This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft File: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft (raw, json) Hash identifier: b7Zc0ARKp3ypvAZTJbp7YVg+mYMTcvJBm8bquUjNmM0= Subject key identifier: 87:30:B3:5D:EA:35:DD:95:4D:CF:A1:96:03:EF:42:DF:4B:98:0A:F0 Authority key identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE Certificate issuer: /CN=A91B40B2/serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 07:02:35 +0000 Manifest this update: Fri 19 Dec 2025 07:02:34 +0000 Manifest next update: Fri 26 Dec 2025 07:02:34 +0000 Files and hashes: 1: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl (hash: Izvj8RKiJIEW0YIk/2bl/pziOqBYGn0x1bV5QBQv6i0=) 2: 78A0CEEADA3811F080F82F148DD3641D.roa (hash: bk4EeRva85W97+CiKewXLYDpwnyH7MjBoZhPwCfegxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Validity Not Before: Dec 19 07:02:34 2025 GMT Not After : Dec 26 07:02:34 2025 GMT Subject: CN=6944f88b-729c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:63:00:d3:e8:75:36:78:3e:ac:ad:2b:38: 14:bc:11:71:ea:d6:01:0a:4f:17:41:e0:ca:65:d3: da:69:ea:52:c7:1c:cf:1b:16:4c:38:f4:f7:db:c4: 3a:7b:3f:20:a7:de:cb:17:c7:8d:15:53:e2:fe:5f: 7a:53:7e:67:c1:f3:4b:1c:8b:01:00:d3:e9:58:27: a1:2e:78:1a:5f:06:80:b5:af:ee:fb:64:d0:a3:d5: 33:17:4c:18:55:95:7e:b9:be:be:7b:6a:bc:8e:ac: 28:3d:9a:3d:8d:4d:1a:ab:bc:db:fb:5b:fa:59:29: 9b:7a:e7:87:76:5e:0b:9c:7f:33:39:9f:1b:e0:8f: 3d:5a:68:d3:09:6f:a2:2a:05:87:eb:5d:f6:9f:a8: f8:b8:da:9c:0f:b4:7c:10:a7:35:3f:46:8a:f7:58: 1e:fa:2d:c0:32:26:19:c8:7f:95:71:70:7c:c2:cf: 70:5c:1d:0d:cf:81:05:df:5a:a6:6c:cd:72:24:21: 72:84:5d:ad:5d:5d:cb:84:9d:5c:61:86:ee:63:e3: e0:5c:e3:f0:c8:99:5e:1b:e4:64:46:dc:1c:5f:3f: f4:2e:43:de:00:a3:ba:0e:f5:d8:54:ed:38:e1:d1: 90:c7:8b:ba:e0:e2:6b:0a:6c:2a:92:44:37:c2:ff: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:30:B3:5D:EA:35:DD:95:4D:CF:A1:96:03:EF:42:DF:4B:98:0A:F0 X509v3 Authority Key Identifier: keyid:03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d4:3f:69:78:fc:27:aa:d0:28:c6:61:1d:a9:c1:43:d4:80: 53:3b:d2:5c:a2:20:64:e8:d0:89:0a:00:1f:14:4e:4d:31:9b: 33:78:5b:ab:4c:33:80:b1:05:89:58:16:48:2e:df:b5:b3:20: c5:91:1e:74:2e:0d:e0:c6:30:7f:5a:f0:e1:72:c2:65:2e:d2: 67:9b:a8:61:cc:06:e5:09:7a:0b:aa:6b:10:a8:fc:df:3e:f2: 27:db:68:2a:b8:af:f2:83:7a:4e:92:d8:29:fc:3b:c7:d0:3a: e8:f2:dd:35:f2:0c:f9:2c:db:cf:4a:b4:4d:dd:e8:e7:5c:f9: 11:1f:49:2d:84:38:f4:c0:de:09:8c:6a:a5:fc:29:8e:b1:ab: d9:55:37:f6:96:82:50:a4:7b:08:da:db:fd:23:d9:e2:43:bd: 26:d4:9f:03:0c:58:5a:08:6c:d9:b2:d3:b3:ca:3d:ff:37:55: af:4c:30:7d:97:e8:7f:b0:f7:af:26:b1:c1:0c:49:61:65:4d: dd:65:ce:48:39:41:2b:62:6e:e4:61:3c:dd:d1:2a:94:f9:da: de:ba:8f:1b:e9:b8:5f:cd:10:14:19:44:b7:cc:a8:4f:13:78: c9:98:52:7a:75:2b:e6:8d:4f:a0:70:3d:63:6d:cb:f8:c9:54: 6b:c9:12:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDBCMjExMC8GA1UEBRMoMDM5Mjg0MjdEMkY1M0M4RkJBOTdGQ0ZFM0ZDNjUzQTUw RjE2NTlGRTAeFw0yNTEyMTkwNzAyMzRaFw0yNTEyMjYwNzAyMzRaMBgxFjAUBgNV BAMMDTY5NDRmODhiLTcyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcHGMA0+h1Nng+rK0rOBS8EXHq1gEKTxdB4Mpl09pp6lLHHM8bFkw49PfbxDp7 PyCn3ssXx40VU+L+X3pTfmfB80sciwEA0+lYJ6EueBpfBoC1r+77ZNCj1TMXTBhV lX65vr57aryOrCg9mj2NTRqrvNv7W/pZKZt654d2XgucfzM5nxvgjz1aaNMJb6Iq BYfrXfafqPi42pwPtHwQpzU/Ror3WB76LcAyJhnIf5VxcHzCz3BcHQ3PgQXfWqZs zXIkIXKEXa1dXcuEnVxhhu5j4+Bc4/DImV4b5GRG3BxfP/QuQ94Ao7oO9dhU7Tjh 0ZDHi7rg4msKbCqSRDfC/yC3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhzCzXeo1 3ZVNz6GWA+9C30uYCvAwHwYDVR0jBBgwFoAUA5KEJ9L1PI+6l/z+P8ZTpQ8WWf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0MEIyL0RBRDAxRDM0REEz NjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEktNmxfei1QOFpUcFE4V1dm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVLRUo5TDFQSS02bF96LVA4WlRwUThXV2Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 MEIyL0RBRDAxRDM0REEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEkt Nmxfei1QOFpUcFE4V1dmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrUP2l4/Ceq0CjGYR2pwUPUgFM70lyiIGTo0IkKAB8UTk0xmzN4W6tM M4CxBYlYFkgu37WzIMWRHnQuDeDGMH9a8OFywmUu0mebqGHMBuUJeguqaxCo/N8+ 8ifbaCq4r/KDek6S2Cn8O8fQOujy3TXyDPks289KtE3d6Odc+REfSS2EOPTA3gmM aqX8KY6xq9lVN/aWglCkewja2/0j2eJDvSbUnwMMWFoIbNmy07PKPf83Va9MMH2X 6H+w968mscEMSWFlTd1lzkg5QStibuRhPN3RKpT52t66jxvpuF/NEBQZRLfMqE8T eMmYUnp1K+aNT6BwPWNty/jJVGvJErY= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:54 2025 by rpki-client