This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: wHGXK3boo4tn4w/4XDjfjka0pmyFdOggamqaNTGakD0= Subject key identifier: AB:E8:A1:B1:0C:5C:08:2F:E3:13:5A:8C:16:98:ED:38:FC:CA:14:AB Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05D9 Signing time: Thu 18 Dec 2025 22:22:51 +0000 Manifest this update: Thu 18 Dec 2025 22:22:51 +0000 Manifest next update: Thu 25 Dec 2025 22:22:51 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: 4B6FkWxaOS3ZQjfnXYRpuJtu7xGMuTYmGB2CIIZX9KM=) 2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) 3: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Dec 18 22:22:51 2025 GMT Not After : Dec 25 22:22:51 2025 GMT Subject: CN=69447ebb-c1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:d1:2e:ce:19:ad:81:66:0e:c8:37:52:fd: dd:d0:9e:b2:cc:8d:71:d2:73:6b:91:64:b3:20:8b: a1:ef:45:66:49:24:14:ea:4c:b7:30:7b:f6:b9:7c: 02:94:25:42:f7:88:3d:1e:e6:9a:50:dc:10:e1:49: 16:c5:2f:21:bd:ea:c2:03:d0:df:5e:3f:1f:83:f1: 67:f7:84:72:40:04:4f:71:b6:46:53:fd:3f:b0:df: c4:16:56:ed:67:66:ff:e0:f8:08:5c:46:60:8d:1b: 43:65:35:7b:e6:95:c6:ed:31:d0:85:aa:8d:61:09: 50:63:6a:8a:e1:31:22:c2:1f:f3:a7:2e:36:f9:e7: 66:9a:bb:9a:d0:7a:93:03:e9:ac:f6:04:61:2a:55: c3:eb:08:b5:17:e0:bc:37:bf:6b:c9:b7:bb:af:a3: 1e:da:f2:85:ae:47:9e:d4:17:0a:0a:31:04:63:35: db:65:8f:29:e6:f9:b4:ec:be:87:99:14:c3:dc:96: 8d:49:1a:a6:eb:44:e0:f5:ca:fb:9e:a0:7f:37:e9: 75:93:58:21:cd:bd:e8:be:da:78:45:47:8c:01:5d: 09:27:0a:d2:16:f3:8a:31:24:2a:c1:6f:37:e5:10: 3d:7c:6a:9c:f2:92:bd:7c:6c:10:df:fc:83:3a:77: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E8:A1:B1:0C:5C:08:2F:E3:13:5A:8C:16:98:ED:38:FC:CA:14:AB X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:9c:02:e8:3f:da:8f:ab:4e:0f:03:8c:18:f4:ac:4a:a3: ec:34:bf:92:f3:b5:ce:b4:b7:79:3f:01:80:ed:27:80:d3:c8: 69:8f:ba:25:e0:a9:64:4d:0e:82:83:b4:ff:c1:f4:c3:ff:49: d6:9a:91:5b:8b:42:64:7c:25:72:5a:38:5c:44:c9:d4:98:9f: 65:3c:b6:9d:e0:af:5c:78:2e:c9:1f:c7:ff:3a:ba:0a:9f:bd: 98:d5:4a:b6:08:14:52:e4:f6:c5:3e:41:29:74:71:d2:dd:02: 5b:dc:08:13:3d:ee:89:8e:f6:20:e5:dc:02:89:e8:52:14:55: 4e:aa:9e:7f:f8:00:f8:55:12:1f:a5:e0:9d:af:9a:ee:c9:83: 85:1a:7d:d0:a3:3b:28:8a:33:4e:88:2a:3f:a9:d6:79:2e:c6: 2f:d0:ea:ea:17:c9:57:52:6f:91:91:dd:38:a9:6c:be:dd:2f: 4f:b2:63:22:00:79:ce:1f:aa:49:c3:3c:61:d6:f3:73:d1:8a: 23:ea:f6:15:85:bf:c5:96:36:c9:a5:c7:19:97:c8:f7:d2:4c: de:48:70:26:53:58:7f:60:5c:a6:36:9f:cb:30:ed:c2:ab:de: 31:41:39:2f:40:33:a8:dd:5d:8e:a4:5f:2f:1e:40:31:10:cc: f4:85:7a:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUxMjE4MjIyMjUxWhcNMjUxMjI1MjIyMjUxWjAYMRYwFAYD VQQDDA02OTQ0N2ViYi1jMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CPRLs4ZrYFmDsg3Uv3d0J6yzI1x0nNrkWSzIIuh70VmSSQU6ky3MHv2uXwC lCVC94g9HuaaUNwQ4UkWxS8hverCA9DfXj8fg/Fn94RyQARPcbZGU/0/sN/EFlbt Z2b/4PgIXEZgjRtDZTV75pXG7THQhaqNYQlQY2qK4TEiwh/zpy42+edmmrua0HqT A+ms9gRhKlXD6wi1F+C8N79rybe7r6Me2vKFrkee1BcKCjEEYzXbZY8p5vm07L6H mRTD3JaNSRqm60Tg9cr7nqB/N+l1k1ghzb3ovtp4RUeMAV0JJwrSFvOKMSQqwW83 5RA9fGqc8pK9fGwQ3/yDOne9yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvoobEM XAgv4xNajBaY7Tj8yhSrMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgwpwC6D/aj6tODwOMGPSsSqPsNL+S87XOtLd5PwGA7SeA08hpj7ol 4KlkTQ6Cg7T/wfTD/0nWmpFbi0JkfCVyWjhcRMnUmJ9lPLad4K9ceC7JH8f/OroK n72Y1Uq2CBRS5PbFPkEpdHHS3QJb3AgTPe6JjvYg5dwCiehSFFVOqp5/+AD4VRIf peCdr5ruyYOFGn3QozsoijNOiCo/qdZ5LsYv0OrqF8lXUm+Rkd04qWy+3S9PsmMi AHnOH6pJwzxh1vNz0Yoj6vYVhb/FljbJpccZl8j30kzeSHAmU1h/YFymNp/LMO3C q94xQTkvQDOo3V2OpF8vHkAxEMz0hXrj -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:14 2025 by rpki-client