This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: CNwRwPH2IjObDsluHwIgbXE9cP0+lsprQqtoHtLC5eM= Subject key identifier: 12:E0:80:9E:51:81:49:53:64:5A:FD:1F:05:27:CC:6C:52:84:C5:73 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 123C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 1227 Signing time: Wed 31 Dec 2025 16:54:54 +0000 Manifest this update: Wed 31 Dec 2025 16:54:53 +0000 Manifest next update: Wed 07 Jan 2026 16:54:53 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: SXpVeWHFOX5byJ6/jO09VYUv63zN0U7vMfyftUoFahM=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4668 (0x123c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Dec 31 16:54:53 2025 GMT Not After : Jan 7 16:54:53 2026 GMT Subject: CN=6955555d-8ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:f0:81:62:eb:f9:42:3f:77:15:e6:76:5d: e9:8c:95:89:18:4f:8e:21:6d:e8:a1:69:c0:a5:0f: 50:f1:ba:8e:ee:56:06:02:1c:a4:c5:6a:67:32:c4: 88:4c:33:21:ba:f8:8e:07:8c:8c:3e:aa:09:83:fd: 17:3c:e7:29:da:c2:7a:f8:5d:f5:3f:37:6f:2f:09: f2:da:f0:4d:5d:29:cc:0a:2d:6c:15:4f:10:e4:f2: f6:61:90:87:31:7a:54:ce:d2:f5:be:dd:b4:af:1c: 99:11:71:6a:34:ff:05:a6:d8:73:da:26:54:34:10: e7:fe:8d:9b:e9:85:7c:67:f6:4d:3e:2e:58:7d:ad: 26:46:63:60:14:f5:7c:c0:89:a4:76:60:0e:6e:27: a3:a7:78:71:2b:98:6b:46:fd:a6:fc:4e:10:cc:14: 16:d5:e2:ed:b0:10:0f:df:8f:80:cc:70:eb:39:fe: f4:42:d0:c1:2f:02:72:d7:75:62:e5:85:14:7b:54: 5c:1f:1e:aa:5e:b7:02:df:7c:83:92:9a:3f:2b:d3: 30:db:a5:ff:ca:9e:fc:e4:b3:08:38:88:43:94:51: 2d:48:fc:67:8a:09:79:f0:99:d6:14:57:a9:89:48: 2e:92:13:e3:1f:08:d3:09:83:ff:fb:b4:ea:20:c5: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:80:9E:51:81:49:53:64:5A:FD:1F:05:27:CC:6C:52:84:C5:73 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2d:b4:9b:9a:68:9b:35:fc:d3:8a:a8:34:2c:fd:45:b8:e3: e0:97:eb:71:0b:bd:ae:2b:5a:09:2f:b9:7c:30:e4:86:93:c7: 8a:6d:d8:56:a1:93:60:6e:30:ca:d2:74:fa:9f:e7:5f:5c:62: 74:1f:95:bb:83:a3:a2:a5:1f:df:e5:de:8e:58:5c:68:1b:6e: 82:ff:cf:81:50:45:bf:08:40:d6:ea:04:ad:0b:28:bc:02:eb: 44:b7:53:c3:f5:d3:dc:61:44:23:0e:f0:dd:e5:5e:6a:8c:40: 62:fd:87:98:16:9e:c5:e5:9b:82:c8:d8:68:45:15:7f:14:a5: d6:5d:e9:63:3f:94:be:12:0c:1f:c5:cc:bf:a9:6e:57:6e:bc: af:f4:dd:91:7d:bc:e7:97:b4:38:3b:3f:be:3d:07:a1:a4:cb: 68:97:e8:14:4a:a6:db:53:e9:1f:83:31:41:3b:b0:c3:59:78: 0a:79:7b:f4:83:36:9d:9b:0d:43:78:81:ef:a9:35:34:d2:2d: 80:6e:43:a4:e9:84:61:6e:b1:8c:f1:8c:d5:45:9f:0a:20:05: c9:aa:3d:9d:75:84:4a:86:86:31:51:7a:7e:75:39:48:e6:55: 06:d3:2c:6c:ce:5d:52:54:b1:94:20:6a:3a:f7:7a:aa:4c:57: fc:ad:44:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUxMjMxMTY1NDUzWhcNMjYwMTA3MTY1NDUzWjAYMRYwFAYD VQQDDA02OTU1NTU1ZC04Y2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxrwgWLr+UI/dxXmdl3pjJWJGE+OIW3ooWnApQ9Q8bqO7lYGAhykxWpnMsSI TDMhuviOB4yMPqoJg/0XPOcp2sJ6+F31PzdvLwny2vBNXSnMCi1sFU8Q5PL2YZCH MXpUztL1vt20rxyZEXFqNP8Fpthz2iZUNBDn/o2b6YV8Z/ZNPi5Yfa0mRmNgFPV8 wImkdmAObiejp3hxK5hrRv2m/E4QzBQW1eLtsBAP34+AzHDrOf70QtDBLwJy13Vi 5YUUe1RcHx6qXrcC33yDkpo/K9Mw26X/yp785LMIOIhDlFEtSPxnigl58JnWFFep iUgukhPjHwjTCYP/+7TqIMX0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLggJ5R gUlTZFr9HwUnzGxShMVzMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLbSbmmibNfzTiqg0LP1FuOPgl+txC72uK1oJL7l8MOSGk8eKbdhW oZNgbjDK0nT6n+dfXGJ0H5W7g6OipR/f5d6OWFxoG26C/8+BUEW/CEDW6gStCyi8 AutEt1PD9dPcYUQjDvDd5V5qjEBi/YeYFp7F5ZuCyNhoRRV/FKXWXeljP5S+Egwf xcy/qW5Xbryv9N2Rfbznl7Q4Oz++PQehpMtol+gUSqbbU+kfgzFBO7DDWXgKeXv0 gzadmw1DeIHvqTU00i2AbkOk6YRhbrGM8YzVRZ8KIAXJqj2ddYRKhoYxUXp+dTlI 5lUG0yxszl1SVLGUIGo693qqTFf8rUQU -----END CERTIFICATE-----Generated at Thu Jan 1 15:42:15 2026 by rpki-client