This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: hR9dpfk0SQZdEW+V6JYXK9skTktDeuXaZbSUOPOEMJE= Subject key identifier: 11:DC:D6:2D:36:8F:4C:79:3D:74:85:91:6C:6A:B4:9A:2E:CC:70:94 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 021E Signing time: Wed 31 Dec 2025 01:22:04 +0000 Manifest this update: Wed 31 Dec 2025 01:22:04 +0000 Manifest next update: Wed 07 Jan 2026 01:22:04 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: 0T17xmi5plDM8Z0QeiW1Ow7kZdN5Z+uQwFyaBYV1zug=) 2: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: o9bfnwoCTuetn0SRRGYX4ZpmTSdQG0cya1pWAww3M3c=) 3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) 4: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 01:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Dec 31 01:22:04 2025 GMT Not After : Jan 7 01:22:04 2026 GMT Subject: CN=69547abc-df13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:b3:9a:5c:cf:23:4b:89:d9:da:62:a5:52: da:95:85:4d:64:70:bd:a6:07:c6:f9:13:a1:50:8c: 90:12:f0:45:8b:e1:45:2a:44:f2:20:9f:1b:18:04: 27:de:ac:77:6d:17:47:22:42:87:50:b9:ea:86:d6: df:07:30:96:4e:0f:0f:ff:2a:f9:e0:43:91:e6:14: 23:4b:bd:a8:02:c5:9b:94:d4:14:39:13:8b:68:43: e9:af:b7:48:f9:74:c8:4d:b0:5f:fb:c0:d2:9c:f8: 70:c4:19:95:5a:d6:47:26:1d:c8:45:e0:d2:a6:3b: 81:67:07:22:80:49:8e:0e:b4:f5:ed:0d:a5:de:11: c7:51:5b:d8:a7:33:96:30:e6:3f:36:7f:22:e4:dc: 3a:92:68:55:bf:c1:af:99:fe:78:64:ee:47:d0:ff: 67:7d:97:f7:91:58:17:19:12:af:85:cd:3a:09:96: f2:26:b3:62:5e:88:6f:50:0c:42:f8:c3:b9:01:f2: 91:aa:9e:80:27:10:35:9d:eb:b0:27:ac:bd:fd:c0: 98:2b:3f:c8:13:3b:11:ed:c1:31:a7:27:da:88:f0: 34:af:80:9d:2e:22:3d:56:45:df:fd:1d:de:0d:94: 0e:d6:46:88:19:7c:31:b1:03:df:ab:1d:58:3b:62: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DC:D6:2D:36:8F:4C:79:3D:74:85:91:6C:6A:B4:9A:2E:CC:70:94 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5e:ae:0f:24:31:4b:49:23:22:42:a9:fa:b2:68:00:f2:bf: f4:e1:06:07:20:18:d2:81:3c:a2:a7:cc:69:11:dd:5c:a8:8c: 3f:46:3d:6d:a2:a9:08:3e:81:ad:64:09:25:f5:25:7f:54:f3: f9:ba:bb:6a:a0:2a:71:f2:a7:30:df:9c:8f:05:5c:fd:df:19: fe:37:7e:9f:3f:68:01:42:73:05:1f:09:fa:2e:cd:bb:a3:43: 7a:d8:26:de:a7:8d:32:66:d0:7e:f6:77:ed:29:bf:f8:ca:55: a4:26:9c:41:ad:e3:50:6b:ca:a3:a5:a3:84:1e:33:2a:67:69: 04:4c:d9:08:e8:42:30:11:aa:ad:c6:87:fc:09:87:5c:1c:18: 90:c8:b4:69:f5:36:7e:d8:dc:ed:6a:34:f4:3c:b2:e3:7b:d9: e0:8f:9b:a1:f5:b9:53:aa:ab:67:24:91:ae:af:39:f7:97:d5: 03:23:9a:d1:a1:e7:f8:7a:31:4e:7a:d3:bc:c5:02:6c:a5:93: 1a:30:7e:93:77:73:96:b1:e6:56:35:9f:2e:a0:da:74:49:b0: c4:86:4f:f6:82:9a:82:f2:35:86:89:e4:c4:b2:0d:42:7f:3d: 97:81:31:b4:90:32:2e:f5:b0:34:14:5a:c7:9c:14:b4:a7:d1: 69:a5:41:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUxMjMxMDEyMjA0WhcNMjYwMTA3MDEyMjA0WjAYMRYwFAYD VQQDDA02OTU0N2FiYy1kZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVKzmlzPI0uJ2dpipVLalYVNZHC9pgfG+ROhUIyQEvBFi+FFKkTyIJ8bGAQn 3qx3bRdHIkKHULnqhtbfBzCWTg8P/yr54EOR5hQjS72oAsWblNQUOROLaEPpr7dI +XTITbBf+8DSnPhwxBmVWtZHJh3IReDSpjuBZwcigEmODrT17Q2l3hHHUVvYpzOW MOY/Nn8i5Nw6kmhVv8Gvmf54ZO5H0P9nfZf3kVgXGRKvhc06CZbyJrNiXohvUAxC +MO5AfKRqp6AJxA1neuwJ6y9/cCYKz/IEzsR7cExpyfaiPA0r4CdLiI9VkXf/R3e DZQO1kaIGXwxsQPfqx1YO2IwwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHc1i02 j0x5PXSFkWxqtJouzHCUMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXq4PJDFLSSMiQqn6smgA8r/04QYHIBjSgTyip8xpEd1cqIw/Rj1t oqkIPoGtZAkl9SV/VPP5urtqoCpx8qcw35yPBVz93xn+N36fP2gBQnMFHwn6Ls27 o0N62Cbep40yZtB+9nftKb/4ylWkJpxBreNQa8qjpaOEHjMqZ2kETNkI6EIwEaqt xof8CYdcHBiQyLRp9TZ+2NztajT0PLLje9ngj5uh9blTqqtnJJGurzn3l9UDI5rR oef4ejFOetO8xQJspZMaMH6Td3OWseZWNZ8uoNp0SbDEhk/2gpqC8jWGieTEsg1C fz2XgTG0kDIu9bA0FFrHnBS0p9FppUGe -----END CERTIFICATE-----Generated at Wed Dec 31 09:07:53 2025 by rpki-client