This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.mft (raw, json) Hash identifier: YFnvaKzJcRq8oduFUeo7ST3q3zkqBS58fU+OCmJuo1c= Subject key identifier: 9F:59:3B:4F:34:B8:BE:C6:ED:8F:E6:E3:1E:26:14:58:0B:93:F7:F1 Authority key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Certificate issuer: /CN=A91A1E1C/serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft Manifest number: DC Signing time: Sun 21 Dec 2025 04:45:36 +0000 Manifest this update: Sun 21 Dec 2025 04:45:36 +0000 Manifest next update: Sun 28 Dec 2025 04:45:36 +0000 Files and hashes: 1: 5CHll4Srb9cADNFZcQHsNg3ZQGY.crl (hash: DnvgmUHv0uBzq/SpaUaLbQRuZ7mhKKuwCTdeCfxTgh4=) 2: 5BC18D6C9A6C11EF8C656668C4F9AE02.roa (hash: zytctE6qivUxRAHpqXA/YPn8xFqSFBHBItYhwkxUPj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Validity Not Before: Dec 21 04:45:36 2025 GMT Not After : Dec 28 04:45:36 2025 GMT Subject: CN=69477b70-e5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:9a:25:62:a9:06:9a:e4:40:cc:af:c3:87: c0:6f:d1:8a:76:89:f1:b4:3d:ff:4d:ff:96:98:85: f9:39:77:45:44:ae:d9:f1:fe:83:fd:6c:52:ff:79: b4:6c:fc:d3:09:93:a8:4d:a3:c5:98:03:45:e6:6e: e5:3d:b7:31:ce:37:04:3e:49:5f:79:0b:cf:c4:0c: 04:a6:04:44:c9:61:b7:11:01:4a:95:11:d7:b3:65: 71:a7:c9:92:a8:99:42:ee:b4:eb:30:2f:ec:c8:9b: 11:14:62:b6:19:2f:36:85:99:07:2b:fe:85:16:04: fa:2f:56:08:c5:e7:c8:56:b2:2f:db:1d:2c:bb:39: 90:1b:87:4d:38:ad:c2:22:5d:44:7e:c6:4d:f2:24: aa:3e:b4:60:a1:95:5d:dc:18:eb:6b:13:b0:80:6e: 40:37:a0:13:bd:8f:87:b1:e1:4d:39:1d:9f:ba:ac: 88:7c:4a:0d:f4:86:49:9d:3c:2b:1e:e4:2e:d2:19: 47:3b:0b:bc:59:1b:12:de:b6:2b:db:34:28:78:30: 1e:2d:a6:0f:3f:3b:01:80:56:91:3d:a5:f9:13:e4: 56:42:50:43:0d:92:10:ca:38:ea:29:02:39:c6:1e: a6:2a:22:d8:bf:73:fb:bf:c9:4a:32:17:b1:57:c3: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:59:3B:4F:34:B8:BE:C6:ED:8F:E6:E3:1E:26:14:58:0B:93:F7:F1 X509v3 Authority Key Identifier: keyid:E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5c:da:a6:6a:6b:11:86:fc:c5:27:e0:b8:f6:d4:3c:39:96: 26:f6:b2:1c:95:ab:a4:ed:fe:ee:fd:b6:51:19:ae:7c:38:9f: ff:c8:8c:29:26:8d:29:c5:98:b1:c4:c4:41:5f:83:99:8c:ed: e8:99:27:f8:1d:23:fa:2b:e1:58:e2:68:91:a8:e4:43:f4:c1: 33:3a:98:c3:39:e7:8a:20:98:8b:0f:f4:78:cc:07:33:a4:6f: 4d:39:d3:68:9b:37:ce:ba:48:bb:bf:7a:46:83:ca:be:8a:86: f9:f6:b0:06:21:b7:46:57:df:21:7a:12:06:22:84:57:8f:a5: 94:c9:26:06:ad:cf:ba:cb:2f:1a:54:c9:99:0d:c6:20:71:82: 79:4a:c8:75:3b:fd:5d:6f:fe:2d:17:be:da:9c:aa:98:61:52: f7:1c:33:39:6e:ad:45:03:54:0d:60:9b:ee:3d:d9:56:6a:0b: d1:4a:14:ff:a7:ac:bd:14:17:69:06:96:90:64:12:e0:45:ad: be:de:e2:41:ac:94:1d:1d:34:71:8a:05:c9:30:12:9f:bd:68: bd:96:ef:3e:ab:89:ce:01:30:ce:d3:fa:c5:fd:b4:2d:4c:8e: 5b:51:50:d1:58:6a:e3:79:c1:fc:89:e2:f4:bf:fb:fe:4a:c9: 55:02:4b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEU0MjFFNTk3ODRBQjZGRDcwMDBDRDE1OTcxMDFFQzM2 MEREOTQwNjYwHhcNMjUxMjIxMDQ0NTM2WhcNMjUxMjI4MDQ0NTM2WjAYMRYwFAYD VQQDDA02OTQ3N2I3MC1lNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJuaJWKpBprkQMyvw4fAb9GKdonxtD3/Tf+WmIX5OXdFRK7Z8f6D/WxS/3m0 bPzTCZOoTaPFmANF5m7lPbcxzjcEPklfeQvPxAwEpgREyWG3EQFKlRHXs2Vxp8mS qJlC7rTrMC/syJsRFGK2GS82hZkHK/6FFgT6L1YIxefIVrIv2x0suzmQG4dNOK3C Il1EfsZN8iSqPrRgoZVd3BjraxOwgG5AN6ATvY+HseFNOR2fuqyIfEoN9IZJnTwr HuQu0hlHOwu8WRsS3rYr2zQoeDAeLaYPPzsBgFaRPaX5E+RWQlBDDZIQyjjqKQI5 xh6mKiLYv3P7v8lKMhexV8PFKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9ZO080 uL7G7Y/m4x4mFFgLk/fxMB8GA1UdIwQYMBaAFOQh5ZeEq2/XAAzRWXEB7DYN2UBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yNTIyMkQ4MDky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5Y0FETkZaY1FIc05nM1pR R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDSGxsNFNyYjljQURORlpjUUhzTmczWlFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yNTIyMkQ4MDkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5 Y0FETkZaY1FIc05nM1pRR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtXNqmamsRhvzFJ+C49tQ8OZYm9rIclauk7f7u/bZRGa58OJ//yIwp Jo0pxZixxMRBX4OZjO3omSf4HSP6K+FY4miRqORD9MEzOpjDOeeKIJiLD/R4zAcz pG9NOdNomzfOuki7v3pGg8q+iob59rAGIbdGV98hehIGIoRXj6WUySYGrc+6yy8a VMmZDcYgcYJ5Ssh1O/1db/4tF77anKqYYVL3HDM5bq1FA1QNYJvuPdlWagvRShT/ p6y9FBdpBpaQZBLgRa2+3uJBrJQdHTRxigXJMBKfvWi9lu8+q4nOATDO0/rF/bQt TI5bUVDRWGrjecH8ieL0v/v+SslVAkuG -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:21 2025 by rpki-client