This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json) Hash identifier: fstVFa+2rzRYzzU90cJWPCCHq/Taj6p6CxjhSyr1r6Y= Subject key identifier: FA:C2:E1:AA:BA:E9:EC:4B:BD:67:99:AE:26:B1:82:01:27:20:FC:ED Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft Manifest number: 0206 Signing time: Tue 23 Dec 2025 02:05:18 +0000 Manifest this update: Tue 23 Dec 2025 02:05:18 +0000 Manifest next update: Tue 30 Dec 2025 02:05:18 +0000 Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: nmj56+qN7OjIt3nfsTx4aFzWolMXhlxvsaJK0hgIDjU=) 2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: MOCyDx3MMCgJ0iKiHYJPId15Yf0kFHcGhSay9PLqfd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Validity Not Before: Dec 23 02:05:18 2025 GMT Not After : Dec 30 02:05:18 2025 GMT Subject: CN=6949f8de-160c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:88:8c:76:83:bf:ee:bf:d5:3b:65:7a:09: 84:e2:45:c8:73:9c:56:09:18:22:64:8c:fd:a6:e7: 7f:d2:1a:5f:01:48:b6:fb:26:46:5e:61:14:f1:b0: f2:f4:94:76:3d:e1:4a:b8:b6:85:d4:1c:08:da:f8: 71:15:e4:d0:08:44:3a:07:3e:57:44:f7:4e:57:dd: 25:32:b0:5b:bc:46:e1:be:65:61:e2:f6:1a:47:df: bb:fb:a9:a8:e6:d9:e2:88:f1:e0:a7:15:5b:c9:3d: c2:8b:55:23:a5:7c:f5:c2:fb:e1:71:9e:32:c0:42: af:ad:0d:d4:15:95:82:1a:bb:7a:50:b4:b9:14:92: c9:c6:ea:e7:42:63:8b:18:9d:9d:81:77:70:a7:57: fb:00:4c:5a:61:92:75:46:ed:10:68:be:8b:75:af: 93:d3:74:c2:ae:95:45:7d:69:cd:4f:8d:0c:ed:a6: 2b:18:69:ac:37:e9:cf:7d:a1:0c:ba:b9:51:3b:e7: c5:bc:57:45:03:29:47:5a:31:63:07:54:c1:fa:dc: 27:cc:b2:42:e7:a1:41:bf:bb:47:62:a1:85:b0:e9: b8:9a:0a:1f:32:3a:bc:a4:1d:bb:9c:16:6e:6e:b6: 31:ee:7c:09:d7:8c:5d:c1:df:5c:bc:e5:06:e9:3a: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C2:E1:AA:BA:E9:EC:4B:BD:67:99:AE:26:B1:82:01:27:20:FC:ED X509v3 Authority Key Identifier: keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b0:23:09:df:1e:0c:f3:df:62:bf:36:25:7f:d9:2b:13:90: c3:74:d4:d7:a3:7e:a4:3d:ca:63:ec:d0:8c:db:a3:3d:72:f3: f8:61:63:64:1c:13:f5:2e:c3:8e:af:96:39:c6:c9:f0:a8:ea: ed:d6:c4:d6:8d:95:ae:c6:3d:e9:23:19:36:43:d2:b7:89:24: cf:5f:93:c1:f4:51:63:5e:05:ad:8f:92:10:ec:20:bd:ff:ac: 92:b5:a8:df:4f:dc:9f:ec:26:3c:2f:d3:5e:83:80:a3:60:95: 37:4c:1d:01:a0:56:ab:b3:75:37:75:ab:0e:bc:3d:36:a0:0b: f2:77:31:35:66:c3:5a:c6:75:ad:54:a1:7d:16:2e:ca:b9:bc: 5b:8e:81:a5:5d:57:03:c4:e8:b8:f5:de:e9:cc:8e:39:94:b9: e2:bf:b3:d8:36:e7:70:b8:14:61:ed:a8:2f:95:82:40:9a:d7: b9:18:9d:9d:16:6d:c1:72:90:9c:d1:6b:fc:29:40:d1:65:b2: ea:54:11:3e:f3:84:65:b8:7a:a8:a5:b6:b7:d5:b9:f4:4f:3d: 78:22:6d:40:47:85:4f:74:5a:51:31:c5:ab:c7:df:7a:db:5d: 04:c1:03:db:05:1a:e8:2c:e2:77:4d:4b:31:53:30:e3:bf:f8: 8a:8d:d6:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5RTUxMTAvBgNVBAUTKEU0N0JGNzAyNTQ1MzI2OTdEMjBEMEQzMTEwRjYyNTM3 MEQ2NUZBODMwHhcNMjUxMjIzMDIwNTE4WhcNMjUxMjMwMDIwNTE4WjAYMRYwFAYD VQQDDA02OTQ5ZjhkZS0xNjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNeIjHaDv+6/1TtlegmE4kXIc5xWCRgiZIz9pud/0hpfAUi2+yZGXmEU8bDy 9JR2PeFKuLaF1BwI2vhxFeTQCEQ6Bz5XRPdOV90lMrBbvEbhvmVh4vYaR9+7+6mo 5tniiPHgpxVbyT3Ci1UjpXz1wvvhcZ4ywEKvrQ3UFZWCGrt6ULS5FJLJxurnQmOL GJ2dgXdwp1f7AExaYZJ1Ru0QaL6Lda+T03TCrpVFfWnNT40M7aYrGGmsN+nPfaEM urlRO+fFvFdFAylHWjFjB1TB+twnzLJC56FBv7tHYqGFsOm4mgofMjq8pB27nBZu brYx7nwJ14xdwd9cvOUG6TqAZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrC4aq6 6exLvWeZriaxggEnIPztMB8GA1UdIwQYMBaAFOR79wJUUyaX0g0NMRD2JTcNZfqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlFNS9ERDlGMUY3QzND MDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpwZlNEUTB4RVBZbE53MWwt b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIdjNBbFJUSnBmU0RRMHhFUFlsTncxbC1vTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTlFNS9ERDlGMUY3QzNDMDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpw ZlNEUTB4RVBZbE53MWwtb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWsCMJ3x4M899ivzYlf9krE5DDdNTXo36kPcpj7NCM26M9cvP4YWNk HBP1LsOOr5Y5xsnwqOrt1sTWjZWuxj3pIxk2Q9K3iSTPX5PB9FFjXgWtj5IQ7CC9 /6yStajfT9yf7CY8L9Neg4CjYJU3TB0BoFars3U3dasOvD02oAvydzE1ZsNaxnWt VKF9Fi7KubxbjoGlXVcDxOi49d7pzI45lLniv7PYNudwuBRh7agvlYJAmte5GJ2d Fm3BcpCc0Wv8KUDRZbLqVBE+84RluHqopba31bn0Tz14Im1AR4VPdFpRMcWrx996 210EwQPbBRroLOJ3TUsxUzDjv/iKjdZ3 -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:40 2025 by rpki-client