This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: aj0fTH2Mh2uhlIDWczYlPtGKieKI3TzunrVC5qhMhCE= Subject key identifier: 82:01:8A:C0:72:63:AE:67:D7:1B:9B:E7:7E:A5:17:DB:B8:04:D1:48 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 02AA Signing time: Mon 29 Dec 2025 00:33:24 +0000 Manifest this update: Mon 29 Dec 2025 00:33:24 +0000 Manifest next update: Mon 05 Jan 2026 00:33:24 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: dBXS9SKfD856vTAIMeQYB+idJh3kRYOcDiJrTH/X9pE=) 2: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=) 3: 3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa (hash: ob6LTMrD+JVfoIQ/uSt3zi99wEqn+nvTyjd+ajn1nEQ=) 4: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) 5: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: FJRdymd8wZbvTsi6HMqdNDE91aX5F6UwCVSReU3zMAo=) 6: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 00:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Dec 29 00:33:24 2025 GMT Not After : Jan 5 00:33:24 2026 GMT Subject: CN=6951cc54-6b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:fd:7c:59:74:61:62:83:50:8c:58:cd:c3: 56:4f:08:c8:b8:5a:cc:4c:8c:ac:ee:96:ba:34:54: fc:63:6d:0a:ef:8f:73:69:7b:5d:da:d9:71:5e:b4: 90:d3:1f:3c:61:4a:c2:cf:b7:59:d8:0d:33:1a:11: f7:95:a7:49:41:25:74:11:0b:33:0b:a0:ee:9b:e3: 7b:c5:e1:9d:5a:96:57:aa:cd:d4:72:ad:27:53:e7: 74:b9:f0:69:90:db:da:5d:56:27:7a:1b:34:a2:25: b5:f2:1d:7e:44:ea:2d:71:24:c2:bd:17:76:0d:72: ad:a7:c3:ef:cd:11:6a:1e:b6:81:e2:7c:4d:7e:03: 13:bf:a8:96:4a:ff:f1:c8:ad:ac:d3:be:d2:17:12: 39:2d:41:07:9b:36:37:c5:93:3f:65:43:97:5e:e3: ef:51:2d:b3:bb:05:a8:0c:43:f0:51:30:f3:3b:2d: ec:a8:fd:0f:5e:07:9d:08:e6:82:9f:16:85:f2:5d: 88:05:4d:fb:39:8c:6c:0e:90:94:48:97:79:a4:b2: ee:c2:0d:6f:cd:a6:b8:d1:a0:3b:f5:50:7d:fa:d2: 62:7d:80:ee:db:f0:24:db:cb:b3:2a:6f:45:79:bc: 54:f9:f0:1f:3e:42:f1:90:09:dd:f6:5a:93:90:1c: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:01:8A:C0:72:63:AE:67:D7:1B:9B:E7:7E:A5:17:DB:B8:04:D1:48 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a7:99:d6:f2:d9:19:e3:a5:a2:b5:49:bf:75:fe:12:08:f5: 78:39:3d:8c:c7:bd:03:25:83:31:c8:46:7c:a6:31:31:bd:ae: 63:49:31:2c:8d:e4:a4:5a:63:48:32:27:c3:06:e4:18:34:63: 7a:5f:c6:13:e3:40:49:d2:ce:65:74:60:b4:8c:88:08:e8:3b: 9e:13:79:13:ab:f6:71:02:d8:07:39:a8:41:38:b9:36:80:1c: 0e:32:93:66:1f:ce:ad:ea:05:1b:e6:19:c8:a6:37:4c:df:a9: 3b:16:ba:51:a5:0c:a0:ec:50:26:92:7f:41:65:5e:c2:3d:a8: dc:fa:9e:16:53:db:ca:b0:20:86:71:33:45:4f:0e:70:07:98: ba:1a:c5:8d:72:22:e9:73:7b:c2:65:10:63:46:76:83:79:05: a1:28:89:9a:2b:92:29:96:c6:bd:17:4c:8f:cb:13:64:ce:8a: d6:1b:67:d9:cb:a7:cc:bf:42:bb:69:fd:a9:e3:e7:41:5b:1f: 40:fb:27:81:e3:f7:a0:f5:bb:62:b4:f0:14:95:22:57:86:35: d1:48:1e:2c:3a:1c:02:d1:63:14:1a:40:b1:fa:e2:77:74:f5: 95:3e:3c:8d:14:22:49:ad:32:14:74:38:4b:fc:01:4d:f7:85: 72:15:f8:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUxMjI5MDAzMzI0WhcNMjYwMTA1MDAzMzI0WjAYMRYwFAYD VQQDDA02OTUxY2M1NC02YjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+39fFl0YWKDUIxYzcNWTwjIuFrMTIys7pa6NFT8Y20K749zaXtd2tlxXrSQ 0x88YUrCz7dZ2A0zGhH3ladJQSV0EQszC6Dum+N7xeGdWpZXqs3Ucq0nU+d0ufBp kNvaXVYnehs0oiW18h1+ROotcSTCvRd2DXKtp8PvzRFqHraB4nxNfgMTv6iWSv/x yK2s077SFxI5LUEHmzY3xZM/ZUOXXuPvUS2zuwWoDEPwUTDzOy3sqP0PXgedCOaC nxaF8l2IBU37OYxsDpCUSJd5pLLuwg1vzaa40aA79VB9+tJifYDu2/Ak28uzKm9F ebxU+fAfPkLxkAnd9lqTkByhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIBisBy Y65n1xub536lF9u4BNFIMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgp5nW8tkZ46WitUm/df4SCPV4OT2Mx70DJYMxyEZ8pjExva5jSTEs jeSkWmNIMifDBuQYNGN6X8YT40BJ0s5ldGC0jIgI6DueE3kTq/ZxAtgHOahBOLk2 gBwOMpNmH86t6gUb5hnIpjdM36k7FrpRpQyg7FAmkn9BZV7CPajc+p4WU9vKsCCG cTNFTw5wB5i6GsWNciLpc3vCZRBjRnaDeQWhKImaK5Iplsa9F0yPyxNkzorWG2fZ y6fMv0K7af2p4+dBWx9A+yeB4/eg9btitPAUlSJXhjXRSB4sOhwC0WMUGkCx+uJ3 dPWVPjyNFCJJrTIUdDhL/AFN94VyFfh1 -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:26 2025 by rpki-client