This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: riTECy8IYEoo0kGJvTVX8ur9LHXgSl9JOn5+j+1mflY= Subject key identifier: E4:42:73:C8:2E:AD:E7:CE:8D:A5:2C:1F:6A:46:13:9A:84:9A:52:9E Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01AB Signing time: Sat 27 Dec 2025 02:14:26 +0000 Manifest this update: Sat 27 Dec 2025 02:14:25 +0000 Manifest next update: Sat 03 Jan 2026 02:14:25 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: d4Akn+C7QP2Nz9yDpSzklzlgdTPgjt4dAQduAGq/TZg=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Dec 27 02:14:25 2025 GMT Not After : Jan 3 02:14:25 2026 GMT Subject: CN=694f4102-2590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:49:27:7a:10:a2:2f:b6:c9:ce:6d:a8:80: 8b:24:5d:8d:69:ae:40:2e:20:ac:0e:ba:97:df:2d: 36:b6:4a:02:03:38:1a:b9:88:fe:36:c2:41:4e:11: f7:68:b2:31:57:dd:e6:33:b0:fb:62:b7:3a:a0:7d: d0:16:76:58:18:5d:6f:99:9d:55:f4:bc:c7:25:2e: 8c:45:e6:6c:34:0d:76:c7:76:b5:f6:bb:4d:98:8c: 2c:45:61:ff:cd:15:d4:06:06:37:36:26:4f:2d:d3: 65:55:8d:fe:75:6d:9d:f5:fa:09:26:b5:b4:6f:b9: e9:bc:85:86:72:bd:1f:66:cb:8c:25:c4:cd:96:fa: 18:23:b6:58:51:6e:f1:43:5e:99:d0:f9:91:68:cc: 74:e5:1a:9d:64:9c:24:f4:69:d2:21:81:58:04:8d: 4b:df:79:d6:71:0c:55:4d:e7:ea:e0:6c:32:7f:c9: a5:c3:14:ff:1c:96:84:64:a1:b8:3e:9d:6c:f4:97: e7:fc:11:82:68:26:19:44:bf:ef:98:08:49:d3:7a: 24:40:87:0d:c7:29:d4:cd:7e:b4:f2:4a:c4:8d:8e: 53:b8:02:03:84:d1:b6:e7:76:32:f6:95:db:36:c5: b1:13:57:65:9d:e1:e9:6d:a0:0e:50:cf:47:ed:d1: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:73:C8:2E:AD:E7:CE:8D:A5:2C:1F:6A:46:13:9A:84:9A:52:9E X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:d0:d7:a0:59:10:89:ca:c2:77:09:48:28:bd:06:ea:4a:fb: d9:e4:86:70:70:81:f2:ed:d7:69:fd:9b:7e:95:33:91:11:68: 8f:85:b0:1f:5e:80:b0:43:b4:2e:bb:c6:73:01:09:7c:42:fe: 12:b7:f1:87:46:df:89:cc:24:d7:32:f9:da:b2:22:c9:63:73: a5:18:b6:35:e5:5e:99:b7:25:e8:99:c2:f4:99:4f:4d:35:b6: 00:02:f6:0b:87:21:fc:c1:7d:6a:0f:c6:64:5b:81:47:81:0e: df:d7:7c:1e:e3:86:7e:46:9b:94:8d:46:b7:8b:32:5c:f2:7e: a0:d8:46:36:21:f8:9b:f4:56:99:46:b7:da:0f:3f:7b:8f:b4: b0:3e:6e:9f:ed:ce:d1:c5:b8:2b:86:b7:5b:a2:d4:72:35:42: 89:c0:ee:67:ef:57:e6:f7:6b:d5:6c:c3:b3:27:9f:72:c0:c0: 22:89:40:ca:13:31:79:e8:b4:65:2e:86:57:f4:c3:d4:27:21: 6b:73:3a:3d:0a:fc:f2:8b:b0:13:5a:2e:f2:35:8b:00:c9:ae: 09:95:d2:3c:2c:52:40:3d:4c:c6:eb:06:42:88:99:6e:f8:5c: 71:e1:f7:3d:4f:92:0f:6a:53:ba:71:8f:26:c7:2a:f2:e8:b1: 54:ac:80:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUxMjI3MDIxNDI1WhcNMjYwMTAzMDIxNDI1WjAYMRYwFAYD VQQDDA02OTRmNDEwMi0yNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuxJJ3oQoi+2yc5tqICLJF2Naa5ALiCsDrqX3y02tkoCAzgauYj+NsJBThH3 aLIxV93mM7D7Yrc6oH3QFnZYGF1vmZ1V9LzHJS6MReZsNA12x3a19rtNmIwsRWH/ zRXUBgY3NiZPLdNlVY3+dW2d9foJJrW0b7npvIWGcr0fZsuMJcTNlvoYI7ZYUW7x Q16Z0PmRaMx05RqdZJwk9GnSIYFYBI1L33nWcQxVTefq4Gwyf8mlwxT/HJaEZKG4 Pp1s9Jfn/BGCaCYZRL/vmAhJ03okQIcNxynUzX608krEjY5TuAIDhNG253Yy9pXb NsWxE1dlneHpbaAOUM9H7dH+AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORCc8gu refOjaUsH2pGE5qEmlKeMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP0NegWRCJysJ3CUgovQbqSvvZ5IZwcIHy7ddp/Zt+lTOREWiPhbAf XoCwQ7Quu8ZzAQl8Qv4St/GHRt+JzCTXMvnasiLJY3OlGLY15V6ZtyXomcL0mU9N NbYAAvYLhyH8wX1qD8ZkW4FHgQ7f13we44Z+RpuUjUa3izJc8n6g2EY2Ifib9FaZ RrfaDz97j7SwPm6f7c7RxbgrhrdbotRyNUKJwO5n71fm92vVbMOzJ59ywMAiiUDK EzF56LRlLoZX9MPUJyFrczo9Cvzyi7ATWi7yNYsAya4JldI8LFJAPUzG6wZCiJlu +Fxx4fc9T5IPalO6cY8mxyry6LFUrICs -----END CERTIFICATE-----Generated at Sat Dec 27 22:33:56 2025 by rpki-client