This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: VngSzDTSghhGVPynbrwyad32N2RlcCefZlBhbYS3s1Y= Subject key identifier: EE:C6:D3:F1:39:CB:3E:9D:91:8D:BC:22:DF:6E:9E:EF:FB:2B:E8:90 Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 017A Signing time: Thu 01 Jan 2026 03:23:50 +0000 Manifest this update: Thu 01 Jan 2026 03:23:50 +0000 Manifest next update: Thu 08 Jan 2026 03:23:50 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: v4VtNVrfFfgfvDAVacejdIE+nANM/FVtkc+cnV3avRk=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: EH9Ecs3l16GCiHR30STE9VxjfuPqLau85IhtMpZldhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 03:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Jan 1 03:23:50 2026 GMT Not After : Jan 8 03:23:50 2026 GMT Subject: CN=6955e8c6-be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b3:51:2c:54:57:9b:3b:4b:3c:17:d5:3d:10: a5:ed:a0:ea:10:a4:d7:42:9d:eb:ff:83:7a:a6:bb: 63:c2:5b:64:b1:21:d7:fa:0d:93:60:66:93:58:4e: 99:12:a5:1b:23:17:ea:57:14:2e:e5:97:40:94:33: dd:d1:2e:82:af:15:4f:85:64:ef:23:12:f9:a4:aa: ff:87:20:0d:21:6d:67:90:1e:40:2e:15:b4:1c:ec: 5a:c1:a2:b6:60:d5:10:38:3a:5a:f2:af:76:64:5d: 28:1f:18:45:ed:c8:b0:e4:05:de:29:12:41:53:73: 09:75:30:cf:d8:68:e8:94:28:e9:0c:ad:00:2c:14: c9:98:54:92:a1:76:3b:29:44:87:55:53:5a:b3:3b: be:8a:e6:a5:41:ac:47:5f:f0:b7:e6:9e:a6:d2:33: 28:47:1d:72:00:4e:13:4c:0f:b0:7c:62:ce:b9:81: 65:d9:13:74:5f:27:e1:d2:bd:2f:5e:49:fc:1b:9a: 95:04:07:df:2f:c9:95:84:3b:65:92:6e:85:eb:48: a9:3c:46:37:17:4b:22:4d:46:91:38:90:17:f7:6c: 06:27:a6:6c:a3:4e:44:37:df:8c:91:a5:6c:bb:94: 7f:f7:b0:2d:f6:2c:45:f3:a3:47:8b:2e:3e:9c:47: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C6:D3:F1:39:CB:3E:9D:91:8D:BC:22:DF:6E:9E:EF:FB:2B:E8:90 X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c8:9e:2b:b2:79:38:93:82:f2:77:b8:b4:97:4f:f8:0a:91: 3e:63:d7:d6:cb:d4:b7:99:f7:0a:f5:84:b5:2c:7e:40:a0:ce: 53:fe:4a:64:17:7d:20:7b:6e:90:2f:ff:44:a8:df:9f:5a:1c: 73:24:11:b3:0e:23:00:b3:61:b0:9e:e3:ce:a2:ae:78:9a:7e: ef:5d:5a:26:5d:c5:fa:bd:a1:9a:72:a9:41:a9:dc:60:3e:38: b3:8c:57:5b:37:04:35:39:2c:4f:ad:88:89:a6:73:78:40:72: c0:38:5e:9a:4f:ea:c0:5f:f0:d1:24:03:07:26:ba:d4:31:ef: 0d:5d:cf:b4:ca:66:a4:db:ab:b0:c3:8a:6b:2d:53:3c:67:26: 0d:9b:9b:aa:bf:d2:42:fb:53:17:59:0b:c6:33:bc:54:f1:89: d6:b3:48:00:97:94:d0:ec:b0:97:d4:50:d2:da:78:3d:7e:99: af:94:19:9b:45:54:88:3d:0a:67:e6:c7:8b:b3:fa:ee:07:0a: ad:3c:46:63:09:29:23:b3:ff:30:29:78:e2:dc:72:dc:0a:50: 56:4f:9d:86:df:a2:77:4a:7d:df:87:0b:68:82:d8:67:85:34: d2:c8:e6:dd:3a:e7:89:6d:49:75:8b:94:99:01:fe:f3:ee:b4: 50:f4:80:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjYwMTAxMDMyMzUwWhcNMjYwMTA4MDMyMzUwWjAYMRYwFAYD VQQDDA02OTU1ZThjNi1iZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rNRLFRXmztLPBfVPRCl7aDqEKTXQp3r/4N6prtjwltksSHX+g2TYGaTWE6Z EqUbIxfqVxQu5ZdAlDPd0S6CrxVPhWTvIxL5pKr/hyANIW1nkB5ALhW0HOxawaK2 YNUQODpa8q92ZF0oHxhF7ciw5AXeKRJBU3MJdTDP2GjolCjpDK0ALBTJmFSSoXY7 KUSHVVNaszu+iualQaxHX/C35p6m0jMoRx1yAE4TTA+wfGLOuYFl2RN0Xyfh0r0v Xkn8G5qVBAffL8mVhDtlkm6F60ipPEY3F0siTUaROJAX92wGJ6Zso05EN9+MkaVs u5R/97At9ixF86NHiy4+nEfFgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7G0/E5 yz6dkY28It9unu/7K+iQMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVyJ4rsnk4k4Lyd7i0l0/4CpE+Y9fWy9S3mfcK9YS1LH5AoM5T/kpk F30ge26QL/9EqN+fWhxzJBGzDiMAs2GwnuPOoq54mn7vXVomXcX6vaGacqlBqdxg PjizjFdbNwQ1OSxPrYiJpnN4QHLAOF6aT+rAX/DRJAMHJrrUMe8NXc+0ymak26uw w4prLVM8ZyYNm5uqv9JC+1MXWQvGM7xU8YnWs0gAl5TQ7LCX1FDS2ng9fpmvlBmb RVSIPQpn5seLs/ruBwqtPEZjCSkjs/8wKXji3HLcClBWT52G36J3Sn3fhwtogthn hTTSyObdOueJbUl1i5SZAf7z7rRQ9IAf -----END CERTIFICATE-----Generated at Fri Jan 2 17:00:43 2026 by rpki-client