MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBosPXSBeekvcpgTzNgfrjgy89NGTEIUfZlsHI666gEMBwpksWVOLqm gnBRUH34kqcJsk5k81PoZVbHGrJwfChVFyt2uo0b73HD9/XOj2e3yEib2dIZM7qi 2RHuo0cKI3Mno6pZ880rW7/XGO2nYsbYmlneKV8TnBdp1f5ZNe8iloaSkY/Huf8J VPLWiUKREGJ/6YebP1dK/SFhgAXsRuruWRHWIlVVDEOXABnSUgNg1dAl4lqEzJxT v5Yam6OBApdNmLPjTBMDHuFswY7nTaKh9RpBHuzsQW3Z/uW3m7qYDisq2xW6aXFG M6eOd9UbD+A+/7faJp9mQ0gGPI4pyTxk -----END CERTIFICATE-----Generated at Mon Dec 22 18:59:43 2025 by rpki-client