This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: vqi8XPxUNbh48lI9eU1yB7APv/okEPiwWORxSpNdEHY= Subject key identifier: CC:E1:3A:F9:5D:79:99:61:5C:A0:6A:E1:7A:85:09:C0:EE:D8:DB:5C Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 3532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 3509 Signing time: Sat 20 Dec 2025 15:00:06 +0000 Manifest this update: Sat 20 Dec 2025 15:00:05 +0000 Manifest next update: Sat 27 Dec 2025 15:00:05 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: cBPQ7I1v484k3ruc54pXEiFw6rqhlrfoRMxNGYq2qj0=) 2: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: Krev2+NvsTp5k57xzDaCtVpjuL2qov8uoa3n5krWGr0=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: On/rjCt9+U6JtyKYuk47jkAjsn+YkzbVWBGb7O5oGfQ=) 4: 70B22B22950D11F0ACB76B28C4F9AE02.roa (hash: rEXx1IeVQBnFO7DidP5CAzoHoXBLOcJ2lUWGfIOm15E=) 5: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: Vy0S41quK2iU71kwrTbOz/KoqscmH6wvDknm9n/QiBc=) 6: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: SQf0F6/ovS4nuhxwCqP0bzz663+tFfshESdr8FqByA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Dec 20 15:00:05 2025 GMT Not After : Dec 27 15:00:05 2025 GMT Subject: CN=6946b9f6-6c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:12:ee:9b:07:82:ce:82:a4:e7:4c:d6:73: 54:00:c1:ba:27:ec:69:35:54:12:38:7b:c6:88:b4: bd:62:50:81:c5:cb:de:56:70:08:86:4e:0f:d3:c9: 32:c5:d5:24:53:82:f4:94:32:a6:35:5d:55:6c:a3: 08:66:42:94:5a:60:9b:c4:ff:19:12:dd:93:05:2e: 88:e2:c5:7d:d1:e2:68:ee:ec:ae:0d:56:f7:80:e8: b1:a7:18:3d:53:37:b7:7f:f0:ba:8e:28:6c:a4:76: 1a:fb:c8:18:38:65:1d:d4:99:14:15:20:42:62:2c: ac:cf:9e:fb:22:b3:05:02:93:dd:f4:e2:e9:29:e7: 69:18:27:55:96:3a:04:9d:eb:73:f4:94:d5:49:51: c0:91:aa:be:fa:0e:99:ab:fe:a7:5b:ba:08:44:19: ff:de:04:db:ba:ae:40:e0:d8:76:6f:a4:be:3c:e9: 8b:a9:7a:6d:6c:e2:d8:64:fd:28:97:2b:a3:18:8e: 18:79:ee:50:7a:f1:52:1f:72:98:f1:91:2c:2d:93: cb:32:0e:d1:35:e7:99:92:57:fa:79:95:90:b5:d9: 32:4e:81:f9:f3:22:8d:1d:19:a5:df:3f:ac:b9:21: 3e:ae:f7:bd:e1:a7:22:a4:20:3a:33:6b:42:82:b2: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E1:3A:F9:5D:79:99:61:5C:A0:6A:E1:7A:85:09:C0:EE:D8:DB:5C X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:f3:f3:3b:76:51:f0:d0:da:1e:17:d2:e5:89:51:52:af:c8: 39:ed:04:4b:21:6a:f3:3f:82:ba:e7:b2:96:d9:46:e5:f6:49: 77:d0:1b:78:10:32:71:bc:e3:23:44:1c:f7:66:70:e7:87:a9: 13:45:78:0a:ea:cf:28:5c:d6:b9:44:4a:56:1b:4c:a7:e0:5e: 64:95:af:a5:76:77:24:f1:4d:3c:31:7e:9a:38:57:a9:29:cf: d0:c3:88:46:3c:ec:2d:a9:1a:d4:19:72:84:1a:2c:74:1a:0e: 1e:bb:22:10:73:33:07:94:48:26:9f:bb:bb:77:6c:5e:0e:cf: 33:15:a7:cb:c3:9a:62:ba:ec:94:99:15:13:ff:1a:8f:35:b7: d2:5d:67:4b:f7:4d:0d:f8:e8:bc:2b:83:28:b7:00:8c:06:80: d6:7f:47:86:f8:0a:24:9f:03:ca:f7:d2:1d:52:8d:03:7a:43: 4b:8a:1b:b4:4a:cf:da:1b:1b:23:96:47:c8:09:41:cc:89:c8: b2:65:6e:a8:f2:ac:e8:44:21:2a:23:ab:88:76:12:70:3f:8b: 21:c8:b0:02:d6:db:19:75:0d:95:87:87:49:8a:6e:12:af:93: e0:95:97:a8:a4:20:ce:31:86:5b:3c:89:3a:65:c4:4f:ae:c2: 80:7a:f1:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUxMjIwMTUwMDA1WhcNMjUxMjI3MTUwMDA1WjAYMRYwFAYD VQQDDA02OTQ2YjlmNi02YzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGoS7psHgs6CpOdM1nNUAMG6J+xpNVQSOHvGiLS9YlCBxcveVnAIhk4P08ky xdUkU4L0lDKmNV1VbKMIZkKUWmCbxP8ZEt2TBS6I4sV90eJo7uyuDVb3gOixpxg9 Uze3f/C6jihspHYa+8gYOGUd1JkUFSBCYiysz577IrMFApPd9OLpKedpGCdVljoE netz9JTVSVHAkaq++g6Zq/6nW7oIRBn/3gTbuq5A4Nh2b6S+POmLqXptbOLYZP0o lyujGI4Yee5QevFSH3KY8ZEsLZPLMg7RNeeZklf6eZWQtdkyToH58yKNHRml3z+s uSE+rve94acipCA6M2tCgrJ7+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzhOvld eZlhXKBq4XqFCcDu2NtcMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDc8/M7dlHw0NoeF9LliVFSr8g57QRLIWrzP4K657KW2Ubl9kl30Bt4 EDJxvOMjRBz3ZnDnh6kTRXgK6s8oXNa5REpWG0yn4F5kla+ldnck8U08MX6aOFep Kc/Qw4hGPOwtqRrUGXKEGix0Gg4euyIQczMHlEgmn7u7d2xeDs8zFafLw5piuuyU mRUT/xqPNbfSXWdL900N+Oi8K4MotwCMBoDWf0eG+AoknwPK99IdUo0DekNLihu0 Ss/aGxsjlkfICUHMiciyZW6o8qzoRCEqI6uIdhJwP4shyLAC1tsZdQ2Vh4dJim4S r5PglZeopCDOMYZbPIk6ZcRPrsKAevEg -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:05 2025 by rpki-client