This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft File: sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft (raw, json) Hash identifier: caYnrOJJQ2GvKK3xoYQT6ve4YF9MBBsxUYbFdd818X0= Subject key identifier: 0D:20:7B:63:22:AA:A6:96:F5:D0:DE:8D:BE:DB:30:FC:AF:7D:8D:A9 Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 Certificate issuer: /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft Manifest number: 5E Signing time: Fri 05 Dec 2025 04:59:03 +0000 Manifest this update: Fri 05 Dec 2025 04:59:03 +0000 Manifest next update: Fri 12 Dec 2025 04:59:03 +0000 Files and hashes: 1: sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl (hash: cCbLRS2s4jXyTxvJywHOfLJwmwNyzi6AGdjSOGkBuo0=) 2: BDF659C4445111F0945A7E49C4F9AE02.roa (hash: NrM1GT0GOIEPUd0x6/lOomv0lodf7Nxw+vo5Gb1q27Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Validity Not Before: Dec 5 04:59:03 2025 GMT Not After : Dec 12 04:59:03 2025 GMT Subject: CN=69326697-b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:9d:2e:e0:58:cb:83:70:ef:1d:a1:20:83: 12:24:b5:b3:9c:50:24:e4:1a:c7:c2:b8:35:d6:9b: 49:0b:b3:1c:c6:90:cf:11:ee:86:7e:3c:88:bc:e3: c3:a8:43:ee:db:e0:af:35:7d:06:13:bf:f4:6f:63: 22:ff:b7:23:08:57:fb:05:a1:41:fd:36:16:cb:0e: 27:70:7a:30:89:68:e2:19:bc:67:05:17:76:12:8f: df:b5:a5:87:6a:c7:47:13:4c:e3:9a:00:49:10:d2: 98:3c:37:5a:e7:1a:e1:70:43:1c:82:b5:af:db:d0: 78:5e:6c:d4:6d:44:1a:fa:41:80:07:81:1b:86:55: d0:be:a0:28:2f:b3:c6:39:2a:b3:1e:01:23:58:19: 2a:a6:a4:6e:a1:99:95:4f:b3:69:34:a6:b5:cf:f1: a1:06:84:92:af:ce:a5:35:d5:b1:ef:90:0f:2a:60: 97:87:2f:8c:50:5b:18:f7:0d:06:0d:18:bf:f6:b2: 9f:92:fa:e9:8d:df:ff:ad:24:76:f3:40:51:c0:ef: af:ca:95:64:5d:83:47:64:a7:34:a2:81:c9:6f:e8: d6:23:bc:37:76:af:a7:b0:e6:ce:10:31:ab:b6:4c: ca:11:77:27:93:97:38:d2:6d:2f:4a:75:50:cb:c5: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:20:7B:63:22:AA:A6:96:F5:D0:DE:8D:BE:DB:30:FC:AF:7D:8D:A9 X509v3 Authority Key Identifier: keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:26:a2:a4:3e:74:15:aa:a6:14:42:a1:a9:9c:1b:fb:1a:bf: a5:68:1f:50:fc:d7:7a:84:46:32:6e:b2:7c:78:a8:11:94:65: 56:b0:8e:80:bf:54:75:14:18:2b:8e:29:30:7d:a6:7e:3b:be: 30:84:a2:8b:36:f9:46:d2:b2:95:e1:b0:db:ab:69:fb:09:ab: f4:19:b7:28:b8:0c:79:3b:67:0d:9e:e2:89:af:53:ab:f3:97: ef:9f:c2:da:12:b4:11:c2:5e:46:91:9b:2e:02:bb:cd:5b:85: 2b:b9:37:9c:fc:aa:38:90:20:e8:5e:62:47:e8:b7:d0:1e:22: 84:0b:de:44:85:51:43:03:00:2c:60:40:5e:d6:76:6c:74:1d: e1:5c:04:40:f7:40:67:c9:f3:98:58:2c:60:ef:4e:b6:51:f4: 1e:2b:e8:11:6d:97:63:08:75:f8:06:6a:21:11:2a:ba:39:63: fc:f2:93:46:e6:f8:7b:ae:75:c1:b9:43:54:dc:dc:e5:02:26: 9f:49:90:e5:f0:f5:29:74:43:41:00:74:86:67:8c:02:18:1a: 0f:c2:33:e9:8e:a7:11:53:54:e7:b6:4f:cf:e2:14:bc:17:9b: f7:2b:db:49:bd:ec:71:e4:d7:22:d3:f7:f6:a5:6c:67:0f:68: ec:d4:b2:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzUzQTExMC8GA1UEBRMoQjA4QjU5RTVEMTA3MDVDNUNCMkQzQ0RCODU2NUIzMjhE NTAyRjU1MDAeFw0yNTEyMDUwNDU5MDNaFw0yNTEyMTIwNDU5MDNaMBgxFjAUBgNV BAMTDTY5MzI2Njk3LWI0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcI50u4FjLg3DvHaEggxIktbOcUCTkGsfCuDXWm0kLsxzGkM8R7oZ+PIi848Oo Q+7b4K81fQYTv/RvYyL/tyMIV/sFoUH9NhbLDidwejCJaOIZvGcFF3YSj9+1pYdq x0cTTOOaAEkQ0pg8N1rnGuFwQxyCta/b0HhebNRtRBr6QYAHgRuGVdC+oCgvs8Y5 KrMeASNYGSqmpG6hmZVPs2k0prXP8aEGhJKvzqU11bHvkA8qYJeHL4xQWxj3DQYN GL/2sp+S+umN3/+tJHbzQFHA76/KlWRdg0dkpzSigclv6NYjvDd2r6ew5s4QMau2 TMoRdyeTlzjSbS9KdVDLxTSNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDSB7YyKq ppb10N6Nvtsw/K99jakwHwYDVR0jBBgwFoAUsItZ5dEHBcXLLTzbhWWzKNUC9VAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNTNBLzQ3NDUwNTZFNDQ1 MTExRjBBMDlFOEEyNEM0RjlBRTAyL3NJdFo1ZEVIQmNYTExUemJoV1d6S05VQzlW QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0l0WjVkRUhCY1hMTFR6YmhXV3pLTlVDOVZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD NTNBLzQ3NDUwNTZFNDQ1MTExRjBBMDlFOEEyNEM0RjlBRTAyL3NJdFo1ZEVIQmNY TExUemJoV1d6S05VQzlWQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8moqQ+dBWqphRCoamcG/sav6VoH1D813qERjJusnx4qBGUZVawjoC/ VHUUGCuOKTB9pn47vjCEoos2+UbSspXhsNurafsJq/QZtyi4DHk7Zw2e4omvU6vz l++fwtoStBHCXkaRmy4Cu81bhSu5N5z8qjiQIOheYkfot9AeIoQL3kSFUUMDACxg QF7Wdmx0HeFcBED3QGfJ85hYLGDvTrZR9B4r6BFtl2MIdfgGaiERKro5Y/zyk0bm +HuudcG5Q1Tc3OUCJp9JkOXw9Sl0Q0EAdIZnjAIYGg/CM+mOpxFTVOe2T8/iFLwX m/cr20m97HHk1yLT9/albGcPaOzUssE= -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:43 2025 by rpki-client