This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: HFXpLXpo0PJAe8ZpmFUqunQOJqMXfrz00Bsio/EZ9Yo= Subject key identifier: 39:74:43:25:ED:90:1B:96:30:2C:D9:5E:68:4B:C8:A6:32:A0:0A:0B Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: 0149 Signing time: Fri 19 Dec 2025 03:50:09 +0000 Manifest this update: Fri 19 Dec 2025 03:50:09 +0000 Manifest next update: Fri 26 Dec 2025 03:50:09 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: LeuYKdiyPSl2uqAP/+vUj/ZhjW1t4ZGcs00qJMPD0mo=) 2: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: cnwfSeIwvwV6lWFdzwgrorO9+SXGNy195qZfyMAiJts=) 3: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: 73Ygy8fRe0dHQxkQy1hZlh4j1TI6ruDgIOxzmdlFu7c=) 4: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: 5h9rfOVaMmYvPj2z2Ai85lMHTizuoozbNVPH10IYIS0=) 5: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PPgHi4xJDW0BKQRIHTMdssQv8Q8vcJnoqHRhx2Hamts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Dec 19 03:50:09 2025 GMT Not After : Dec 26 03:50:09 2025 GMT Subject: CN=6944cb71-01aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:59:3e:fd:f3:ca:3a:33:71:62:67:b8:67: b9:07:13:4b:c6:82:bb:2f:f8:b0:72:64:e4:f7:ec: b6:94:b2:b7:55:e1:f7:34:e4:1d:a7:bf:2c:be:ca: 59:fb:b2:5d:c8:87:65:1b:20:52:5d:69:0e:ca:6b: 72:7e:c7:ea:f4:71:25:8b:ca:4a:a2:62:30:de:9e: fb:65:36:d4:43:8c:26:2c:6f:89:53:26:bb:c5:0e: af:e9:b5:dd:e6:ea:5a:3e:9f:1c:98:43:40:a4:bb: 88:6b:e0:f6:60:4f:9d:db:f7:68:ab:fe:fa:1e:82: 28:b3:52:43:a4:de:fa:8f:9e:0b:3c:f4:ab:1a:6a: e7:7b:7b:92:ad:c0:53:36:fa:bd:9e:e4:98:5e:f3: a8:33:c5:f4:5b:9f:ec:3c:93:94:af:90:5e:c5:1e: 20:70:3c:08:a7:61:0e:21:b1:61:57:6b:65:ff:ed: bb:e0:13:0f:75:77:f6:30:51:40:88:10:b8:8d:ef: 58:7c:45:72:3a:bf:90:9d:60:b2:fc:4e:e2:42:36: 0d:7f:37:90:fc:9c:4c:2e:14:19:f6:5e:a7:33:55: 52:4c:11:e5:14:96:46:d4:7f:70:aa:bc:18:0f:16: e9:9d:58:41:6f:63:60:3c:3c:07:ce:b2:15:aa:3e: e2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:74:43:25:ED:90:1B:96:30:2C:D9:5E:68:4B:C8:A6:32:A0:0A:0B X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a8:94:5d:ac:13:9a:70:fd:e0:0b:35:75:d7:0f:c4:38:df: 31:4b:c0:d2:51:cd:71:fc:06:69:ca:35:dc:46:b8:a4:12:7f: 2a:29:bb:ef:77:c3:84:bb:fa:d3:ce:87:d4:d0:91:d5:0f:d0: 6b:77:ea:22:75:c0:09:fd:70:b5:f6:e5:2c:e8:48:ab:09:78: f7:9e:48:4a:21:fe:c3:bc:07:2b:cb:fd:4b:28:b4:db:f3:3e: f5:b4:47:f1:63:b4:69:28:17:b6:87:5c:b4:8e:0c:16:c4:ac: 4a:41:3a:10:a0:2c:8a:45:b6:fe:9a:25:80:f8:23:05:a8:50: 13:95:04:dc:41:21:e5:ed:12:19:66:18:08:2a:8b:dc:c7:91: 89:85:e9:ca:1f:a2:45:d9:96:4a:b2:7b:5c:be:6a:05:be:7c: bd:ff:9f:2c:eb:aa:3b:0f:eb:55:3d:04:49:15:6f:cf:4a:34: ca:e3:f5:9b:89:53:4e:a3:8f:19:5c:e5:93:04:00:a2:c3:74: 65:53:bf:62:b0:b0:f0:7d:44:fc:ae:d8:7e:d4:d6:12:c4:19: 6b:cc:01:c4:dc:8c:af:5f:8f:cf:c9:f4:86:2c:60:53:66:a4: 88:7f:8a:38:9d:6e:e1:e1:bc:09:0f:4d:d7:e2:1c:08:32:aa: b6:31:7a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjUxMjE5MDM1MDA5WhcNMjUxMjI2MDM1MDA5WjAYMRYwFAYD VQQDDA02OTQ0Y2I3MS0wMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOFZPv3zyjozcWJnuGe5BxNLxoK7L/iwcmTk9+y2lLK3VeH3NOQdp78svspZ +7JdyIdlGyBSXWkOymtyfsfq9HEli8pKomIw3p77ZTbUQ4wmLG+JUya7xQ6v6bXd 5upaPp8cmENApLuIa+D2YE+d2/doq/76HoIos1JDpN76j54LPPSrGmrne3uSrcBT Nvq9nuSYXvOoM8X0W5/sPJOUr5BexR4gcDwIp2EOIbFhV2tl/+274BMPdXf2MFFA iBC4je9YfEVyOr+QnWCy/E7iQjYNfzeQ/JxMLhQZ9l6nM1VSTBHlFJZG1H9wqrwY DxbpnVhBb2NgPDwHzrIVqj7ivwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDl0QyXt kBuWMCzZXmhLyKYyoAoLMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpqJRdrBOacP3gCzV11w/EON8xS8DSUc1x/AZpyjXcRrikEn8qKbvv d8OEu/rTzofU0JHVD9Brd+oidcAJ/XC19uUs6EirCXj3nkhKIf7DvAcry/1LKLTb 8z71tEfxY7RpKBe2h1y0jgwWxKxKQToQoCyKRbb+miWA+CMFqFATlQTcQSHl7RIZ ZhgIKovcx5GJhenKH6JF2ZZKsntcvmoFvny9/58s66o7D+tVPQRJFW/PSjTK4/Wb iVNOo48ZXOWTBACiw3RlU79isLDwfUT8rth+1NYSxBlrzAHE3IyvX4/PyfSGLGBT ZqSIf4o4nW7h4bwJD03X4hwIMqq2MXoT -----END CERTIFICATE-----Generated at Fri Dec 19 19:25:33 2025 by rpki-client