This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: CzZNwgyGsxYJ9fhb50kYvdOJI0nJWGDua0T5b3y/Wfk= Subject key identifier: CE:8D:8C:B7:A9:AE:24:0A:97:FC:36:54:A5:D7:AE:BB:30:6B:B7:D2 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 0523 Signing time: Thu 18 Dec 2025 22:51:38 +0000 Manifest this update: Thu 18 Dec 2025 22:51:38 +0000 Manifest next update: Thu 25 Dec 2025 22:51:38 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: hddqmH80PZaZkLsAe8fcezgUTzXJw7gcOhVR6DvW/tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Dec 18 22:51:38 2025 GMT Not After : Dec 25 22:51:38 2025 GMT Subject: CN=6944857a-519b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:7e:93:98:3b:d2:3d:69:52:77:12:b5:65: 2a:2e:70:d4:e6:f3:af:9c:af:45:83:0b:a3:9d:ea: db:a8:52:a5:60:92:fc:1e:c9:7d:ff:2d:31:20:32: cb:f2:da:df:86:d6:82:80:4e:89:c6:6e:d8:78:0b: 19:b2:9a:7b:4d:38:09:25:2a:83:78:ff:5c:ca:e7: 1c:19:f4:37:ec:2f:0a:0c:45:f1:e9:ae:19:20:79: 2e:e8:6d:d0:c6:e8:fa:dd:5f:ea:90:c8:3e:29:07: 91:c3:e1:10:29:19:cf:d8:74:75:83:50:90:8d:60: 7b:d4:2f:80:c9:c8:e6:55:70:68:e7:e7:b0:61:21: 94:25:04:1f:f6:38:bd:1c:94:e5:bf:30:aa:85:15: 7a:b8:00:3c:1f:a1:ed:57:1c:1b:bb:c8:54:b3:ab: e4:bc:29:39:70:42:2e:e2:29:0e:ca:61:b6:84:ee: b0:b5:a2:60:87:44:9e:c7:31:70:39:82:25:e8:66: ad:de:23:d9:8c:2b:30:e2:c7:88:56:91:89:0c:5c: c0:ef:68:93:89:47:76:ab:e6:b4:1d:43:e8:56:73: 94:a8:5b:41:3f:d4:ab:6d:c5:ab:8f:31:5c:e6:58: 67:57:03:a3:76:8d:17:d9:f4:dd:28:01:9f:5b:0f: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8D:8C:B7:A9:AE:24:0A:97:FC:36:54:A5:D7:AE:BB:30:6B:B7:D2 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d8:1e:71:43:f1:9e:dd:34:64:46:50:bd:7e:c3:51:45:5c: b4:d8:19:ce:1f:63:b5:06:9d:33:c7:4f:9a:be:8c:6c:c9:1a: 49:0f:3d:1d:2b:1e:da:cb:e3:7c:1b:90:b9:eb:a7:f9:0e:2a: b6:02:be:7c:ff:33:2e:da:69:4d:21:8f:dc:7f:14:6d:7d:88: 74:71:0e:91:61:e6:ca:8f:2e:88:5a:42:ad:99:0a:27:71:a1: 08:9f:c7:b9:97:f5:52:a6:c2:4b:42:69:cf:4c:0d:58:7d:65: 79:19:73:6e:8b:46:16:c4:a6:d1:84:ad:3b:6c:57:7a:e7:83: 5e:d9:4c:21:84:8f:9e:6e:09:98:09:c5:21:f9:45:8f:86:02: 71:51:4d:30:15:c4:19:f1:6e:95:9b:19:2d:a2:2d:90:e3:ca: 6c:5e:5e:ce:cb:89:ce:32:b9:53:de:d2:93:9e:f1:90:9b:21: 6b:a9:46:02:43:76:46:72:c1:3b:9f:93:9b:2b:11:dd:81:d8: 17:32:95:0c:1f:6a:a0:d9:34:27:28:82:cf:d5:dd:02:db:2f: 83:5a:2c:c0:87:63:dc:51:af:60:7f:74:8e:4e:04:dd:b2:d8: 34:5e:b0:3e:8e:ff:1b:7c:ea:36:28:75:d8:48:02:ee:3d:05: df:b3:11:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUxMjE4MjI1MTM4WhcNMjUxMjI1MjI1MTM4WjAYMRYwFAYD VQQDDA02OTQ0ODU3YS01MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQB+k5g70j1pUncStWUqLnDU5vOvnK9FgwujnerbqFKlYJL8Hsl9/y0xIDLL 8trfhtaCgE6Jxm7YeAsZspp7TTgJJSqDeP9cyuccGfQ37C8KDEXx6a4ZIHku6G3Q xuj63V/qkMg+KQeRw+EQKRnP2HR1g1CQjWB71C+AycjmVXBo5+ewYSGUJQQf9ji9 HJTlvzCqhRV6uAA8H6HtVxwbu8hUs6vkvCk5cEIu4ikOymG2hO6wtaJgh0SexzFw OYIl6Gat3iPZjCsw4seIVpGJDFzA72iTiUd2q+a0HUPoVnOUqFtBP9SrbcWrjzFc 5lhnVwOjdo0X2fTdKAGfWw9lDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6NjLep riQKl/w2VKXXrrswa7fSMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL2B5xQ/Ge3TRkRlC9fsNRRVy02BnOH2O1Bp0zx0+avoxsyRpJDz0d Kx7ay+N8G5C566f5Diq2Ar58/zMu2mlNIY/cfxRtfYh0cQ6RYebKjy6IWkKtmQon caEIn8e5l/VSpsJLQmnPTA1YfWV5GXNui0YWxKbRhK07bFd654Ne2UwhhI+ebgmY CcUh+UWPhgJxUU0wFcQZ8W6Vmxktoi2Q48psXl7Oy4nOMrlT3tKTnvGQmyFrqUYC Q3ZGcsE7n5ObKxHdgdgXMpUMH2qg2TQnKILP1d0C2y+DWizAh2PcUa9gf3SOTgTd stg0XrA+jv8bfOo2KHXYSALuPQXfsxFf -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:18 2025 by rpki-client