This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json) Hash identifier: AIpqK+S3gB/5yKoFvwuuC/PrAd0jzoaQ7MoakdK38Jg= Subject key identifier: 8D:F7:3E:F8:92:90:29:33:53:EC:C9:AA:C5:11:60:7C:7E:9D:59:2A Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E Certificate issuer: /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft Manifest number: 0196 Signing time: Sun 21 Dec 2025 02:42:33 +0000 Manifest this update: Sun 21 Dec 2025 02:42:32 +0000 Manifest next update: Sun 28 Dec 2025 02:42:32 +0000 Files and hashes: 1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: T0fGfjtEZzNHlqOlXBo65ZnYziZ/LHsdjpNJzeACtl4=) 2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: TFl3UUaIvz5mdJOK5oWLRzuJytmWENM4h3ilLWP9+k4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Validity Not Before: Dec 21 02:42:32 2025 GMT Not After : Dec 28 02:42:32 2025 GMT Subject: CN=69475e99-ea92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:0b:a3:c5:b8:99:2f:7c:c4:bb:0b:22:ac: fb:e9:b2:4f:e6:3b:14:ac:ef:fb:44:5b:9b:57:62: 97:44:d7:b7:c1:0c:8b:53:b9:fc:87:ed:b4:56:c1: a7:14:8f:87:1a:13:62:2a:45:0c:8c:1f:2a:6f:1b: 70:cd:98:ee:43:fd:18:2b:a2:aa:4f:0b:88:43:88: 63:52:cf:bd:de:c8:e4:d0:ce:76:17:66:80:76:5b: 40:63:41:34:cd:3a:f7:1e:fa:a8:84:90:7e:ca:66: 1e:a2:b8:6f:60:f7:3e:70:01:2c:b6:e3:5a:b7:bc: 74:b5:f5:34:d2:6b:11:6e:96:ef:1e:d0:8e:73:71: e4:59:b4:ef:00:f1:c3:48:dd:f2:29:03:f1:48:87: c0:0b:fd:b8:fb:53:07:8e:e0:33:04:ee:ce:f2:66: 1e:2b:11:9a:da:32:f6:0e:53:81:da:fc:03:16:46: 38:bf:88:bb:46:39:fe:c5:17:82:67:66:b3:24:24: 13:5d:f3:1a:fa:56:9e:90:43:4b:14:f2:66:8e:0d: f3:9c:1f:d5:a4:60:52:90:4b:13:74:e4:9a:9c:5f: 06:92:b5:a1:b1:91:4c:f8:31:cc:0a:e8:82:ff:79: 5e:29:cb:95:0c:35:4f:f2:06:c0:70:28:15:f7:05: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F7:3E:F8:92:90:29:33:53:EC:C9:AA:C5:11:60:7C:7E:9D:59:2A X509v3 Authority Key Identifier: keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:9c:5f:04:7e:d7:11:92:29:51:e8:66:79:ce:ae:3b:6b:11: 33:66:41:ee:bb:9b:e6:56:b4:85:5a:fd:c1:d7:a3:0e:11:39: 26:5c:39:94:2a:a4:e6:77:22:94:e5:4e:76:10:0d:20:b1:67: ee:8f:49:8c:ba:e5:6c:15:64:38:30:a0:91:30:4e:fc:ac:28: ee:e8:50:b6:11:c4:84:15:f6:4d:0e:a4:2c:bc:e3:9f:e9:1d: 6e:93:9e:61:87:77:1d:4e:4c:c5:d7:c9:07:34:74:06:7b:6a: 74:cd:ff:80:f0:6f:70:87:ad:9a:20:33:a4:41:4c:a9:81:d3: c3:f6:8e:2a:40:83:c5:80:1b:a0:79:1a:69:dd:7a:28:31:15: 93:57:11:ba:dc:51:d1:f8:f2:dd:53:6f:e7:4f:a8:78:b9:38: 9e:08:fd:dc:35:a2:69:8b:c8:8b:dd:de:2a:c8:98:d2:e1:76: 7a:54:27:ab:fd:eb:9b:50:d8:e0:6e:df:59:e0:3f:0b:94:b8: 60:77:90:9d:44:53:a4:e3:53:08:48:aa:c7:d0:54:b7:71:3a: 8a:52:23:6f:02:f5:86:af:e2:f5:ad:6d:c6:ff:27:aa:f9:30: 58:2d:53:54:9c:dc:4f:99:4b:6a:e6:7f:de:6d:42:f6:fe:09: af:5a:be:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2OTYyMURFRTFB RDNGODkwOEUwHhcNMjUxMjIxMDI0MjMyWhcNMjUxMjI4MDI0MjMyWjAYMRYwFAYD VQQDDA02OTQ3NWU5OS1lYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxcLo8W4mS98xLsLIqz76bJP5jsUrO/7RFubV2KXRNe3wQyLU7n8h+20VsGn FI+HGhNiKkUMjB8qbxtwzZjuQ/0YK6KqTwuIQ4hjUs+93sjk0M52F2aAdltAY0E0 zTr3HvqohJB+ymYeorhvYPc+cAEstuNat7x0tfU00msRbpbvHtCOc3HkWbTvAPHD SN3yKQPxSIfAC/24+1MHjuAzBO7O8mYeKxGa2jL2DlOB2vwDFkY4v4i7Rjn+xReC Z2azJCQTXfMa+laekENLFPJmjg3znB/VpGBSkEsTdOSanF8GkrWhsZFM+DHMCuiC /3leKcuVDDVP8gbAcCgV9wVBQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI33PviS kCkzU+zJqsURYHx+nVkqMB8GA1UdIwQYMBaAFObEbJHRLVhaErBVaWId7hrT+JCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTM2Mi83Q0JBNEM0Qzcy NkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdGb1NzRlZwWWgzdUd0UDRr STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVzUnNrZEV0V0ZvU3NGVnBZaDN1R3RQNGtJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdG b1NzRlZwWWgzdUd0UDRrSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+nF8EftcRkilR6GZ5zq47axEzZkHuu5vmVrSFWv3B16MOETkmXDmU KqTmdyKU5U52EA0gsWfuj0mMuuVsFWQ4MKCRME78rCju6FC2EcSEFfZNDqQsvOOf 6R1uk55hh3cdTkzF18kHNHQGe2p0zf+A8G9wh62aIDOkQUypgdPD9o4qQIPFgBug eRpp3XooMRWTVxG63FHR+PLdU2/nT6h4uTieCP3cNaJpi8iL3d4qyJjS4XZ6VCer /eubUNjgbt9Z4D8LlLhgd5CdRFOk41MISKrH0FS3cTqKUiNvAvWGr+L1rW3G/yeq +TBYLVNUnNxPmUtq5n/ebUL2/gmvWr4w -----END CERTIFICATE-----Generated at Mon Dec 22 06:35:03 2025 by rpki-client