This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft File: 5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json) Hash identifier: g5mX67C7/7sGXQcUC0HUZb1fg3p86P6TIQq00vPK8vM= Subject key identifier: E1:B2:24:AB:DB:89:4F:CD:9F:70:99:96:32:A9:7C:5E:FC:C8:BA:F2 Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft Manifest number: 0543 Signing time: Sat 20 Dec 2025 22:44:16 +0000 Manifest this update: Sat 20 Dec 2025 22:44:15 +0000 Manifest next update: Sat 27 Dec 2025 22:44:15 +0000 Files and hashes: 1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: J0i2PCPawFDS1s9CEj6e20llO2ibS7tzhR7mGs94J20=) 2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: wf1/Eq3D00+NNmg7EFhhzne2/Whu9vsX8s0Y7UfB8bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Validity Not Before: Dec 20 22:44:15 2025 GMT Not After : Dec 27 22:44:15 2025 GMT Subject: CN=694726c0-ccc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:89:31:7c:54:a2:52:5c:34:e8:b4:84:b7: 74:1c:62:85:4a:af:6d:2f:e8:e1:66:01:f3:b6:0e: c5:67:57:2c:20:1a:91:3d:fd:f1:91:19:17:92:1e: f0:50:99:90:a2:f9:17:ae:42:7d:e3:5b:2d:ae:cf: c5:2b:7c:10:c7:a2:97:ec:9b:b4:7e:05:bf:1b:f0: 43:72:ab:58:2a:5a:df:f8:0d:08:52:4f:26:04:e0: cc:68:06:7b:03:c0:3b:56:e9:82:d0:d8:09:44:ff: 6c:52:23:c4:82:45:93:14:3f:04:6d:92:90:06:9f: ce:dc:7a:48:28:56:54:f1:f4:b6:5e:0d:24:08:58: 9b:a7:42:38:33:8d:b8:85:08:fd:87:0b:30:59:30: d3:81:54:33:c1:ef:18:70:2d:e3:69:7c:6b:f3:30: 5f:a1:35:c1:d4:58:2d:8c:f0:56:2e:e8:bd:40:04: 74:65:fa:da:c3:88:00:16:d8:d2:64:17:18:89:99: 58:7f:c2:44:9e:be:13:f3:83:f4:c9:62:21:ff:71: d3:6f:4a:91:1d:d4:db:63:b1:ac:1c:3b:f0:19:42: dc:f0:11:11:35:b3:02:16:1c:9e:7c:cb:71:09:11: 25:0f:a3:f6:f6:b1:94:f7:aa:c4:8a:be:e0:59:d4: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:24:AB:DB:89:4F:CD:9F:70:99:96:32:A9:7C:5E:FC:C8:BA:F2 X509v3 Authority Key Identifier: keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fa:09:f3:d9:aa:79:1f:43:90:59:b1:82:c6:77:4c:40:34: 0d:dc:47:da:c1:2f:6a:eb:48:e8:2c:6a:0c:67:69:83:1e:15: 8f:7c:79:60:c3:70:a5:93:97:cb:12:69:32:66:a2:76:b1:8c: 9f:98:96:b7:72:07:db:6d:69:75:55:55:ff:22:27:80:f8:b7: dc:be:e0:6d:a8:d3:1f:e6:4d:66:fd:95:9d:4f:ee:cb:14:7e: c2:3c:b3:3e:b3:73:4c:66:f3:6d:a8:a9:fd:03:ec:a7:5f:55: 87:2f:98:87:bb:a0:fb:b1:b7:4f:71:94:45:eb:30:9e:64:20: c9:9f:4b:89:e2:e6:e5:76:da:e0:80:be:b8:ec:35:e9:95:13: 52:21:d7:32:15:44:fd:43:d1:72:f9:e4:4b:67:7b:cc:42:4a: 09:77:bc:07:d3:ae:39:8f:25:fa:d9:b3:72:9a:ec:0f:ba:73: cf:63:b0:b2:0e:ed:33:a1:9c:87:d6:4f:cc:61:9d:ec:36:40: a8:65:2a:ee:5d:2d:1b:fe:7f:eb:6d:e3:30:84:31:51:5e:83: 7b:71:66:c5:91:af:a7:22:03:7f:84:cc:ac:b0:45:c5:02:9a: db:be:e9:db:ee:4f:1f:03:21:08:cf:f4:d6:bc:86:f5:c4:e3: 79:4c:3b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFREIxMTAvBgNVBAUTKEU2RDc2NTUxNTRFMzZCNjk3MTE1NzRFMjA3OTZCNjgw MkM0M0I3MTUwHhcNMjUxMjIwMjI0NDE1WhcNMjUxMjI3MjI0NDE1WjAYMRYwFAYD VQQDDA02OTQ3MjZjMC1jY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUyJMXxUolJcNOi0hLd0HGKFSq9tL+jhZgHztg7FZ1csIBqRPf3xkRkXkh7w UJmQovkXrkJ941strs/FK3wQx6KX7Ju0fgW/G/BDcqtYKlrf+A0IUk8mBODMaAZ7 A8A7VumC0NgJRP9sUiPEgkWTFD8EbZKQBp/O3HpIKFZU8fS2Xg0kCFibp0I4M424 hQj9hwswWTDTgVQzwe8YcC3jaXxr8zBfoTXB1FgtjPBWLui9QAR0Zfraw4gAFtjS ZBcYiZlYf8JEnr4T84P0yWIh/3HTb0qRHdTbY7GsHDvwGULc8BERNbMCFhyefMtx CRElD6P29rGU96rEir7gWdRZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGyJKvb iU/Nn3CZljKpfF78yLryMB8GA1UdIwQYMBaAFObXZVFU42tpcRV04geWtoAsQ7cV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVEQi8zMDlCRTZCRTFE REQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEybHhGWFRpQjVhMmdDeER0 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0ZGxVVlRqYTJseEZYVGlCNWEyZ0N4RHR4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVEQi8zMDlCRTZCRTFEREQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEy bHhGWFRpQjVhMmdDeER0eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo+gnz2ap5H0OQWbGCxndMQDQN3EfawS9q60joLGoMZ2mDHhWPfHlg w3Clk5fLEmkyZqJ2sYyfmJa3cgfbbWl1VVX/IieA+LfcvuBtqNMf5k1m/ZWdT+7L FH7CPLM+s3NMZvNtqKn9A+ynX1WHL5iHu6D7sbdPcZRF6zCeZCDJn0uJ4ubldtrg gL647DXplRNSIdcyFUT9Q9Fy+eRLZ3vMQkoJd7wH0645jyX62bNymuwPunPPY7Cy Du0zoZyH1k/MYZ3sNkCoZSruXS0b/n/rbeMwhDFRXoN7cWbFka+nIgN/hMyssEXF Aprbvunb7k8fAyEIz/TWvIb1xON5TDs8 -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:49 2025 by rpki-client