This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: 7ZR+aO/+ppO6x9QFTsumnr6NW02jyR3vdwulqsfHb2c= Subject key identifier: D3:39:1B:9C:8C:27:D7:E6:9D:FF:C3:93:A9:FC:39:58:51:EE:2F:65 Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 10C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 10B5 Signing time: Thu 18 Dec 2025 17:10:16 +0000 Manifest this update: Thu 18 Dec 2025 17:10:15 +0000 Manifest next update: Thu 25 Dec 2025 17:10:15 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: f7EEU7yQDva1O8NSeZMK+CfcXbofzJACttQ0rEMG4is=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4289 (0x10c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Dec 18 17:10:15 2025 GMT Not After : Dec 25 17:10:15 2025 GMT Subject: CN=69443578-3136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:38:0b:e9:2f:39:93:2b:9b:f0:96:02:5c: 6d:a3:b9:b4:e1:8b:35:df:a2:af:e1:1d:81:75:1c: 0e:ac:de:9f:87:a1:ad:87:ab:2c:26:ea:62:9f:d9: 82:4b:a4:6d:84:43:1d:e0:0c:51:56:8b:c9:b4:0a: a1:14:c6:aa:71:9e:03:26:29:e0:5f:07:42:1e:fd: 8a:bf:bb:8b:4e:46:08:e9:ba:5a:e5:0a:bc:ec:2b: 12:c0:da:f2:f7:83:8b:1d:e4:30:b1:cf:e6:24:8e: 8d:44:60:7e:59:e4:7d:06:63:dd:7b:89:41:8f:60: 70:e8:17:f4:3d:b4:06:e1:aa:ec:22:86:75:c1:23: 6f:a1:b0:a6:d6:1c:3f:4b:d4:3c:92:d3:65:ec:d1: a3:8c:c5:5b:e4:45:fb:d7:ec:06:70:c7:3b:c2:83: 4f:96:57:cd:9e:ec:bf:2b:81:52:7c:8a:a3:7a:81: 02:7e:53:de:a0:5b:3d:f9:70:19:28:da:40:e9:81: ee:17:26:72:9c:15:ec:96:78:47:da:2f:df:cc:e0: 17:84:94:3e:47:d2:b2:66:d3:91:7f:59:5a:38:dc: 1f:7c:32:c2:9d:a0:47:63:12:99:da:84:5b:78:38: 9d:3f:82:4f:c3:a4:a4:7d:c3:a3:a2:83:a5:e2:52: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:39:1B:9C:8C:27:D7:E6:9D:FF:C3:93:A9:FC:39:58:51:EE:2F:65 X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:1d:34:13:a4:dd:e4:a4:93:d9:9e:a5:4e:17:16:d8:ea: a2:29:f1:8a:db:d9:ca:9a:92:13:82:6a:e6:6a:f1:ca:68:9e: 6e:cd:fe:4e:28:ac:86:ba:b6:4a:70:ad:31:be:53:8f:12:f0: 87:a9:67:82:8d:9c:65:3d:81:19:33:f3:3d:4b:9c:2a:f3:52: e0:c6:41:3d:0a:08:c5:07:0d:05:3c:57:b4:83:52:73:80:ec: 72:eb:71:ab:60:1a:30:8a:bd:41:10:d9:ee:cd:8b:7e:95:95: eb:12:25:ff:2a:e7:fd:5d:24:e1:5a:9c:6d:a5:63:ef:c7:65: 75:7a:bf:25:19:7e:69:18:2f:c4:a9:d4:e8:d5:60:74:84:ed: 2f:f9:7d:21:92:d0:52:06:76:2b:56:19:fe:1f:ec:87:80:9f: e2:3a:61:fc:d2:86:7f:0a:68:67:09:ee:f9:ba:32:a9:b8:ee: 4f:fe:fd:3b:87:71:e8:78:64:70:a7:37:1d:16:8c:20:7b:e5: 33:a9:fa:d4:b1:18:bc:14:95:fc:b6:0c:a7:6e:c7:29:69:c6: e9:48:12:50:69:c2:22:75:21:fc:f5:ca:af:e0:a4:a4:4e:70: 15:94:0e:9b:1b:6b:1b:0c:f1:58:dd:8c:34:81:03:f2:4e:2a: 6c:52:24:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUxMjE4MTcxMDE1WhcNMjUxMjI1MTcxMDE1WjAYMRYwFAYD VQQDDA02OTQ0MzU3OC0zMTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5Q4C+kvOZMrm/CWAlxto7m04Ys136Kv4R2BdRwOrN6fh6Gth6ssJupin9mC S6RthEMd4AxRVovJtAqhFMaqcZ4DJingXwdCHv2Kv7uLTkYI6bpa5Qq87CsSwNry 94OLHeQwsc/mJI6NRGB+WeR9BmPde4lBj2Bw6Bf0PbQG4arsIoZ1wSNvobCm1hw/ S9Q8ktNl7NGjjMVb5EX71+wGcMc7woNPllfNnuy/K4FSfIqjeoECflPeoFs9+XAZ KNpA6YHuFyZynBXslnhH2i/fzOAXhJQ+R9KyZtORf1laONwffDLCnaBHYxKZ2oRb eDidP4JPw6SkfcOjooOl4lKZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM5G5yM J9fmnf/Dk6n8OVhR7i9lMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYjh00E6Td5KST2Z6lThcW2OqiKfGK29nKmpITgmrmavHKaJ5uzf5O KKyGurZKcK0xvlOPEvCHqWeCjZxlPYEZM/M9S5wq81LgxkE9CgjFBw0FPFe0g1Jz gOxy63GrYBowir1BENnuzYt+lZXrEiX/Kuf9XSThWpxtpWPvx2V1er8lGX5pGC/E qdTo1WB0hO0v+X0hktBSBnYrVhn+H+yHgJ/iOmH80oZ/CmhnCe75ujKpuO5P/v07 h3HoeGRwpzcdFowge+UzqfrUsRi8FJX8tgynbscpacbpSBJQacIidSH89cqv4KSk TnAVlA6bG2sbDPFY3Yw0gQPyTipsUiTk -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:38 2025 by rpki-client