This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: D+ZBwDir16aTc2j7HPyb4N6j33di4fp+sla4MTtrdNk= Subject key identifier: 48:B9:28:97:2F:2B:7A:DE:1F:7C:FA:ED:9F:78:FF:D1:79:21:40:E2 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 021B Signing time: Thu 25 Dec 2025 01:21:53 +0000 Manifest this update: Thu 25 Dec 2025 01:21:53 +0000 Manifest next update: Thu 01 Jan 2026 01:21:53 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: tqRaPq+ivpwMSleopPxqxa3JAaND3UbPBT8MJvqqUy4=) 2: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) 3: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: o9bfnwoCTuetn0SRRGYX4ZpmTSdQG0cya1pWAww3M3c=) 4: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Dec 25 01:21:53 2025 GMT Not After : Jan 1 01:21:53 2026 GMT Subject: CN=694c91b1-6bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:05:20:9e:dc:23:83:ae:95:72:e2:5a:98: 43:c2:aa:25:12:cf:1f:29:fe:b4:5d:fd:f6:e7:61: e9:0a:50:0e:12:42:50:01:38:1f:02:8d:72:13:06: 45:01:f5:95:a8:fb:c9:53:32:c9:71:2a:ff:86:e8: 7c:40:6e:d9:82:31:d1:93:c9:ca:fb:a1:6a:2b:e4: 33:87:c7:a2:0f:81:2f:90:bb:33:78:d2:4d:87:20: 15:e3:74:dc:0b:e5:24:52:db:f2:a7:de:0b:58:c6: 0f:76:cf:6a:e1:c7:5d:6b:b0:0d:44:10:7d:fc:55: 31:d3:75:10:37:01:67:10:ab:6c:fe:2e:d8:b2:89: 47:39:46:2c:cb:5d:92:de:8e:ed:08:82:c5:86:20: 9e:71:9a:c2:4d:5c:fc:2b:52:b8:62:cb:88:b2:1b: d9:b4:4f:d9:89:ce:ac:a4:b2:d3:1b:57:b1:6a:04: a0:96:d5:fa:68:ef:80:d1:8c:aa:60:36:25:05:4d: a5:f7:9d:ce:3e:87:9d:fb:69:2d:7b:87:a9:22:31: 5c:e6:68:41:03:49:0f:54:79:35:e1:51:e4:e9:43: 02:40:1d:b6:ec:b8:e5:e4:ec:1f:00:c8:23:22:85: 98:7c:28:27:e5:46:d4:2a:f0:47:e3:23:e8:f2:2a: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B9:28:97:2F:2B:7A:DE:1F:7C:FA:ED:9F:78:FF:D1:79:21:40:E2 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:be:b6:52:34:97:9b:f6:0d:38:6c:a1:8c:1f:bc:93:ae:71: 27:b9:33:8a:6f:40:b9:0b:5d:65:d4:80:f4:44:3e:0d:c2:2a: 67:e0:01:98:ce:27:95:7a:2d:a2:b3:af:93:7d:d8:7d:c9:23: 17:94:a3:d9:e4:75:af:20:d6:9f:3b:4a:c4:46:04:20:ba:43: d1:90:ab:bd:20:ab:d3:5b:0c:3d:eb:71:56:24:e8:bc:1a:17: 14:66:0e:0a:51:a6:89:05:cb:d9:ed:30:aa:02:d1:41:bb:95: c7:12:c0:73:a8:f9:0e:99:1b:1f:31:47:77:4e:eb:51:47:9a: 34:3e:12:b8:3a:a2:b8:6f:99:c5:f1:36:eb:3f:29:c6:ee:30: ba:91:df:c6:2b:2d:17:b1:06:02:f6:e5:0e:a7:84:2b:e1:f8: bd:57:f6:3b:ea:06:4a:16:6f:93:26:65:be:de:a4:3a:47:ba: 74:49:6c:79:b4:59:11:61:5d:05:df:1d:ea:45:ab:a5:84:6a: 0c:b6:e8:fd:8e:64:ce:74:28:f3:39:af:6f:bf:4e:33:b9:a6: d0:4d:33:44:57:6b:c0:e2:07:80:4b:46:63:2b:39:b8:91:12: 27:3f:ad:aa:11:6b:10:a4:52:61:49:4b:c8:47:21:76:09:de: 7f:84:a4:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUxMjI1MDEyMTUzWhcNMjYwMTAxMDEyMTUzWjAYMRYwFAYD VQQDDA02OTRjOTFiMS02YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypQFIJ7cI4OulXLiWphDwqolEs8fKf60Xf3252HpClAOEkJQATgfAo1yEwZF AfWVqPvJUzLJcSr/huh8QG7ZgjHRk8nK+6FqK+Qzh8eiD4EvkLszeNJNhyAV43Tc C+UkUtvyp94LWMYPds9q4cdda7ANRBB9/FUx03UQNwFnEKts/i7YsolHOUYsy12S 3o7tCILFhiCecZrCTVz8K1K4YsuIshvZtE/Zic6spLLTG1exagSgltX6aO+A0Yyq YDYlBU2l953OPoed+2kte4epIjFc5mhBA0kPVHk14VHk6UMCQB227Ljl5OwfAMgj IoWYfCgn5UbUKvBH4yPo8ir/swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi5KJcv K3reH3z67Z94/9F5IUDiMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2vrZSNJeb9g04bKGMH7yTrnEnuTOKb0C5C11l1ID0RD4Nwipn4AGY zieVei2is6+Tfdh9ySMXlKPZ5HWvINafO0rERgQgukPRkKu9IKvTWww963FWJOi8 GhcUZg4KUaaJBcvZ7TCqAtFBu5XHEsBzqPkOmRsfMUd3TutRR5o0PhK4OqK4b5nF 8TbrPynG7jC6kd/GKy0XsQYC9uUOp4Qr4fi9V/Y76gZKFm+TJmW+3qQ6R7p0SWx5 tFkRYV0F3x3qRaulhGoMtuj9jmTOdCjzOa9vv04zuabQTTNEV2vA4geAS0ZjKzm4 kRInP62qEWsQpFJhSUvIRyF2Cd5/hKTM -----END CERTIFICATE-----Generated at Fri Dec 26 18:18:49 2025 by rpki-client