This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: mdGyHYBEQukpm8GzFKWEtaPwFkNXpMv1ucpQASki60k= Subject key identifier: F2:17:A1:74:EC:69:E0:A7:69:38:3C:A6:AA:D5:8D:8B:A3:93:08:93 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0D0D Signing time: Thu 18 Dec 2025 17:51:56 +0000 Manifest this update: Thu 18 Dec 2025 17:51:56 +0000 Manifest next update: Thu 25 Dec 2025 17:51:56 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: XZHX4n39898OxpSwQxxk2LjBYd/iEvwm/YJrW1M561k=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: ovp+DvhtxAcfaLvm4B/msgxFKoL594Nnc6PIvhnqZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Dec 18 17:51:56 2025 GMT Not After : Dec 25 17:51:56 2025 GMT Subject: CN=69443f3c-b878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:f7:49:87:b9:72:16:b1:bb:54:10:57:c5: a5:ed:f4:f5:01:ba:c4:b6:7d:56:3b:bf:dc:67:33: 20:c4:a7:ae:80:74:d2:ee:b8:6e:b4:db:6d:ea:d5: 79:90:cd:1f:89:19:97:a4:63:1b:22:00:1f:fb:0d: 63:ad:b5:4b:66:f8:7f:9e:2b:a6:20:a3:63:78:f7: d7:44:66:46:18:12:5e:48:b6:ea:b2:93:7b:67:31: e8:9b:28:fb:cd:5f:21:1a:8e:55:1b:16:16:59:f5: 42:f7:af:db:96:5f:07:45:53:f7:46:d4:95:5f:1f: c7:02:75:85:a4:a7:2d:09:ff:66:59:bc:5f:10:85: fd:60:8a:18:4d:07:07:7d:dd:68:ad:ae:8d:d7:f1: 9c:36:5b:f3:fb:16:69:72:9c:03:9f:ad:dc:5c:ab: 0b:81:6f:9b:98:d2:ba:d6:df:59:7c:a0:c4:a5:7c: 4f:17:76:96:a1:7e:27:af:42:0e:c8:67:78:71:9c: c6:f7:13:f6:f2:da:f7:50:f9:a8:5a:86:bf:b4:3c: 10:9f:6b:39:e5:09:e8:4d:cb:64:c7:f1:5b:2d:8c: c4:b0:d5:96:43:cb:29:90:c0:66:6d:d4:18:41:42: d1:45:4d:19:92:6a:d1:a0:9e:09:8c:9c:7c:c2:7f: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:17:A1:74:EC:69:E0:A7:69:38:3C:A6:AA:D5:8D:8B:A3:93:08:93 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:91:c9:ee:54:d4:c7:70:01:bb:dc:71:32:c3:12:ad:0c: b0:4c:12:41:93:67:12:98:b1:0d:bf:62:b0:14:7d:3c:1b:60: ab:f1:11:1d:a6:54:d1:c4:91:67:6c:7a:73:f4:bc:61:6a:8f: cc:84:f7:98:38:b3:c2:d9:22:a2:fa:9f:b2:40:ca:ab:b4:f1: ed:a7:48:18:cc:c8:e4:a9:15:a3:f3:8e:5d:f1:f4:9f:e5:8f: da:f8:08:aa:60:d3:12:4c:b1:73:aa:02:d9:4f:33:91:07:55: ef:cf:d6:10:38:cd:33:75:9a:f4:d4:6a:50:29:8c:cc:b9:ed: 7e:2a:15:cb:14:dc:d5:5a:ea:dd:94:9d:b7:fc:3d:38:05:80: 23:13:84:95:fe:71:6e:3d:0d:23:06:04:3f:8d:ea:9f:30:f4: 68:5f:a6:6f:14:6b:11:7c:b3:54:f8:64:6a:23:e1:d6:69:26: e4:e7:18:b6:0a:81:f2:c2:19:ab:70:ad:54:ae:a3:1b:3e:7e: cd:b1:f8:be:a7:6c:29:b7:df:a7:38:d3:03:01:ac:4a:48:3c: a8:6c:cf:c6:b9:d4:4c:4f:0e:a2:9e:27:03:b9:16:7e:24:0a: 2e:53:60:a2:2c:1a:23:3e:ff:d4:cf:7f:77:54:ff:25:2f:d1: 61:aa:70:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUxMjE4MTc1MTU2WhcNMjUxMjI1MTc1MTU2WjAYMRYwFAYD VQQDDA02OTQ0M2YzYy1iODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU/3SYe5chaxu1QQV8Wl7fT1AbrEtn1WO7/cZzMgxKeugHTS7rhutNtt6tV5 kM0fiRmXpGMbIgAf+w1jrbVLZvh/niumIKNjePfXRGZGGBJeSLbqspN7ZzHomyj7 zV8hGo5VGxYWWfVC96/bll8HRVP3RtSVXx/HAnWFpKctCf9mWbxfEIX9YIoYTQcH fd1ora6N1/GcNlvz+xZpcpwDn63cXKsLgW+bmNK61t9ZfKDEpXxPF3aWoX4nr0IO yGd4cZzG9xP28tr3UPmoWoa/tDwQn2s55QnoTctkx/FbLYzEsNWWQ8spkMBmbdQY QULRRU0ZkmrRoJ4JjJx8wn+UhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIXoXTs aeCnaTg8pqrVjYujkwiTMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAm5HJ7lTUx3ABu9xxMsMSrQywTBJBk2cSmLENv2KwFH08G2Cr8REd plTRxJFnbHpz9Lxhao/MhPeYOLPC2SKi+p+yQMqrtPHtp0gYzMjkqRWj845d8fSf 5Y/a+AiqYNMSTLFzqgLZTzORB1Xvz9YQOM0zdZr01GpQKYzMue1+KhXLFNzVWurd lJ23/D04BYAjE4SV/nFuPQ0jBgQ/jeqfMPRoX6ZvFGsRfLNU+GRqI+HWaSbk5xi2 CoHywhmrcK1UrqMbPn7Nsfi+p2wpt9+nONMDAaxKSDyobM/GudRMTw6inicDuRZ+ JAouU2CiLBojPv/Uz393VP8lL9FhqnCN -----END CERTIFICATE-----Generated at Fri Dec 19 17:48:01 2025 by rpki-client