This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: +VDgMIXGW/Fhi2fT7jbt5/RQQO5Bp1IBg/djWegVrAk= Subject key identifier: 6F:1E:5C:63:AE:D9:F4:77:6A:7B:A4:E8:01:88:8C:54:7E:AF:B3:2B Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 0173 Signing time: Fri 19 Dec 2025 03:02:13 +0000 Manifest this update: Fri 19 Dec 2025 03:02:13 +0000 Manifest next update: Fri 26 Dec 2025 03:02:13 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: 0M4GdP2C++fjwKBI8pQBgdQgLNb191asG0tgO3RZe/0=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: EH9Ecs3l16GCiHR30STE9VxjfuPqLau85IhtMpZldhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Dec 19 03:02:13 2025 GMT Not After : Dec 26 03:02:13 2025 GMT Subject: CN=6944c035-5ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:ac:7f:fa:ca:af:65:d5:2b:41:ee:08:78: 90:60:98:3f:ab:51:d8:75:4e:f2:1e:d6:5b:14:d1: 88:9c:12:d2:a3:c1:37:a4:2f:54:ee:89:63:bb:bc: 87:fc:a7:32:09:55:96:8f:cb:ab:bb:56:fc:c4:6f: 1f:9f:1b:15:01:c3:13:47:fb:19:04:88:69:30:9f: 3c:67:11:7d:c0:ce:88:16:5e:c6:84:dc:7f:24:26: 87:73:9a:61:15:1d:85:8a:1a:48:79:25:01:fa:65: bb:9d:c3:7d:ac:b2:23:f3:5c:17:14:cd:34:a3:88: 51:71:05:00:d1:f6:99:11:56:3b:84:8b:5e:5a:5c: de:d0:a4:65:a8:28:d3:23:8e:ad:d3:47:c5:07:e1: ee:0a:b5:be:ef:db:ce:b4:01:f1:89:2b:3c:5c:d6: ba:65:b4:cc:3a:de:ed:d9:be:81:f8:86:b8:19:82: e1:f4:ab:00:b5:09:1d:35:0d:9a:79:fc:c0:a6:5a: b6:6f:81:d0:41:ed:f5:53:36:30:bb:95:92:10:f4: af:43:07:cb:41:60:ab:2f:76:db:21:9b:e0:13:2a: 07:fa:3d:76:88:05:e6:54:2d:69:84:b8:c0:f7:b9: 8e:ae:d1:f0:9d:81:9e:e5:c6:c1:d4:6b:eb:4e:8b: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1E:5C:63:AE:D9:F4:77:6A:7B:A4:E8:01:88:8C:54:7E:AF:B3:2B X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:3e:b3:4c:3e:31:52:49:0b:81:2e:23:a2:48:95:5b:fb:05: c4:b6:6d:f4:95:75:34:d3:86:ad:5f:02:91:ab:81:1b:fd:76: 72:31:ea:9b:20:ab:05:cd:81:5c:56:a6:ba:00:4c:f9:ef:07: 44:d1:c9:60:91:7e:b8:37:b7:f9:d6:60:34:f2:10:01:29:56: 71:eb:ce:dc:1e:e8:b7:c6:86:79:7c:69:8f:3b:90:d1:3e:da: d4:b8:33:90:a6:ea:56:45:c8:a0:e3:b3:db:dc:17:3d:ee:e3: 7e:b2:e3:cd:08:36:b2:f5:f2:1e:50:50:8b:50:52:cb:82:cf: 40:f2:27:1f:ee:a2:3f:85:36:df:d4:c1:05:ed:bd:ab:e3:da: 48:39:c5:27:d6:da:a0:7c:14:b8:a0:c4:4a:c2:50:a0:7f:5d: 55:4e:37:39:df:66:85:db:25:ee:45:a8:99:69:27:e1:08:ae: 21:b0:db:6b:df:ec:9b:61:b2:2e:ea:14:fd:d9:21:19:8f:4a: 99:76:af:92:72:9f:f5:57:91:83:bb:6c:d7:6b:da:fe:0b:b3: f0:0c:fc:7d:c8:bd:c6:a9:6a:9a:b7:ce:b0:28:ef:c1:d9:f5: 98:4f:b0:35:f4:fb:95:8b:1a:33:33:c3:58:44:22:4c:9f:4d: ca:6e:d1:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjUxMjE5MDMwMjEzWhcNMjUxMjI2MDMwMjEzWjAYMRYwFAYD VQQDDA02OTQ0YzAzNS01ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwqsf/rKr2XVK0HuCHiQYJg/q1HYdU7yHtZbFNGInBLSo8E3pC9U7olju7yH /KcyCVWWj8uru1b8xG8fnxsVAcMTR/sZBIhpMJ88ZxF9wM6IFl7GhNx/JCaHc5ph FR2FihpIeSUB+mW7ncN9rLIj81wXFM00o4hRcQUA0faZEVY7hIteWlze0KRlqCjT I46t00fFB+HuCrW+79vOtAHxiSs8XNa6ZbTMOt7t2b6B+Ia4GYLh9KsAtQkdNQ2a efzAplq2b4HQQe31UzYwu5WSEPSvQwfLQWCrL3bbIZvgEyoH+j12iAXmVC1phLjA 97mOrtHwnYGe5cbB1GvrTotW2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8eXGOu 2fR3anuk6AGIjFR+r7MrMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIPrNMPjFSSQuBLiOiSJVb+wXEtm30lXU004atXwKRq4Eb/XZyMeqb IKsFzYFcVqa6AEz57wdE0clgkX64N7f51mA08hABKVZx687cHui3xoZ5fGmPO5DR PtrUuDOQpupWRcig47Pb3Bc97uN+suPNCDay9fIeUFCLUFLLgs9A8icf7qI/hTbf 1MEF7b2r49pIOcUn1tqgfBS4oMRKwlCgf11VTjc532aF2yXuRaiZaSfhCK4hsNtr 3+ybYbIu6hT92SEZj0qZdq+Scp/1V5GDu2zXa9r+C7PwDPx9yL3GqWqat86wKO/B 2fWYT7A19PuVixozM8NYRCJMn03KbtGF -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:45 2025 by rpki-client