This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: XmibdroXWzIko3RFUtNdXBfVe3yD4nxZRCjEDNxuNq4= Subject key identifier: 5D:D0:A1:65:04:A5:5D:E9:22:AC:C7:F3:E2:E9:85:50:61:40:F3:C5 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0682 Signing time: Thu 18 Dec 2025 21:52:14 +0000 Manifest this update: Thu 18 Dec 2025 21:52:13 +0000 Manifest next update: Thu 25 Dec 2025 21:52:13 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: hsnxfqPCeLouDNPJGU5Mjr8nxhzl1Bl90V54k0Uskyc=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: awVjv21LrUykJjD6b6nan1fibgTR8vl36mPtfLgV0k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Dec 18 21:52:13 2025 GMT Not After : Dec 25 21:52:13 2025 GMT Subject: CN=6944778e-22c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:2d:73:db:24:04:0e:a0:85:d8:21:ab:30: d5:c4:7f:8a:89:98:c4:79:ac:16:17:20:e3:9b:c7: bf:42:62:19:76:1a:95:65:34:a1:a9:98:55:56:7f: 6e:fe:da:88:b8:27:9a:85:c0:94:00:97:3d:66:b8: 86:5a:1f:1f:85:74:8b:6e:e5:16:fb:6f:23:3a:5c: 1e:c7:2a:53:42:55:e8:83:9a:01:82:70:d3:d9:24: c9:23:0b:d0:d7:de:71:95:ec:57:ab:1a:f7:fe:26: 21:b5:19:9a:c2:a1:fb:6f:5f:8e:30:98:35:a2:b6: 97:bf:02:bb:68:2a:76:f2:95:ec:6a:e3:c2:ec:db: 95:83:2a:e8:e2:71:65:f4:d9:59:04:bf:a8:ed:7d: cc:be:af:0b:be:28:29:73:a5:f8:c8:e7:ac:48:3a: 2d:c7:24:cc:e0:90:dd:58:df:b4:50:6c:18:13:da: 29:7c:0c:31:f5:cc:8f:28:6d:82:08:46:b9:c5:b0: 7f:72:dd:89:7b:b0:e3:5e:9b:97:05:b6:ed:64:16: a7:cc:91:29:07:93:43:af:ce:5e:ba:5f:d6:a0:93: 74:00:ae:53:98:fe:aa:45:4a:d3:a2:60:20:3b:2b: 50:f9:c3:79:44:72:5a:8c:1b:38:46:11:d4:e5:6d: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D0:A1:65:04:A5:5D:E9:22:AC:C7:F3:E2:E9:85:50:61:40:F3:C5 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4a:47:11:1f:7f:94:d8:f1:d4:c4:47:0b:d8:9b:e1:31:d8: f5:97:99:21:b5:c7:44:e6:8b:7a:74:8c:e8:5a:98:09:db:2f: 0d:ee:c6:49:87:1c:b9:9f:bc:1a:34:f8:67:d9:38:7e:01:83: 5c:02:82:ef:15:91:ad:9a:d3:41:37:9c:cc:34:b9:9d:74:3d: b3:25:1c:d8:91:6e:97:b9:39:c9:7d:8f:36:18:b0:2b:be:ff: 14:0b:b8:f4:3d:bf:9d:92:7b:f5:0a:0d:43:ff:28:e5:76:8b: 87:41:a9:37:9f:54:bd:83:46:83:0b:dc:49:99:25:87:9f:ba: ac:7c:cf:1d:e9:bc:48:b1:78:c6:d7:64:86:1d:e7:00:c8:15: a0:9a:0c:1e:24:ad:54:a0:d2:99:76:b4:87:b6:d1:cc:9e:8d: a4:5b:a5:02:ec:15:69:f9:30:b1:1a:93:b7:79:e5:ff:2c:ba: 48:42:cc:73:4b:5a:72:a0:7c:8f:72:c7:a5:22:e1:99:51:a0: 69:21:ea:96:95:95:29:f5:f3:d7:ed:9b:53:2f:49:30:98:23: e9:23:53:28:8a:e3:f9:fb:20:51:23:05:dc:2b:2a:06:6a:53: 4c:0c:a8:75:04:5e:c4:ef:d7:0e:14:9c:21:fd:34:4f:0b:3b: 93:07:f6:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUxMjE4MjE1MjEzWhcNMjUxMjI1MjE1MjEzWjAYMRYwFAYD VQQDDA02OTQ0Nzc4ZS0yMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNEtc9skBA6ghdghqzDVxH+KiZjEeawWFyDjm8e/QmIZdhqVZTShqZhVVn9u /tqIuCeahcCUAJc9ZriGWh8fhXSLbuUW+28jOlwexypTQlXog5oBgnDT2STJIwvQ 195xlexXqxr3/iYhtRmawqH7b1+OMJg1oraXvwK7aCp28pXsauPC7NuVgyro4nFl 9NlZBL+o7X3Mvq8Lvigpc6X4yOesSDotxyTM4JDdWN+0UGwYE9opfAwx9cyPKG2C CEa5xbB/ct2Je7DjXpuXBbbtZBanzJEpB5NDr85eul/WoJN0AK5TmP6qRUrTomAg OytQ+cN5RHJajBs4RhHU5W34BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3QoWUE pV3pIqzH8+LphVBhQPPFMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSkcRH3+U2PHUxEcL2JvhMdj1l5khtcdE5ot6dIzoWpgJ2y8N7sZJ hxy5n7waNPhn2Th+AYNcAoLvFZGtmtNBN5zMNLmddD2zJRzYkW6XuTnJfY82GLAr vv8UC7j0Pb+dknv1Cg1D/yjldouHQak3n1S9g0aDC9xJmSWHn7qsfM8d6bxIsXjG 12SGHecAyBWgmgweJK1UoNKZdrSHttHMno2kW6UC7BVp+TCxGpO3eeX/LLpIQsxz S1pyoHyPcselIuGZUaBpIeqWlZUp9fPX7ZtTL0kwmCPpI1MoiuP5+yBRIwXcKyoG alNMDKh1BF7E79cOFJwh/TRPCzuTB/aT -----END CERTIFICATE-----Generated at Fri Dec 19 20:54:18 2025 by rpki-client