This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json) Hash identifier: VhF38Jw5GTw1h3BEaYXe+hrduN46PUlasWesLtJd4zk= Subject key identifier: 67:F5:7E:76:A5:A9:F6:27:BE:7A:11:06:30:FD:3E:24:8D:20:A8:95 Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft Manifest number: 0332 Signing time: Thu 25 Dec 2025 00:08:58 +0000 Manifest this update: Thu 25 Dec 2025 00:08:58 +0000 Manifest next update: Thu 01 Jan 2026 00:08:58 +0000 Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: A40yjAyEQhPQMI1xAGTpX2xK+D7C4qc0jq5ivFMhf9I=) 2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: KkExhLw32KhJNP1vh+cfX+3O2VUbbBLKFmBZMRijetQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Validity Not Before: Dec 25 00:08:58 2025 GMT Not After : Jan 1 00:08:58 2026 GMT Subject: CN=694c809a-feb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:e2:56:31:75:56:d3:4f:28:80:89:49:10: 59:93:27:77:50:73:16:50:f2:4e:24:04:d9:a7:ba: 74:0b:a6:89:87:e1:97:27:ec:5c:f1:6f:26:45:9b: 9f:a1:3c:62:a3:97:a5:4d:18:be:2a:47:e4:3e:bb: 50:0f:d4:5e:b3:34:f1:c4:ad:af:24:7f:14:31:a0: 1f:99:78:ea:2e:f9:10:be:84:e8:43:8a:2c:50:d4: f7:01:56:6f:06:bc:5b:c3:5e:41:8c:49:4c:64:c5: 3a:53:2f:ac:ac:4b:d8:1f:b8:21:d9:f7:a6:c6:8b: 63:bb:ae:aa:17:4e:13:e7:4b:cb:fa:32:17:ce:5d: 0f:e0:f4:15:2c:04:6f:84:02:2d:a2:6b:36:0b:f2: 22:9f:db:a6:83:23:3b:44:51:5f:75:b3:13:b3:6c: 44:19:ea:b3:2c:5b:b6:e9:82:91:43:ae:be:6c:a6: de:ff:1d:8b:47:68:c9:34:6a:0d:79:48:64:f5:39: 01:05:a5:d9:71:e6:eb:77:20:05:ac:31:2a:c7:7c: 67:d6:f9:1e:c2:3b:53:a9:83:42:56:77:dd:61:4d: 5f:fc:c5:e2:ec:6f:27:e2:11:1b:8c:9a:11:f6:11: 7e:36:83:c9:e6:f7:9a:b3:e3:2f:c6:69:ed:8b:bb: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:7E:76:A5:A9:F6:27:BE:7A:11:06:30:FD:3E:24:8D:20:A8:95 X509v3 Authority Key Identifier: keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:90:e6:94:88:f8:da:49:d7:18:81:34:28:28:ed:62:82:6b: 24:5c:ff:8b:5f:98:3d:4f:22:dc:10:a2:a2:ea:6b:bc:e2:4e: 88:35:75:a8:b6:49:2b:79:ed:e2:b2:a7:0d:10:a1:37:9c:06: 2e:fc:f4:1e:71:fe:d3:38:b5:23:9e:80:61:2f:2d:70:c4:83: 34:c3:1b:f0:00:4a:2a:cf:a4:ff:61:0c:b3:3a:c4:a8:36:a5: a8:5d:d3:60:df:ed:6d:9f:33:f3:bd:d0:49:bc:08:b6:21:58: dd:b7:04:0f:59:e6:0a:ab:67:6b:f7:a1:0a:1c:b8:03:f9:25: 10:98:b6:4c:8f:d7:67:84:93:62:6a:d9:a9:db:83:a8:5e:c7: ee:99:96:dd:44:fd:1a:3e:94:de:eb:66:ca:fe:b5:cd:cc:0f: 05:22:74:1c:64:23:19:27:de:09:e3:f3:d6:3c:03:05:4b:26: 56:5f:53:95:07:df:f8:1f:3d:b4:4f:78:cc:ea:4b:15:fa:ac: a0:09:d2:7d:08:c5:8f:c1:4c:c1:eb:f4:2c:ab:28:5f:cb:b7: 15:1d:65:24:7e:e7:ed:a5:a3:b3:52:b2:98:b5:7b:68:74:6d: da:1e:b2:bb:2d:1e:cd:17:37:ca:a9:70:af:97:32:9c:e3:15: 81:a8:2b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB OEIwNDY2RDUwHhcNMjUxMjI1MDAwODU4WhcNMjYwMTAxMDAwODU4WjAYMRYwFAYD VQQDDA02OTRjODA5YS1mZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi9niVjF1VtNPKICJSRBZkyd3UHMWUPJOJATZp7p0C6aJh+GXJ+xc8W8mRZuf oTxio5elTRi+KkfkPrtQD9ReszTxxK2vJH8UMaAfmXjqLvkQvoToQ4osUNT3AVZv Brxbw15BjElMZMU6Uy+srEvYH7gh2femxotju66qF04T50vL+jIXzl0P4PQVLARv hAItoms2C/Iin9umgyM7RFFfdbMTs2xEGeqzLFu26YKRQ66+bKbe/x2LR2jJNGoN eUhk9TkBBaXZcebrdyAFrDEqx3xn1vkewjtTqYNCVnfdYU1f/MXi7G8n4hEbjJoR 9hF+NoPJ5veas+Mvxmnti7tc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf1fnal qfYnvnoRBjD9PiSNIKiVMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzE3NC9CMTMxRjg5Q0VFQ0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBn UHYxcl9lcnVKb3Fvc0VadFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAekOaUiPjaSdcYgTQoKO1igmskXP+LX5g9TyLcEKKi6mu84k6INXWo tkkree3isqcNEKE3nAYu/PQecf7TOLUjnoBhLy1wxIM0wxvwAEoqz6T/YQyzOsSo NqWoXdNg3+1tnzPzvdBJvAi2IVjdtwQPWeYKq2dr96EKHLgD+SUQmLZMj9dnhJNi atmp24OoXsfumZbdRP0aPpTe62bK/rXNzA8FInQcZCMZJ94J4/PWPAMFSyZWX1OV B9/4Hz20T3jM6ksV+qygCdJ9CMWPwUzB6/Qsqyhfy7cVHWUkfuftpaOzUrKYtXto dG3aHrK7LR7NFzfKqXCvlzKc4xWBqCs3 -----END CERTIFICATE-----Generated at Thu Dec 25 14:56:53 2025 by rpki-client