This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: 5+3D4sMo5xmKIfr5w1O/oR32Yy0+2pfsQnPZDKZg6WY= Subject key identifier: C9:56:33:1C:E5:9C:40:48:01:89:60:EB:1B:BB:92:5E:C8:C1:6C:C3 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: D0 Signing time: Thu 01 Jan 2026 05:21:51 +0000 Manifest this update: Thu 01 Jan 2026 05:21:51 +0000 Manifest next update: Thu 08 Jan 2026 05:21:51 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: XLI3SN8SvJMFSEs94AFDko7IIr3uU8JtuS5gh0a6SUk=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: mPI5ywgBpJVHp6qMyDhLPQTq5BHSRgSzfIFhq7PDKqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 05:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Jan 1 05:21:51 2026 GMT Not After : Jan 8 05:21:51 2026 GMT Subject: CN=6956046f-b4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:40:51:4c:48:bf:c0:54:3d:18:e3:b1:85: cf:26:e6:b7:d6:03:fb:4b:03:ae:14:25:8e:77:c5: 16:a9:ad:82:16:58:7e:a5:e9:83:17:95:8f:c6:18: bc:3d:5e:95:f5:8b:48:96:fd:45:ae:a5:01:86:91: 73:5a:97:8d:1a:a5:51:e1:a7:16:3c:bc:8d:c5:88: b5:a1:6a:bf:a0:b4:76:eb:0d:f1:8a:8c:24:e1:d4: 0c:6a:89:2f:79:ce:99:2c:3d:c9:fe:d7:8b:da:47: 1b:5d:9e:a2:b5:51:b8:a7:63:31:77:ec:57:02:d7: a7:5c:9e:45:60:b9:17:6f:63:9f:fc:c9:c8:53:85: 09:4b:8e:d1:a4:6f:25:ca:15:ae:9c:0d:72:00:f7: 12:3a:d8:4b:09:0a:99:65:54:be:ea:92:4f:97:31: c7:67:22:05:a5:97:6a:f3:ed:69:28:3f:92:1c:b3: 71:eb:ac:21:7c:02:57:ef:1f:a7:13:66:8f:3f:26: cb:6c:5d:da:5f:57:13:41:a5:55:69:f0:fc:35:54: 31:4b:e4:77:e6:3a:d7:ad:48:dc:bb:db:03:2b:23: 45:3a:42:b7:68:ca:4b:25:f7:53:c0:4b:e3:db:ad: 44:e1:eb:43:df:ae:d8:79:6d:9e:92:22:66:86:41: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:56:33:1C:E5:9C:40:48:01:89:60:EB:1B:BB:92:5E:C8:C1:6C:C3 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cd:d1:0d:bd:c7:11:78:1c:96:e4:bc:f3:70:c1:3b:29:9a: 17:7c:86:ef:2a:b8:e0:d6:1e:4e:1f:0b:d8:67:40:45:37:fd: 99:46:64:cc:e7:56:ed:07:e1:77:43:fc:1f:84:d0:10:d3:bc: d8:80:1a:13:f6:be:10:72:67:ce:c7:cb:8e:9a:94:1e:ef:b9: 1d:7c:44:65:b6:55:3b:11:4c:40:c1:ed:f2:23:0e:09:b0:9f: 3c:49:d2:9d:62:a0:f8:a9:da:e5:8c:32:fa:63:df:12:e0:7b: 52:4b:85:ab:17:2d:e5:2d:88:52:9b:0c:e7:b6:cd:be:c5:9b: 71:d2:ea:33:90:be:69:06:8d:10:73:13:3e:c0:09:51:44:24: d2:aa:ec:f7:19:ce:73:2e:f6:8f:c8:ca:1a:85:cd:bb:88:44: 23:24:52:19:59:f3:18:79:4b:26:70:2b:2a:29:ac:92:51:7f: 41:8f:65:e9:d6:5d:44:98:ef:f5:98:4f:6e:1b:d5:f3:95:d7: dc:1b:a2:b6:f5:73:3b:0d:99:5a:9f:35:2e:f5:77:6e:73:ec: 2a:e5:ab:bd:27:2a:46:bc:d9:9e:40:93:2b:77:1f:80:1e:79: 07:8c:b5:60:b8:19:f7:06:30:4c:a7:74:ed:de:8a:39:89:6a: 5e:54:22:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2 MDM2NDI4RkQwHhcNMjYwMTAxMDUyMTUxWhcNMjYwMTA4MDUyMTUxWjAYMRYwFAYD VQQDDA02OTU2MDQ2Zi1iNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIBAUUxIv8BUPRjjsYXPJua31gP7SwOuFCWOd8UWqa2CFlh+pemDF5WPxhi8 PV6V9YtIlv1FrqUBhpFzWpeNGqVR4acWPLyNxYi1oWq/oLR26w3xiowk4dQMaokv ec6ZLD3J/teL2kcbXZ6itVG4p2Mxd+xXAtenXJ5FYLkXb2Of/MnIU4UJS47RpG8l yhWunA1yAPcSOthLCQqZZVS+6pJPlzHHZyIFpZdq8+1pKD+SHLNx66whfAJX7x+n E2aPPybLbF3aX1cTQaVVafD8NVQxS+R35jrXrUjcu9sDKyNFOkK3aMpLJfdTwEvj 261E4etD367YeW2ekiJmhkEjbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlWMxzl nEBIAYlg6xu7kl7IwWzDMB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv blBoRzN3V3QtMWxnTmtLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAczdENvccReByW5LzzcME7KZoXfIbvKrjg1h5OHwvYZ0BFN/2ZRmTM 51btB+F3Q/wfhNAQ07zYgBoT9r4QcmfOx8uOmpQe77kdfERltlU7EUxAwe3yIw4J sJ88SdKdYqD4qdrljDL6Y98S4HtSS4WrFy3lLYhSmwznts2+xZtx0uozkL5pBo0Q cxM+wAlRRCTSquz3Gc5zLvaPyMoahc27iEQjJFIZWfMYeUsmcCsqKaySUX9Bj2Xp 1l1EmO/1mE9uG9XzldfcG6K29XM7DZlanzUu9Xduc+wq5au9JypGvNmeQJMrdx+A HnkHjLVguBn3BjBMp3Tt3oo5iWpeVCKJ -----END CERTIFICATE-----Generated at Thu Jan 1 15:38:48 2026 by rpki-client