This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: xDDBWZWV5fMnsDdeXoLL3YCwvBHG7tyrLlThiUWwew4= Subject key identifier: 58:78:74:7E:CB:88:0D:14:9B:A8:B2:C1:DA:59:05:E3:7D:65:C1:C9 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 55 Signing time: Sun 21 Dec 2025 06:21:55 +0000 Manifest this update: Sun 21 Dec 2025 06:21:54 +0000 Manifest next update: Sun 28 Dec 2025 06:21:54 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: dwPS98+cNrbEvdUgOLEC2Tx0ZywE6lxQSBTA3TjZioQ=) 2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: qmzNMDj0eJRO3I+2FONjuUe85vVvjRJp6v99858Vj2M=) 3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: hN1QiGOiu058mqvwkPVN0CGty1GL6SzSs8DlhHm4rnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Dec 21 06:21:54 2025 GMT Not After : Dec 28 06:21:54 2025 GMT Subject: CN=69479203-90b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:8f:7c:19:8c:37:eb:ab:74:8e:78:4c:e8: 78:80:fe:2d:b8:fb:1e:2c:95:50:f1:1b:2a:82:b5: 25:87:8c:61:28:3a:25:67:60:41:ce:d3:f7:c5:68: 54:71:15:60:d5:b8:48:fc:cb:a7:cc:94:c8:25:d6: 5a:20:eb:6a:08:01:85:6d:4c:90:af:cc:fc:df:04: f0:01:8d:1b:50:76:63:6e:ff:b8:84:03:1f:89:da: cd:b6:60:8b:2c:47:45:a3:83:58:a8:d4:51:cb:23: 01:d8:d6:43:a5:fe:49:9a:db:20:7a:5d:7a:4d:1f: 19:45:f7:51:a4:dd:b8:9d:6c:5a:99:53:ff:05:a9: 4b:a6:0f:d1:49:37:17:07:ad:ef:4a:76:92:0d:f6: 81:91:ee:c7:fa:5b:e5:19:36:5a:f0:8c:43:32:b0: 4e:b7:81:16:83:fd:59:ae:eb:1b:2a:54:41:05:d0: 4e:52:e7:b2:3a:9f:f2:76:c9:8c:91:ea:97:3d:63: f5:63:12:c3:22:5d:4b:00:b6:4f:73:35:21:a3:0e: 88:2d:06:15:8f:68:b7:44:0e:b1:45:fd:6c:54:e1: 94:c7:3b:91:4c:bb:45:fd:53:3f:1f:8c:47:d2:37: 72:0c:2d:61:56:bc:4f:18:05:bf:1b:9e:bc:b4:1d: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:74:7E:CB:88:0D:14:9B:A8:B2:C1:DA:59:05:E3:7D:65:C1:C9 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:8c:7c:99:88:71:db:a3:ef:28:96:cc:0d:ed:5d:8d:87: 5e:05:d6:ee:57:e1:7f:34:58:ed:9e:cf:3e:e3:77:64:ca:5b: e6:28:53:17:ee:31:fb:41:13:5f:d4:bf:2a:c8:f2:b8:df:97: 96:a1:3b:d8:14:08:00:0a:a1:d6:f5:9f:cc:c0:9d:e0:aa:5a: 47:ff:f0:c2:16:1b:17:db:6f:fb:72:8c:8d:5f:96:a1:0a:ca: 86:65:ff:2e:b9:bd:86:af:bd:a2:25:86:8e:73:1a:62:b8:87: 16:a5:0f:6c:d2:c1:34:b8:cc:b3:b9:a0:c3:17:6e:d9:8d:ff: 91:95:f5:5a:11:27:93:8a:33:c6:9b:a0:2a:80:38:b7:6c:8f: 61:24:5b:52:02:20:e1:fa:59:36:9d:56:24:c1:84:b5:b0:24: 01:c1:29:3c:a2:6a:e0:cb:ea:5d:ca:ef:ba:e9:13:4b:86:0e: b0:25:fc:d1:33:f0:1b:51:8a:46:99:6e:0f:92:30:02:fe:d7: 37:b0:75:9c:c6:c4:a6:56:c1:f6:1d:29:54:90:b9:66:d4:e6: 04:75:63:f2:0b:e3:4c:b1:17:1c:fb:0f:28:12:f8:c0:c6:00: e5:b1:0b:94:a7:a0:6b:d2:85:6f:8f:f6:1f:75:c5:da:d1:e5: 66:b4:b3:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTEyMjEwNjIxNTRaFw0yNTEyMjgwNjIxNTRaMBgxFjAUBgNV BAMMDTY5NDc5MjAzLTkwYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnoY98GYw366t0jnhM6HiA/i24+x4slVDxGyqCtSWHjGEoOiVnYEHO0/fFaFRx FWDVuEj8y6fMlMgl1log62oIAYVtTJCvzPzfBPABjRtQdmNu/7iEAx+J2s22YIss R0Wjg1io1FHLIwHY1kOl/kma2yB6XXpNHxlF91Gk3bidbFqZU/8FqUumD9FJNxcH re9KdpIN9oGR7sf6W+UZNlrwjEMysE63gRaD/Vmu6xsqVEEF0E5S57I6n/J2yYyR 6pc9Y/VjEsMiXUsAtk9zNSGjDogtBhWPaLdEDrFF/WxU4ZTHO5FMu0X9Uz8fjEfS N3IMLWFWvE8YBb8bnry0HTfJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWHh0fsuI DRSbqLLB2lkF431lwckwHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHm1jHyZiHHbo+8olswN7V2Nh14F1u5X4X80WO2ezz7jd2TKW+YoUxfu MftBE1/UvyrI8rjfl5ahO9gUCAAKodb1n8zAneCqWkf/8MIWGxfbb/tyjI1flqEK yoZl/y65vYavvaIlho5zGmK4hxalD2zSwTS4zLO5oMMXbtmN/5GV9VoRJ5OKM8ab oCqAOLdsj2EkW1ICIOH6WTadViTBhLWwJAHBKTyiauDL6l3K77rpE0uGDrAl/NEz 8BtRikaZbg+SMAL+1zewdZzGxKZWwfYdKVSQuWbU5gR1Y/IL40yxFxz7DygS+MDG AOWxC5SnoGvShW+P9h91xdrR5Wa0s3I= -----END CERTIFICATE-----Generated at Sun Dec 21 11:30:05 2025 by rpki-client