This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft File: 5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json) Hash identifier: uppOPy8xMzCi1E/LOjz10SLB9Kr/UtKE1dbjdQrn7EA= Subject key identifier: F7:27:F3:6C:8E:C7:0D:EB:C7:19:D2:2C:AC:AD:B9:47:8E:B9:BE:5D Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 Certificate issuer: /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft Manifest number: 34F0 Signing time: Sun 28 Dec 2025 14:37:31 +0000 Manifest this update: Sun 28 Dec 2025 14:37:31 +0000 Manifest next update: Sun 04 Jan 2026 14:37:31 +0000 Files and hashes: 1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: YzAN7FQ+T73I56d+Jv2kU8VN2LKxr0kfBaFStgwhXLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 14:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Validity Not Before: Dec 28 14:37:31 2025 GMT Not After : Jan 4 14:37:31 2026 GMT Subject: CN=695140ab-0dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:45:05:00:c2:c2:4e:c4:bb:a6:ed:bd:03: c3:9e:61:84:8e:e6:af:80:f8:74:a3:f5:c2:02:55: e0:0f:0e:7d:20:a9:e0:b1:ba:20:05:80:2c:54:9b: 00:c6:3d:8e:51:b5:b6:b3:e3:f8:35:c4:7e:19:28: 5f:67:cd:c1:cd:ee:9d:73:6e:d8:0d:e6:ed:f6:df: 40:7e:b0:a7:d3:3f:72:7b:d8:a4:b0:eb:a3:90:17: b6:2d:f8:4c:eb:83:71:ea:e5:15:3b:84:85:71:81: 8d:7b:43:2b:68:07:a1:7c:a2:22:22:85:52:ac:98: 17:c1:f0:97:94:4c:4e:3c:0d:1f:f2:47:bb:d0:aa: c8:1b:9b:42:ac:5a:be:4c:21:8f:c0:74:5c:65:23: f6:6d:30:fd:8e:38:19:ff:24:11:63:49:14:e3:e4: 72:d8:aa:ee:e2:ba:bc:09:cd:7a:32:a5:9c:00:f2: 56:c7:f6:e1:be:5a:96:fc:9f:cf:b3:69:d5:e9:8a: d9:37:f7:3e:ce:63:e5:c7:b7:33:e1:84:be:c9:68: 59:ac:a8:6a:ea:1c:c8:7b:77:57:5b:c3:28:b5:19: cd:79:67:61:e9:b4:46:2c:ea:1c:d2:01:19:04:82: 0d:25:45:01:28:64:91:ad:4c:63:27:cf:cc:9a:9b: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:27:F3:6C:8E:C7:0D:EB:C7:19:D2:2C:AC:AD:B9:47:8E:B9:BE:5D X509v3 Authority Key Identifier: keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:25:90:1e:8a:cf:32:04:a9:c2:cf:2b:ad:52:83:1a:f8:39: 9c:c1:04:f8:28:91:54:76:1e:66:97:cd:9f:d7:2b:9c:53:4e: cb:73:72:a2:0f:32:00:30:b2:21:27:ab:6f:37:cb:2f:c1:eb: 7b:d5:c7:6e:c0:0e:76:62:a7:b6:03:6c:d7:5a:76:de:c7:9c: 5b:d9:e8:3c:f1:de:d7:e6:9d:b4:f1:d6:a7:45:c6:3c:4c:f3: 58:be:9d:02:82:77:04:f7:ef:14:b6:f2:cb:4a:0a:03:ab:94: 16:53:63:fd:4d:f2:a8:08:9c:8d:45:4a:1c:6c:f8:c3:b1:67: f7:9d:b2:64:8c:63:81:6d:f4:2d:2a:df:eb:da:a7:92:87:59: 18:1c:1c:85:20:77:ee:69:cd:99:bb:bd:e9:7e:1b:41:27:90: e3:1b:bc:e8:52:41:ef:36:e7:bf:14:76:ac:e6:8f:3f:92:5b: a6:e2:c8:44:0b:b7:48:ea:3d:7e:bd:8b:ff:14:a1:54:16:4d: b6:05:52:e7:fe:3d:14:54:c5:ad:36:8a:e8:04:d3:20:e3:f0: 4d:4d:c8:dd:9e:89:53:46:64:94:6c:b8:76:66:4e:2d:24:f2: b9:d9:ad:00:f2:ab:0a:b0:dd:24:a1:04:ca:a3:98:e8:ec:73: 33:e7:67:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBQUYxMTAvBgNVBAUTKEU0Q0E2NUI4RDBDN0IxNjVEOUMyMkE3QUJERjgxQUE2 NkZBQUQ0RDEwHhcNMjUxMjI4MTQzNzMxWhcNMjYwMTA0MTQzNzMxWjAYMRYwFAYD VQQDDA02OTUxNDBhYi0wZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7BFBQDCwk7Eu6btvQPDnmGEjuavgPh0o/XCAlXgDw59IKngsbogBYAsVJsA xj2OUbW2s+P4NcR+GShfZ83Bze6dc27YDebt9t9AfrCn0z9ye9iksOujkBe2LfhM 64Nx6uUVO4SFcYGNe0MraAehfKIiIoVSrJgXwfCXlExOPA0f8ke70KrIG5tCrFq+ TCGPwHRcZSP2bTD9jjgZ/yQRY0kU4+Ry2Kru4rq8Cc16MqWcAPJWx/bhvlqW/J/P s2nV6YrZN/c+zmPlx7cz4YS+yWhZrKhq6hzIe3dXW8MotRnNeWdh6bRGLOoc0gEZ BIINJUUBKGSRrUxjJ8/MmpvMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcn82yO xw3rxxnSLKytuUeOub5dMB8GA1UdIwQYMBaAFOTKZbjQx7Fl2cIqer34GqZvqtTR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFBRi9GM0YxOEIyQzFE OEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNXWFp3aXA2dmZnYXBtLXEx TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVNcGx1TkRIc1dYWndpcDZ2ZmdhcG0tcTFORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFBRi9GM0YxOEIyQzFEOEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNX WFp3aXA2dmZnYXBtLXExTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMJZAeis8yBKnCzyutUoMa+DmcwQT4KJFUdh5ml82f1yucU07Lc3Ki DzIAMLIhJ6tvN8svwet71cduwA52Yqe2A2zXWnbex5xb2eg88d7X5p208danRcY8 TPNYvp0CgncE9+8UtvLLSgoDq5QWU2P9TfKoCJyNRUocbPjDsWf3nbJkjGOBbfQt Kt/r2qeSh1kYHByFIHfuac2Zu73pfhtBJ5DjG7zoUkHvNue/FHas5o8/klum4shE C7dI6j1+vYv/FKFUFk22BVLn/j0UVMWtNoroBNMg4/BNTcjdnolTRmSUbLh2Zk4t JPK52a0A8qsKsN0koQTKo5jo7HMz52d3 -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:20 2025 by rpki-client