This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: 4Amxp9V/2/46P6avT3gqJv8Kw5kf+EYsihZ3c1tYHto= Subject key identifier: 5C:6B:1A:53:3A:58:2C:49:41:3B:43:C6:E8:65:D7:F0:5D:59:B0:88 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 090D Signing time: Thu 18 Dec 2025 19:49:20 +0000 Manifest this update: Thu 18 Dec 2025 19:49:19 +0000 Manifest next update: Thu 25 Dec 2025 19:49:19 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: KXGhQw+lTxxf6RkMUiLaRweYqK/HaNDFveYWY9TDcNE=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=) 3: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=) 4: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=) 6: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Dec 18 19:49:19 2025 GMT Not After : Dec 25 19:49:19 2025 GMT Subject: CN=69445ac0-979e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fd:9a:a1:04:20:b7:36:14:04:fd:53:d9:4b: f1:07:fd:da:dc:b3:0b:1c:77:82:c4:a0:72:e6:25: 9d:3f:ac:09:79:db:fc:a1:b1:2e:1d:9f:63:d0:bc: df:33:d3:79:75:cf:95:9e:29:2c:d8:8f:5c:bc:d2: 7d:9e:a3:c6:be:ab:84:2f:39:82:78:75:2e:a5:32: c1:33:b2:a3:66:9c:aa:c1:d5:13:ca:65:52:aa:7b: f8:e4:05:a7:2c:1d:75:fe:7f:b4:21:6a:a0:6a:1c: 56:38:75:50:78:b8:1a:4f:ff:57:70:77:12:a5:0d: df:7e:61:8b:be:f7:63:98:29:bf:cc:ba:55:67:94: fa:72:bf:ce:4b:93:ce:60:60:80:65:c3:05:f9:3a: 6e:47:ff:76:3a:ba:e9:03:53:c5:ca:15:0f:00:73: 95:aa:c0:5d:4e:61:5e:4b:77:64:d9:5b:8b:84:91: 22:30:c9:d4:dd:58:d1:4c:89:4e:76:43:78:7f:3c: 7c:89:13:58:c7:de:bd:c6:3b:47:a2:11:63:27:90: d1:88:da:c8:98:fe:06:0c:31:e6:bb:ed:55:f8:28: 89:55:62:65:9a:55:60:67:7c:68:a8:4d:8e:57:d1: de:fd:88:97:2d:e0:87:5b:b5:be:be:0c:ad:27:9d: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:1A:53:3A:58:2C:49:41:3B:43:C6:E8:65:D7:F0:5D:59:B0:88 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a3:6a:a8:d2:9c:f0:8c:3a:8a:5c:cc:fc:72:90:3d:35:07: f0:0e:bc:e2:b1:ec:63:15:be:ea:60:96:cf:88:2c:fe:cc:ff: 37:85:56:48:35:61:8f:cc:92:3a:6f:4a:33:c8:5a:5b:c0:6a: de:6e:08:04:da:30:c0:15:b6:08:01:0b:9d:60:8d:9f:20:20: c9:1e:af:37:81:9f:b7:79:3c:ab:cf:a7:56:60:47:75:46:d4: 7e:e4:24:a8:a2:84:cf:cd:2a:ad:f2:ea:c8:95:cb:ad:3a:ce: 71:6b:f5:3e:7a:b3:b2:60:33:e1:00:f4:da:c8:70:87:b9:90: ed:d0:7e:07:48:a9:0d:bc:37:38:54:04:7f:e8:48:c1:ad:f8: ac:3f:66:6f:0d:64:9d:e3:75:a2:89:51:bb:0b:b5:2e:c1:67: aa:c0:c3:a5:6c:50:04:f1:6f:90:1a:c0:e2:4c:7f:42:66:2d: 23:05:39:62:a9:6d:71:6e:9f:7d:ba:3f:63:d1:ca:97:5f:79: a5:0b:02:46:18:27:82:6f:ca:3e:48:a4:5c:dd:6f:dc:7e:78: e4:8e:29:ff:fd:14:78:cd:96:7f:9e:23:7f:49:db:7b:9c:9b: 98:ba:c4:51:c0:c4:2b:58:f2:1c:98:5d:5b:96:31:13:46:06: d9:87:56:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUxMjE4MTk0OTE5WhcNMjUxMjI1MTk0OTE5WjAYMRYwFAYD VQQDDA02OTQ0NWFjMC05NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6P2aoQQgtzYUBP1T2UvxB/3a3LMLHHeCxKBy5iWdP6wJedv8obEuHZ9j0Lzf M9N5dc+Vniks2I9cvNJ9nqPGvquELzmCeHUupTLBM7KjZpyqwdUTymVSqnv45AWn LB11/n+0IWqgahxWOHVQeLgaT/9XcHcSpQ3ffmGLvvdjmCm/zLpVZ5T6cr/OS5PO YGCAZcMF+TpuR/92OrrpA1PFyhUPAHOVqsBdTmFeS3dk2VuLhJEiMMnU3VjRTIlO dkN4fzx8iRNYx969xjtHohFjJ5DRiNrImP4GDDHmu+1V+CiJVWJlmlVgZ3xoqE2O V9He/YiXLeCHW7W+vgytJ53v/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxrGlM6 WCxJQTtDxuhl1/BdWbCIMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6o2qo0pzwjDqKXMz8cpA9NQfwDrzisexjFb7qYJbPiCz+zP83hVZI NWGPzJI6b0ozyFpbwGrebggE2jDAFbYIAQudYI2fICDJHq83gZ+3eTyrz6dWYEd1 RtR+5CSoooTPzSqt8urIlcutOs5xa/U+erOyYDPhAPTayHCHuZDt0H4HSKkNvDc4 VAR/6EjBrfisP2ZvDWSd43WiiVG7C7UuwWeqwMOlbFAE8W+QGsDiTH9CZi0jBTli qW1xbp99uj9j0cqXX3mlCwJGGCeCb8o+SKRc3W/cfnjkjin//RR4zZZ/niN/Sdt7 nJuYusRRwMQrWPIcmF1bljETRgbZh1ar -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:51 2025 by rpki-client