This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: izBS20AdDKe+XrXp3qESyI4Kwdqv0Y2lTgRm/pFX3bk= Subject key identifier: D1:52:2B:7B:C8:9F:17:AD:F9:5E:94:3B:39:33:F9:4F:4B:8B:D6:A9 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 0176 Signing time: Sun 21 Dec 2025 03:09:52 +0000 Manifest this update: Sun 21 Dec 2025 03:09:51 +0000 Manifest next update: Sun 28 Dec 2025 03:09:51 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: ctr2PwwxVcbxg3E2fjNX0qDhPyQ/Gx25W1eZqvdWKl4=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Dec 21 03:09:51 2025 GMT Not After : Dec 28 03:09:51 2025 GMT Subject: CN=69476500-0094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:ef:93:91:99:c3:50:c7:b8:ec:10:b0:8f: 6b:2c:eb:ee:5d:da:35:9b:ba:45:4b:6f:87:9b:d3: 92:2c:c4:de:bd:31:ce:1b:ea:b5:a6:08:5b:0f:66: 6b:ac:5f:c6:b1:06:e6:73:07:50:70:2f:ed:fc:45: 5a:7f:92:af:19:5c:c6:74:e0:68:a1:1d:80:d5:78: ba:e4:31:eb:d5:e2:70:5e:ef:a9:15:e9:b6:27:17: 43:80:50:b1:37:10:da:e7:24:b7:d7:ac:5e:e3:ba: bc:6d:d5:2c:1f:59:10:c3:6f:41:c6:15:89:f1:7e: 36:04:6f:94:1e:28:56:89:e2:2a:de:45:20:fd:b7: a0:e1:cd:8b:7d:06:fc:ab:4b:3d:12:7d:9d:76:77: 98:6e:23:72:f7:b4:78:5e:0b:53:ba:b6:3d:c8:fe: e0:36:9e:95:8f:0d:24:a3:2c:df:c9:20:76:38:a5: c4:08:9c:b5:8e:49:9c:45:00:66:f8:c7:86:8e:0f: cc:b8:a8:8e:0a:79:74:15:39:fa:5c:6d:5b:4e:71: 08:2f:1c:9e:e4:db:35:3a:54:af:4a:aa:1b:cc:05: 50:32:2b:8a:79:a0:d0:80:06:e4:9e:08:ec:cb:fd: 76:25:35:de:b8:ce:58:78:87:7f:9d:40:79:60:e1: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:52:2B:7B:C8:9F:17:AD:F9:5E:94:3B:39:33:F9:4F:4B:8B:D6:A9 X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:bc:cc:66:15:c3:35:e4:61:2f:85:01:29:e5:10:eb:ea:3b: 43:ef:3a:74:f5:e4:b1:52:11:63:5c:de:3b:02:be:45:3e:8b: 50:f2:97:ca:38:a8:63:27:46:4a:1a:c7:0e:f6:33:35:51:d1: c8:f8:6f:83:cf:12:c1:a0:8d:c3:97:26:75:3f:e7:d8:08:df: 85:7b:e2:b8:2a:39:cb:f5:f4:52:75:9b:87:d5:c0:93:e4:22: 9c:84:36:e9:5c:17:43:45:54:34:5b:3d:67:22:5c:7c:bd:29: ae:64:a2:4a:56:f4:d8:05:29:f1:b3:d9:d7:9f:b7:cc:45:b4: 94:56:81:37:48:ab:0b:39:f2:ec:b4:99:75:66:24:58:ac:4c: 93:20:09:b8:6a:a8:fd:24:24:42:51:6c:22:38:51:81:8d:aa: 02:12:8f:ba:47:5a:29:af:a9:c5:b5:4e:eb:cb:f5:f4:5d:e4: ff:9b:27:08:0b:b3:8e:bb:f2:6b:65:f3:71:e1:51:f4:45:f3: b7:b1:f0:cf:69:20:97:a8:e6:c9:5c:ed:c0:c9:e1:65:37:4b: 2f:da:76:5a:e3:ab:7f:bf:85:31:27:fe:fb:75:f0:f1:21:2c: 64:eb:b0:f7:8b:58:17:d3:ce:8b:96:44:6e:01:0d:c9:70:37: bb:77:ad:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUxMjIxMDMwOTUxWhcNMjUxMjI4MDMwOTUxWjAYMRYwFAYD VQQDDA02OTQ3NjUwMC0wMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOvvk5GZw1DHuOwQsI9rLOvuXdo1m7pFS2+Hm9OSLMTevTHOG+q1pghbD2Zr rF/GsQbmcwdQcC/t/EVaf5KvGVzGdOBooR2A1Xi65DHr1eJwXu+pFem2JxdDgFCx NxDa5yS316xe47q8bdUsH1kQw29BxhWJ8X42BG+UHihWieIq3kUg/beg4c2LfQb8 q0s9En2ddneYbiNy97R4XgtTurY9yP7gNp6Vjw0koyzfySB2OKXECJy1jkmcRQBm +MeGjg/MuKiOCnl0FTn6XG1bTnEILxye5Ns1OlSvSqobzAVQMiuKeaDQgAbkngjs y/12JTXeuM5YeId/nUB5YOH4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFSK3vI nxet+V6UOzkz+U9Li9apMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwvMxmFcM15GEvhQEp5RDr6jtD7zp09eSxUhFjXN47Ar5FPotQ8pfK OKhjJ0ZKGscO9jM1UdHI+G+DzxLBoI3DlyZ1P+fYCN+Fe+K4KjnL9fRSdZuH1cCT 5CKchDbpXBdDRVQ0Wz1nIlx8vSmuZKJKVvTYBSnxs9nXn7fMRbSUVoE3SKsLOfLs tJl1ZiRYrEyTIAm4aqj9JCRCUWwiOFGBjaoCEo+6R1opr6nFtU7ry/X0XeT/mycI C7OOu/JrZfNx4VH0RfO3sfDPaSCXqObJXO3AyeFlN0sv2nZa46t/v4UxJ/77dfDx ISxk67D3i1gX086LlkRuAQ3JcDe7d60K -----END CERTIFICATE-----Generated at Sun Dec 21 16:00:55 2025 by rpki-client