This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: xVSbjZnXn9NOy7BJBJjSJHECQOQJpQTeGycHwDYoMGg= Subject key identifier: 00:A8:DE:22:8A:41:80:6C:4B:87:F7:C1:BB:A4:A3:28:9E:6B:A8:BB Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 04 Signing time: Fri 19 Dec 2025 07:01:39 +0000 Manifest this update: Fri 19 Dec 2025 07:01:38 +0000 Manifest next update: Fri 26 Dec 2025 07:01:38 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: xF3Db2uJ1PjxVQb/pywWNWXkRNO0SIlcVF34L4cQXLE=) 2: F8846850D90D11F0AF9B1D207DD3641D.roa (hash: C8bVTV94pOOCxrg4kh5f59qcGeBnKrcTHRFtNag76kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Dec 19 07:01:38 2025 GMT Not After : Dec 26 07:01:38 2025 GMT Subject: CN=6944f853-8d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:80:60:4a:8f:0a:d0:a8:ec:88:ba:07:34: 7c:82:d9:e7:be:fa:5c:4a:5b:99:68:a0:9d:8f:f5: 51:ec:b4:f8:24:e6:40:d7:66:23:10:c0:cc:37:af: 19:e3:8b:7c:13:f5:31:9f:6f:c6:40:59:9b:5c:50: e7:58:cb:b5:01:e5:79:f6:87:7c:6f:64:dd:80:aa: 55:c0:32:3d:30:d0:8f:3f:dd:50:d6:de:a6:00:fc: 59:9c:85:81:e2:33:da:52:9b:b4:7f:87:7b:95:33: 7b:40:02:d4:5e:72:69:40:4a:95:ae:2f:dc:bd:1b: 28:b9:52:de:28:09:bb:c9:bf:8b:ee:6e:e1:8f:88: ac:ee:8b:40:a2:9b:a3:b1:f2:1e:4d:22:98:54:3e: f3:99:9a:3f:2e:6a:ff:0c:48:77:4f:f5:06:c7:4c: 41:a1:01:44:a3:c9:07:73:86:13:6f:10:30:9c:2c: 64:64:e4:a4:af:50:90:9d:3c:14:c6:17:ff:52:0d: 4e:e5:6e:dd:e2:70:76:b9:d8:db:b3:ad:c6:49:bb: 98:aa:e8:7b:c4:54:34:f7:0c:c8:40:38:6a:9e:9a: 0c:f6:4d:31:83:6d:76:fb:91:5b:19:82:d2:31:17: 65:24:e9:f2:0b:64:ec:52:89:66:e1:a7:37:2c:69: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A8:DE:22:8A:41:80:6C:4B:87:F7:C1:BB:A4:A3:28:9E:6B:A8:BB X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:70:f0:ac:6a:01:3d:80:ae:f4:c9:a2:d3:e2:2d:6b:0f:df: 18:ca:fd:27:f6:46:57:1e:ce:48:fd:a3:f0:76:96:3a:88:46: 1f:e0:c4:ab:37:40:cb:f2:80:11:3a:60:0b:d3:42:2f:34:be: 1b:ec:d1:a1:7a:cb:39:01:d2:be:57:00:71:b6:a8:a3:5a:3c: 3a:c5:27:47:f4:2b:3b:ef:70:4a:61:e0:5e:ad:4d:d9:60:61: 00:73:56:cf:bf:03:d7:7d:03:7a:cb:e6:03:4d:73:8b:d9:29: 15:dd:3b:8e:01:c5:60:42:51:f8:95:59:ff:e1:bb:07:f6:49: d6:5c:90:66:c2:8e:4d:c4:94:d0:9c:50:e9:7b:e9:4c:b6:ac: 35:3f:43:e1:02:73:22:df:7b:d8:96:98:33:19:72:a2:18:de: b8:e6:ea:34:7d:2c:91:0f:5c:f9:35:7f:8d:a8:5a:3d:0e:aa: dc:6c:10:dc:d8:b4:66:f2:c0:44:0f:3f:e7:30:2e:94:9d:a4: d3:6e:83:f4:77:e1:ff:34:67:8d:32:3b:15:02:9a:57:b3:57: a5:de:06:d0:fc:df:c0:e6:0d:c8:03:2e:83:e6:4d:f9:be:42: 22:d4:10:c5:2d:81:36:6e:f9:05:72:cd:12:10:8f:ba:5e:e4: 22:c6:34:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNTEyMTkwNzAxMzhaFw0yNTEyMjYwNzAxMzhaMBgxFjAUBgNV BAMMDTY5NDRmODUzLThkMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+r4BgSo8K0KjsiLoHNHyC2ee++lxKW5looJ2P9VHstPgk5kDXZiMQwMw3rxnj i3wT9TGfb8ZAWZtcUOdYy7UB5Xn2h3xvZN2AqlXAMj0w0I8/3VDW3qYA/FmchYHi M9pSm7R/h3uVM3tAAtRecmlASpWuL9y9Gyi5Ut4oCbvJv4vubuGPiKzui0Cim6Ox 8h5NIphUPvOZmj8uav8MSHdP9QbHTEGhAUSjyQdzhhNvEDCcLGRk5KSvUJCdPBTG F/9SDU7lbt3icHa52NuzrcZJu5iq6HvEVDT3DMhAOGqemgz2TTGDbXb7kVsZgtIx F2Uk6fILZOxSiWbhpzcsaZPvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAKjeIopB gGxLh/fBu6SjKJ5rqLswHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM5w8KxqAT2ArvTJotPiLWsP3xjK/Sf2Rlcezkj9o/B2ljqIRh/gxKs3 QMvygBE6YAvTQi80vhvs0aF6yzkB0r5XAHG2qKNaPDrFJ0f0KzvvcEph4F6tTdlg YQBzVs+/A9d9A3rL5gNNc4vZKRXdO44BxWBCUfiVWf/huwf2SdZckGbCjk3ElNCc UOl76Uy2rDU/Q+ECcyLfe9iWmDMZcqIY3rjm6jR9LJEPXPk1f42oWj0OqtxsENzY tGbywEQPP+cwLpSdpNNug/R34f80Z40yOxUCmlezV6XeBtD838DmDcgDLoPmTfm+ QiLUEMUtgTZu+QVyzRIQj7pe5CLGNA0= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:58 2025 by rpki-client