This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: MM5xHpxLh7a+gMCcjB10l6UuGP0+bEDRbnpYPgLE/5U= Subject key identifier: D6:82:81:4A:BE:CE:00:2F:EA:00:34:EE:7E:BC:09:24:35:F7:23:D8 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 02A5 Signing time: Fri 19 Dec 2025 00:43:45 +0000 Manifest this update: Fri 19 Dec 2025 00:43:45 +0000 Manifest next update: Fri 26 Dec 2025 00:43:45 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: ngXnv5r4yI/aUV0r/hnX0mJvwk+jt4clFMo0MfVgF+w=) 2: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) 3: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=) 4: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=) 5: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: FJRdymd8wZbvTsi6HMqdNDE91aX5F6UwCVSReU3zMAo=) 6: 3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa (hash: ob6LTMrD+JVfoIQ/uSt3zi99wEqn+nvTyjd+ajn1nEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Dec 19 00:43:45 2025 GMT Not After : Dec 26 00:43:45 2025 GMT Subject: CN=69449fc1-5a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:65:9b:72:ff:49:61:6e:51:77:5f:92:ed: 3b:15:75:ac:7f:07:b7:76:ac:ec:5f:cc:82:7b:10: 50:1a:94:d1:55:eb:4d:81:5f:43:9f:60:35:24:88: 48:a2:32:b3:7f:f8:2f:83:be:04:03:a5:1b:12:4f: a1:51:48:e4:df:19:81:31:32:74:63:8c:b5:18:cf: ca:ce:65:91:34:84:f3:8d:b5:e7:6a:94:28:f3:1b: 52:ce:a9:2d:4d:39:f7:4b:37:90:81:a4:ec:f5:f1: 62:ab:33:75:ed:02:0b:73:ef:14:b6:04:63:c9:16: 04:ab:cd:a9:e7:61:43:fe:3d:77:39:e5:39:43:a7: 65:a1:ef:57:38:a7:c5:dc:7b:6b:39:8f:48:c4:d7: ce:21:dd:bf:3f:58:72:cc:f9:c9:94:f9:42:4b:25: 3f:96:82:00:05:f8:30:03:2c:5d:71:48:c9:07:76: 82:d2:c8:56:7c:d3:73:45:7d:84:e0:a0:d8:0b:93: a3:6d:d9:36:05:ee:83:ca:7c:6c:90:4f:6b:aa:19: 4d:93:3f:b2:e8:fc:38:55:0d:10:be:4a:d4:cd:3f: b8:4f:3c:09:ac:b1:c0:f3:eb:27:c0:64:f2:6c:47: c1:88:d7:ea:3e:a7:50:80:4e:46:c6:18:36:c8:bc: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:82:81:4A:BE:CE:00:2F:EA:00:34:EE:7E:BC:09:24:35:F7:23:D8 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:df:97:0a:b2:52:00:b5:0f:af:92:82:e8:e5:c3:a9:af:41: 9b:cf:22:5b:fe:64:f6:39:a1:8c:fe:0b:8d:cc:1a:d2:c8:ef: de:bb:98:24:ad:20:13:80:3a:40:0e:5b:ae:b3:a2:47:d2:c4: 02:e8:55:96:14:e7:0c:be:63:75:a9:92:8b:8f:60:c9:d9:e1: 75:e4:37:23:83:1b:b9:2c:67:9a:ae:77:47:d1:21:26:3e:d5: d7:c7:ae:d5:9c:65:9b:ed:27:ab:c8:43:1f:96:57:30:e6:5c: b6:5e:c7:48:43:a9:24:f1:73:b8:40:f3:74:df:69:92:15:a4: 6b:c5:2d:98:6c:f0:7f:7a:32:db:ff:f0:b4:f1:9c:23:a6:31: b6:9e:09:be:8c:97:17:a4:2f:4b:01:21:ab:3e:1b:30:12:c2: 66:42:0d:d6:54:c3:ee:4d:fe:71:f3:03:1a:14:5f:83:84:5e: cc:41:8e:41:66:32:54:a6:85:53:d9:83:c5:dd:36:33:41:da: 83:fa:58:1b:c2:b7:59:93:20:ca:55:4e:fd:ed:a2:e7:ad:09: 0f:27:b5:e2:6a:d7:ea:f9:e7:cf:e4:c0:df:77:54:0f:df:e0: 45:63:8c:f4:e1:5f:c3:5e:23:e7:48:28:0b:7e:db:0d:ea:9b: 94:46:00:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUxMjE5MDA0MzQ1WhcNMjUxMjI2MDA0MzQ1WjAYMRYwFAYD VQQDDA02OTQ0OWZjMS01YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsdlm3L/SWFuUXdfku07FXWsfwe3dqzsX8yCexBQGpTRVetNgV9Dn2A1JIhI ojKzf/gvg74EA6UbEk+hUUjk3xmBMTJ0Y4y1GM/KzmWRNITzjbXnapQo8xtSzqkt TTn3SzeQgaTs9fFiqzN17QILc+8UtgRjyRYEq82p52FD/j13OeU5Q6dloe9XOKfF 3HtrOY9IxNfOId2/P1hyzPnJlPlCSyU/loIABfgwAyxdcUjJB3aC0shWfNNzRX2E 4KDYC5Ojbdk2Be6DynxskE9rqhlNkz+y6Pw4VQ0QvkrUzT+4TzwJrLHA8+snwGTy bEfBiNfqPqdQgE5Gxhg2yLybxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaCgUq+ zgAv6gA07n68CSQ19yPYMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh35cKslIAtQ+vkoLo5cOpr0GbzyJb/mT2OaGM/guNzBrSyO/eu5gk rSATgDpADluus6JH0sQC6FWWFOcMvmN1qZKLj2DJ2eF15Dcjgxu5LGearndH0SEm PtXXx67VnGWb7SeryEMfllcw5ly2XsdIQ6kk8XO4QPN032mSFaRrxS2YbPB/ejLb //C08ZwjpjG2ngm+jJcXpC9LASGrPhswEsJmQg3WVMPuTf5x8wMaFF+DhF7MQY5B ZjJUpoVT2YPF3TYzQdqD+lgbwrdZkyDKVU797aLnrQkPJ7Xiatfq+efP5MDfd1QP 3+BFY4z04V/DXiPnSCgLftsN6puURgCr -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:56 2025 by rpki-client