This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: 3+jXh7S+sE2P2ZMjHHilWltgrW91cIOemzlahdM5McQ= Subject key identifier: 93:02:7B:6B:D2:0C:06:77:CD:F9:75:98:2D:46:9B:C6:42:4E:41:9E Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 02DC Signing time: Thu 25 Dec 2025 00:30:51 +0000 Manifest this update: Thu 25 Dec 2025 00:30:50 +0000 Manifest next update: Thu 01 Jan 2026 00:30:50 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: Mf82NI44ilO+BfFj51iL4PID8EX8Wrli9fJfY7Xw13g=) 2: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 3: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Dec 25 00:30:50 2025 GMT Not After : Jan 1 00:30:50 2026 GMT Subject: CN=694c85bb-f7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:7b:90:29:7a:f0:ef:e8:e1:eb:28:77:2d: c4:49:2b:ef:16:fe:2d:f4:96:0e:11:a2:95:c5:41: 5e:9c:bb:95:7e:0b:a6:2d:14:d5:0b:ec:d0:dd:16: aa:8f:5d:2d:eb:d6:90:17:4d:28:9f:05:71:d5:8b: 2c:dc:6b:ab:c4:0b:03:83:c3:ab:51:6e:27:47:5f: 33:b6:83:7d:fa:2d:5a:04:7b:c2:f5:a4:67:9b:e1: 9c:ce:c5:43:ea:42:9e:db:5f:b1:17:11:0d:43:1a: 86:90:88:84:a8:cc:ff:d3:00:d4:d6:95:a5:13:1b: 4c:dd:67:f1:6e:12:41:4b:1f:e5:04:d2:49:55:b9: 79:fa:c2:09:a7:8e:1c:9e:da:55:d7:86:9f:0b:3a: 53:23:ae:36:86:21:90:17:79:a9:55:eb:f9:d4:94: fe:74:fc:c8:91:76:f7:3c:45:aa:a1:1a:f3:00:cf: c6:e1:9e:05:84:db:66:da:aa:6f:04:b1:c4:03:e3: ad:f7:bf:ee:5f:65:48:09:5d:ca:d8:e0:c0:bd:9c: d2:b3:01:e9:c0:ba:92:fa:01:f5:df:0b:41:55:2a: 82:e5:ec:57:93:43:97:b1:6e:28:12:e1:36:ec:b0: 3d:4a:16:ac:2f:00:45:4e:6f:b8:a3:55:87:9b:1e: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:7B:6B:D2:0C:06:77:CD:F9:75:98:2D:46:9B:C6:42:4E:41:9E X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:13:d7:17:34:45:ef:b4:de:90:c1:e1:27:d5:0b:05:d5:87: 4a:ec:3e:d1:5d:1c:0e:f8:6b:cc:a3:ee:9c:c9:57:66:b5:02: 45:eb:f2:ab:fa:7b:94:72:d8:be:c3:31:d8:55:e4:83:28:fd: 95:cb:c5:16:fe:1b:00:34:ce:62:09:a9:9a:36:99:7c:dd:5d: 63:6a:3b:e1:9c:ff:80:6d:10:3e:98:7b:94:d2:3b:61:32:7c: a9:9e:0e:9d:a4:7a:a4:ee:0f:b2:19:16:2e:0e:ff:9a:ac:c4: 2f:30:01:96:a7:73:66:b2:33:99:30:f3:3d:e9:ab:28:91:f0: 7d:19:78:7b:4a:12:fa:81:d0:2c:46:1c:70:00:e4:3a:43:8b: f4:1b:53:14:10:b3:73:d0:0a:ab:40:5e:eb:43:50:3f:52:24: d0:2d:89:d7:5c:6e:88:6a:0c:1a:04:43:98:16:e2:1a:4b:33: 52:c5:db:f8:87:69:d7:61:8d:4b:bd:7e:8f:f7:a0:15:39:59: 04:cc:4d:e2:5f:f8:1e:f0:b4:4b:39:cc:46:9e:74:81:7e:70: 57:03:92:f4:42:c9:81:61:4a:f1:0b:ce:1a:6a:05:e6:a5:ea: 19:3d:c7:b2:f8:ce:86:e8:81:8f:b1:47:9a:6a:ef:32:e6:dd: fc:74:9a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUxMjI1MDAzMDUwWhcNMjYwMTAxMDAzMDUwWjAYMRYwFAYD VQQDDA02OTRjODViYi1mN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdd7kCl68O/o4esody3ESSvvFv4t9JYOEaKVxUFenLuVfgumLRTVC+zQ3Raq j10t69aQF00onwVx1Yss3GurxAsDg8OrUW4nR18ztoN9+i1aBHvC9aRnm+GczsVD 6kKe21+xFxENQxqGkIiEqMz/0wDU1pWlExtM3WfxbhJBSx/lBNJJVbl5+sIJp44c ntpV14afCzpTI642hiGQF3mpVev51JT+dPzIkXb3PEWqoRrzAM/G4Z4FhNtm2qpv BLHEA+Ot97/uX2VICV3K2ODAvZzSswHpwLqS+gH13wtBVSqC5exXk0OXsW4oEuE2 7LA9ShasLwBFTm+4o1WHmx6snwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMCe2vS DAZ3zfl1mC1Gm8ZCTkGeMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2E9cXNEXvtN6QweEn1QsF1YdK7D7RXRwO+GvMo+6cyVdmtQJF6/Kr +nuUcti+wzHYVeSDKP2Vy8UW/hsANM5iCamaNpl83V1jajvhnP+AbRA+mHuU0jth Mnypng6dpHqk7g+yGRYuDv+arMQvMAGWp3NmsjOZMPM96asokfB9GXh7ShL6gdAs RhxwAOQ6Q4v0G1MUELNz0AqrQF7rQ1A/UiTQLYnXXG6IagwaBEOYFuIaSzNSxdv4 h2nXYY1LvX6P96AVOVkEzE3iX/ge8LRLOcxGnnSBfnBXA5L0QsmBYUrxC84aagXm peoZPcey+M6G6IGPsUeaau8y5t38dJp4 -----END CERTIFICATE-----Generated at Thu Dec 25 17:13:41 2025 by rpki-client