This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: CspxavueT5BSgZZ8IPqXee8xoeqlClehhvtGM3Q5RUw= Subject key identifier: 2A:9A:09:BB:61:E2:36:2D:CF:27:E4:13:14:7D:06:9D:01:77:ED:F9 Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0A4E Signing time: Thu 18 Dec 2025 19:17:08 +0000 Manifest this update: Thu 18 Dec 2025 19:17:07 +0000 Manifest next update: Thu 25 Dec 2025 19:17:07 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: EQFYd+4BklXygY+zOuzh82J7s5K71vho+0jdSVeVye4=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: qJ4Xg9nEOiVPnUmULztNOTN0r580BUywYygdp4on9WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Dec 18 19:17:07 2025 GMT Not After : Dec 25 19:17:07 2025 GMT Subject: CN=69445334-b9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:ee:ea:2d:3c:13:09:87:6f:24:a9:63:3e: df:a7:9a:0e:d3:5a:0b:a8:61:ab:8e:26:ff:36:d1: 92:9c:54:a7:d7:a5:98:aa:2d:0a:64:09:89:19:53: a6:d5:09:09:a3:27:30:8d:82:b2:5d:9e:62:51:e7: 7e:3f:bb:3c:70:6d:be:9c:d7:b1:6a:d6:07:16:b5: 7a:27:34:3f:d5:35:24:32:dd:f5:0b:de:46:e0:66: d6:30:66:66:7f:a3:c9:36:08:7f:1a:9e:e0:78:28: e5:1d:bf:58:b0:3e:84:d9:36:74:75:6e:41:39:13: b8:b3:5e:ea:db:39:fb:04:0f:7b:a6:94:ea:10:c1: db:54:fb:11:45:50:1c:17:c1:63:dc:36:d9:54:cb: 6b:dc:c2:38:97:36:78:74:37:c2:16:60:44:3d:59: ef:c1:7f:3b:16:e2:2d:76:a1:13:dc:4b:7a:39:8f: 14:e7:a6:cb:07:7f:06:f2:f6:22:b4:89:4a:4c:e5: 23:c8:22:4b:8b:b5:1f:1c:00:2c:65:c2:03:a0:56: 75:57:4f:d5:f0:9b:52:0d:04:f4:eb:f3:63:40:70: 5c:ed:94:fb:c8:ef:a6:de:48:6c:b7:fb:51:ee:57: fd:d7:39:0b:63:05:9a:8d:5d:e7:e8:82:c1:fb:75: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:09:BB:61:E2:36:2D:CF:27:E4:13:14:7D:06:9D:01:77:ED:F9 X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8e:72:87:fc:d5:d7:3a:3d:94:74:e3:82:72:91:38:c4:f5: 6a:39:f3:2c:d6:9f:c4:56:32:89:d3:9d:ec:07:d9:f6:df:5f: 1d:45:93:11:2f:61:b6:0f:94:7f:ac:6b:bb:6e:b5:a3:57:2c: 89:51:01:8a:45:7b:d3:21:0b:94:98:7b:27:f7:54:8a:9f:3f: 79:46:9c:84:77:63:85:1b:2a:82:9f:ca:0a:62:ef:f4:c5:1a: 59:b4:26:a9:35:d4:4f:eb:46:d0:f7:fc:81:09:10:b4:95:f4: 43:7e:7c:87:18:be:54:3d:70:c8:e5:23:b3:d1:c4:c9:db:fd: c7:5c:ae:3b:7c:1a:b0:8f:68:2c:bb:2d:98:1b:52:85:ee:f8: bf:8e:6b:ba:1c:e6:88:e2:91:6b:7c:2d:40:d7:fe:8f:74:97: 8d:0a:60:36:8e:ea:89:32:78:16:22:cd:f4:ae:be:f7:0c:86: 07:3f:e5:82:5d:0c:28:78:a1:e8:8a:b2:23:6a:f7:c5:7b:12: cc:e9:df:75:70:16:da:52:6d:78:df:fc:8b:61:8c:ab:06:e5: 0c:96:8f:7e:84:d0:e7:21:6d:64:18:a2:4b:30:81:bd:0c:99: fc:12:82:be:6f:57:ac:7c:b9:d3:f3:98:e1:a4:5c:d0:47:98: 13:a9:10:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUxMjE4MTkxNzA3WhcNMjUxMjI1MTkxNzA3WjAYMRYwFAYD VQQDDA02OTQ0NTMzNC1iOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxDu6i08EwmHbySpYz7fp5oO01oLqGGrjib/NtGSnFSn16WYqi0KZAmJGVOm 1QkJoycwjYKyXZ5iUed+P7s8cG2+nNexatYHFrV6JzQ/1TUkMt31C95G4GbWMGZm f6PJNgh/Gp7geCjlHb9YsD6E2TZ0dW5BORO4s17q2zn7BA97ppTqEMHbVPsRRVAc F8Fj3DbZVMtr3MI4lzZ4dDfCFmBEPVnvwX87FuItdqET3Et6OY8U56bLB38G8vYi tIlKTOUjyCJLi7UfHAAsZcIDoFZ1V0/V8JtSDQT06/NjQHBc7ZT7yO+m3khst/tR 7lf91zkLYwWajV3n6ILB+3W9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqaCbth 4jYtzyfkExR9Bp0Bd+35MB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXjnKH/NXXOj2UdOOCcpE4xPVqOfMs1p/EVjKJ053sB9n2318dRZMR L2G2D5R/rGu7brWjVyyJUQGKRXvTIQuUmHsn91SKnz95RpyEd2OFGyqCn8oKYu/0 xRpZtCapNdRP60bQ9/yBCRC0lfRDfnyHGL5UPXDI5SOz0cTJ2/3HXK47fBqwj2gs uy2YG1KF7vi/jmu6HOaI4pFrfC1A1/6PdJeNCmA2juqJMngWIs30rr73DIYHP+WC XQwoeKHoirIjavfFexLM6d91cBbaUm143/yLYYyrBuUMlo9+hNDnIW1kGKJLMIG9 DJn8EoK+b1esfLnT85jhpFzQR5gTqRDK -----END CERTIFICATE-----Generated at Fri Dec 19 21:59:31 2025 by rpki-client