This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: MlzGvD5BOqKNWeb4aVUUS+8J7J10PAC8yN1qCqRMcWM= Subject key identifier: 37:B4:87:40:DE:A0:1F:A6:57:5A:FA:23:A3:94:87:CC:9F:4B:4F:BA Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 4F Signing time: Fri 05 Dec 2025 05:08:58 +0000 Manifest this update: Fri 05 Dec 2025 05:08:58 +0000 Manifest next update: Fri 12 Dec 2025 05:08:58 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: GiyVtoKnP12LTEPT7UIdkqmKaNzBmlZdU2/8+931Y5U=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Dec 5 05:08:58 2025 GMT Not After : Dec 12 05:08:58 2025 GMT Subject: CN=693268ea-297a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:e4:90:7e:92:9d:f2:a8:3f:9e:fa:1d:68: c6:a3:c2:a0:be:23:21:ea:90:f3:c8:f8:10:eb:05: bb:b1:1d:74:75:95:9c:c6:eb:0d:19:d7:13:97:28: 96:ad:1a:9b:88:8f:89:00:9e:25:23:63:24:d9:b1: b0:d9:cf:12:8e:e0:87:1a:74:a7:2d:9a:7a:8e:11: de:a8:65:ee:76:7e:39:83:96:55:5f:62:1d:cf:33: 2f:db:55:24:39:fe:6a:0b:99:d0:ba:3d:73:6f:ec: b1:7a:f3:2d:93:6e:7c:5f:62:da:d9:94:c5:95:43: 1e:33:ed:4b:d0:86:0f:38:a4:86:61:62:71:ad:d0: 58:18:6d:71:2f:70:87:34:60:e7:fd:6d:8f:ac:8b: 38:c3:a3:f6:06:d8:ce:da:af:2e:73:29:54:79:b4: bf:31:1e:37:89:f1:f5:11:8b:52:1d:25:d0:8e:09: 2a:e5:da:13:7e:45:88:9f:fe:57:87:e8:0e:39:5a: 40:cc:de:1e:aa:f1:c5:bc:2c:9f:cc:51:e9:a4:c8: ce:ec:4a:ca:29:3c:c4:12:28:de:e8:5e:7c:bf:59: 5b:5a:0f:2a:6e:b9:e5:b5:ac:b7:48:7f:78:52:48: a7:d2:79:eb:be:5f:f8:77:1e:d5:c4:17:5c:17:84: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B4:87:40:DE:A0:1F:A6:57:5A:FA:23:A3:94:87:CC:9F:4B:4F:BA X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:71:e6:75:75:88:9b:32:97:94:e7:50:ee:9f:b2:db:dd:04: 4e:e8:94:a0:f6:c8:6a:91:f0:1c:6f:0c:83:1f:4d:c2:af:fb: 17:b3:69:29:63:ed:05:24:62:95:f2:92:35:08:9e:08:6e:4e: 39:64:a0:45:cd:64:ea:ac:d3:99:ea:39:bd:bd:45:e4:5a:3c: 5c:d4:27:69:2d:3b:cb:98:81:1d:42:bd:92:e8:d3:04:8b:81: 2f:8d:2a:c1:62:ef:cd:34:5d:75:3b:67:57:4c:cc:16:96:a8: 38:67:96:c4:ba:34:fc:d3:b3:4e:15:02:4a:cf:11:55:3b:a9: 85:8b:8f:1b:24:ad:b4:43:04:96:6b:23:05:99:ad:00:0c:7b: f6:1b:50:15:07:a1:b8:0e:ab:c6:06:97:d7:d7:5a:7b:52:6e: 2c:cb:0f:d2:a5:d0:b9:54:4e:ee:30:23:3f:fc:77:0b:7b:ac: a1:e9:b3:0d:4d:e4:84:68:1f:02:6c:04:b5:05:73:30:38:77: 70:c8:10:99:96:9e:92:de:e7:ce:b1:57:8e:15:c4:df:3a:bf: 93:8c:03:8e:13:dc:a1:da:5d:46:f0:36:00:57:15:e5:bc:46: ac:dc:99:7b:bb:90:4c:8e:52:99:a7:cc:cb:a2:c2:71:0c:ca: b7:9e:7e:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTEyMDUwNTA4NThaFw0yNTEyMTIwNTA4NThaMBgxFjAUBgNV BAMTDTY5MzI2OGVhLTI5N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQOSQfpKd8qg/nvodaMajwqC+IyHqkPPI+BDrBbuxHXR1lZzG6w0Z1xOXKJat GpuIj4kAniUjYyTZsbDZzxKO4IcadKctmnqOEd6oZe52fjmDllVfYh3PMy/bVSQ5 /moLmdC6PXNv7LF68y2TbnxfYtrZlMWVQx4z7UvQhg84pIZhYnGt0FgYbXEvcIc0 YOf9bY+sizjDo/YG2M7ary5zKVR5tL8xHjeJ8fURi1IdJdCOCSrl2hN+RYif/leH 6A45WkDM3h6q8cW8LJ/MUemkyM7sSsopPMQSKN7oXny/WVtaDypuueW1rLdIf3hS SKfSeeu+X/h3HtXEF1wXhE2JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN7SHQN6g H6ZXWvojo5SHzJ9LT7owHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZx5nV1iJsyl5TnUO6fstvdBE7olKD2yGqR8BxvDIMfTcKv+xezaSlj 7QUkYpXykjUInghuTjlkoEXNZOqs05nqOb29ReRaPFzUJ2ktO8uYgR1CvZLo0wSL gS+NKsFi7800XXU7Z1dMzBaWqDhnlsS6NPzTs04VAkrPEVU7qYWLjxskrbRDBJZr IwWZrQAMe/YbUBUHobgOq8YGl9fXWntSbizLD9Kl0LlUTu4wIz/8dwt7rKHpsw1N 5IRoHwJsBLUFczA4d3DIEJmWnpLe586xV44VxN86v5OMA44T3KHaXUbwNgBXFeW8 RqzcmXu7kEyOUpmnzMuiwnEMyreefng= -----END CERTIFICATE-----Generated at Sun Dec 7 06:24:22 2025 by rpki-client