This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: 8TvVLmdw/lW47VoKGPXiCy6193eiEG5vT0N4xK41R24= Subject key identifier: 65:A0:42:44:33:E3:3F:96:A9:F7:79:A0:AD:8B:84:A1:C8:66:F5:01 Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 3B Signing time: Fri 05 Dec 2025 05:19:49 +0000 Manifest this update: Fri 05 Dec 2025 05:19:48 +0000 Manifest next update: Fri 12 Dec 2025 05:19:48 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: 7zGFWrWgl/or+P8a07btY8t3rCCE9AUeyDQLMhi7HDs=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: Dec 5 05:19:48 2025 GMT Not After : Dec 12 05:19:48 2025 GMT Subject: CN=69326b74-4f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:21:59:26:88:96:79:49:25:3f:b9:c2:6f: a6:d2:d0:c9:6c:28:0e:ed:ec:9f:12:72:5b:09:49: 80:e1:11:f7:98:7c:0b:b4:8a:cb:a1:db:4e:83:54: 02:e9:14:62:5a:aa:5a:5c:29:92:82:44:aa:4e:c3: 70:ee:30:2c:1c:90:93:50:c5:40:12:8d:f9:2a:54: 4c:07:57:9e:a9:9c:5c:ed:d6:c6:82:a2:7d:e0:e2: 00:5b:b2:f5:85:59:65:eb:64:3d:f6:4f:95:8a:0d: 56:5b:5d:54:d5:9e:2e:f1:48:11:cd:82:02:e1:6e: e5:a1:8d:0b:f2:0d:c3:4d:ae:3b:cf:1a:24:3e:69: 21:c6:d7:45:eb:39:5c:4a:bd:ac:67:8a:fe:08:c1: cf:be:ce:4d:f2:b4:93:88:61:57:c6:c7:86:9c:bb: 1e:0b:a3:19:b4:62:bb:c7:dd:48:48:8c:4c:ff:45: 65:40:5a:b1:b5:17:58:56:1c:81:c1:4d:50:32:c3: 1d:e3:73:7e:e6:e5:a1:38:aa:38:02:48:86:d6:55: 4f:89:3b:6c:ae:fc:a6:38:b1:df:e4:ed:b7:49:08: 1f:52:54:ba:3a:b2:de:0d:d8:66:84:b4:c5:9b:6a: bd:c1:2b:69:80:f1:90:96:ff:9c:6e:f0:75:d3:7f: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:42:44:33:E3:3F:96:A9:F7:79:A0:AD:8B:84:A1:C8:66:F5:01 X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:bd:25:47:7a:68:06:cc:08:32:7e:f9:95:e1:d5:73:e5:2c: 9b:9d:b0:d2:76:ed:51:bc:8e:4a:16:68:06:c7:4c:a1:ff:e7: 1e:1a:c5:a0:d1:d0:a0:dc:ae:1f:39:29:30:b0:7f:71:68:88: b1:9a:63:1f:99:68:05:62:8e:45:af:3e:ae:40:41:b6:49:dc: 78:e0:a3:91:9d:e2:e3:64:9f:d5:48:87:a4:36:d2:c2:a9:c4: d7:16:bd:2a:86:46:27:ad:1c:12:fd:0c:18:35:db:2b:f3:40: 1f:ab:7f:72:26:86:17:6c:76:f7:2a:d5:9e:3c:fe:f8:c3:de: 92:75:c4:ce:9a:cd:bf:73:66:45:30:b8:a5:fe:10:94:17:9e: b5:f3:4a:81:63:ba:8a:24:78:08:a7:fe:11:98:8a:a5:93:96: ca:53:9c:3f:fd:04:0f:3f:02:a5:22:00:59:7c:f2:71:05:84: 14:7e:af:23:8a:f2:e8:25:fe:69:74:ac:e8:ce:e2:22:8d:25: e8:32:79:6e:c1:ab:fd:85:ed:6f:c0:e4:67:07:70:99:8f:5c: b2:28:0c:6f:29:61:04:75:71:d8:64:4f:be:26:e1:f3:09:9c: 1b:a3:26:02:38:9f:72:1d:6a:b4:20:74:43:e7:22:bd:ce:96: fb:e1:e4:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUREQTExMC8GA1UEBRMoRTUxMDIwOEZEMzkwNDJFMzM2NjIxMzBBNDJBOEY4M0ZF RUNGQkU3NDAeFw0yNTEyMDUwNTE5NDhaFw0yNTEyMTIwNTE5NDhaMBgxFjAUBgNV BAMTDTY5MzI2Yjc0LTRmMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2NSFZJoiWeUklP7nCb6bS0MlsKA7t7J8SclsJSYDhEfeYfAu0isuh206DVALp FGJaqlpcKZKCRKpOw3DuMCwckJNQxUASjfkqVEwHV56pnFzt1saCon3g4gBbsvWF WWXrZD32T5WKDVZbXVTVni7xSBHNggLhbuWhjQvyDcNNrjvPGiQ+aSHG10XrOVxK vaxniv4Iwc++zk3ytJOIYVfGx4acux4Loxm0YrvH3UhIjEz/RWVAWrG1F1hWHIHB TVAywx3jc37m5aE4qjgCSIbWVU+JO2yu/KY4sd/k7bdJCB9SVLo6st4N2GaEtMWb ar3BK2mA8ZCW/5xu8HXTf3E1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZaBCRDPj P5ap93mgrYuEochm9QEwHwYDVR0jBBgwFoAU5RAgj9OQQuM2YhMKQqj4P+7PvnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RERBLzgwQUMwOTg2Nzk2 RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVJBZ2o5T1FRdU0yWWhNS1FxajRQLTdQdm5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RERBLzgwQUMwOTg2Nzk2RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVN MlloTUtRcWo0UC03UHZuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKm9JUd6aAbMCDJ++ZXh1XPlLJudsNJ27VG8jkoWaAbHTKH/5x4axaDR 0KDcrh85KTCwf3FoiLGaYx+ZaAVijkWvPq5AQbZJ3Hjgo5Gd4uNkn9VIh6Q20sKp xNcWvSqGRietHBL9DBg12yvzQB+rf3Imhhdsdvcq1Z48/vjD3pJ1xM6azb9zZkUw uKX+EJQXnrXzSoFjuookeAin/hGYiqWTlspTnD/9BA8/AqUiAFl88nEFhBR+ryOK 8ugl/ml0rOjO4iKNJegyeW7Bq/2F7W/A5GcHcJmPXLIoDG8pYQR1cdhkT74m4fMJ nBujJgI4n3IdarQgdEPnIr3Olvvh5Es= -----END CERTIFICATE-----Generated at Sat Dec 6 18:30:55 2025 by rpki-client