This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: ERqCCHn7Fnurk9M3aAz7V5pgLTdtve47sxft0ZEQbiU= Subject key identifier: 15:86:02:3F:13:E5:42:03:B2:38:9C:A0:AB:AA:B3:43:5C:B0:59:BF Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 5B Signing time: Fri 05 Dec 2025 05:07:19 +0000 Manifest this update: Fri 05 Dec 2025 05:07:18 +0000 Manifest next update: Fri 12 Dec 2025 05:07:18 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: scV/l0+z2G4mPDuW+8pEunYmtMRycnA7pXiAr+tnuhc=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: PluL4u9/W0M7wPOfAaOa3JDqqwKeth4r4yq9LLQTP5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Dec 5 05:07:18 2025 GMT Not After : Dec 12 05:07:18 2025 GMT Subject: CN=69326886-a9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dc:ce:c1:35:35:2b:13:86:e9:54:41:ef:eb: 4d:3b:25:ab:f7:31:35:66:0c:64:5a:a9:7c:85:e8: 22:7e:fe:0a:80:b3:c4:05:15:2e:81:f3:ff:ed:b6: a5:fe:df:a5:8c:98:ab:9c:16:77:e9:b3:b3:5b:9b: 04:e7:3e:ff:f4:7d:c9:94:8d:88:14:83:9c:c2:76: fb:b7:87:99:61:73:77:5b:16:48:7d:31:55:cd:c3: 68:da:be:30:ab:10:39:d8:31:03:f6:3f:29:48:68: 55:60:44:dd:9d:ab:c2:fe:f5:da:6a:1c:ba:ba:58: 8c:45:75:64:0b:45:2b:cf:a8:21:18:d8:bb:e5:19: f6:46:87:69:fd:d6:81:48:b8:54:81:56:2e:33:4c: fb:38:91:95:b5:6f:03:41:de:b3:cf:64:ba:fc:55: 3d:74:75:39:22:4c:50:c4:bf:41:91:f2:03:2d:b5: 24:4d:e0:48:69:0f:29:9c:30:f6:23:48:aa:a0:7b: e7:08:55:a8:ba:a2:cc:8f:4f:9f:cb:16:63:ad:c1: 04:89:f2:86:d4:03:e0:f8:04:be:fa:ce:9a:e9:d3: fb:ba:a6:c6:24:8e:31:2e:7d:37:aa:52:61:3f:59: 55:3d:7a:a9:7e:ce:5f:4b:cd:eb:78:8f:3e:ff:dc: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:86:02:3F:13:E5:42:03:B2:38:9C:A0:AB:AA:B3:43:5C:B0:59:BF X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:64:e2:0f:18:ec:8d:f3:54:0e:e1:67:bd:16:2f:20:69:60: 25:c2:76:4c:7f:9e:26:27:da:a5:c7:b6:38:13:b5:03:22:98: ff:32:43:65:67:16:55:e0:02:8d:87:ea:ef:89:6a:96:97:8e: 62:55:96:c4:50:0e:e0:f3:ac:48:56:66:c0:e6:bb:01:c7:44: e5:d0:dc:1a:e5:f3:52:41:37:25:91:f7:f0:ce:9c:ed:48:04: 40:ce:04:93:6d:0a:7a:b3:ff:45:6c:09:34:f3:7f:5b:75:01: 66:d4:4d:0c:10:ba:05:b1:08:db:bd:d4:fc:e8:d1:36:a1:3e: ed:6c:fa:46:7f:eb:c6:71:6f:c3:75:ac:46:77:c5:6f:c7:46: 17:cb:e7:dc:95:7a:45:fd:53:69:99:48:ac:a4:00:84:0c:f6: 31:ca:46:be:21:97:98:2b:2d:ce:5d:d4:21:e9:0f:2a:53:09: 12:73:c1:80:40:79:df:f7:18:79:89:10:ef:13:b1:30:7c:29: 4f:27:98:42:78:34:4b:f6:9c:a4:8e:84:61:ee:52:69:3b:2e: a4:5e:ed:9e:4f:8c:22:4d:2d:ac:a2:08:48:92:f5:25:8d:28: 1c:f8:d0:34:1e:b3:36:3c:38:4b:6b:a3:f0:35:d9:6f:7c:ff: df:44:e5:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoMEY5MTRBMURDOTRGNUJFNDJFODgzQzJBREQ1NDMwQkNE RjZERjMzNDAeFw0yNTEyMDUwNTA3MThaFw0yNTEyMTIwNTA3MThaMBgxFjAUBgNV BAMTDTY5MzI2ODg2LWE5YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd3M7BNTUrE4bpVEHv6007Jav3MTVmDGRaqXyF6CJ+/gqAs8QFFS6B8//ttqX+ 36WMmKucFnfps7NbmwTnPv/0fcmUjYgUg5zCdvu3h5lhc3dbFkh9MVXNw2javjCr EDnYMQP2PylIaFVgRN2dq8L+9dpqHLq6WIxFdWQLRSvPqCEY2LvlGfZGh2n91oFI uFSBVi4zTPs4kZW1bwNB3rPPZLr8VT10dTkiTFDEv0GR8gMttSRN4EhpDymcMPYj SKqge+cIVai6osyPT5/LFmOtwQSJ8obUA+D4BL76zprp0/u6psYkjjEufTeqUmE/ WVU9eql+zl9Lzet4jz7/3DkhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFYYCPxPl QgOyOJygq6qzQ1ywWb8wHwYDVR0jBBgwFoAUD5FKHclPW+QuiDwq3VQwvN9t8zQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzBGNDNFQzNDNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDVGS0hjbFBXLVF1aUR3cTNWUXd2Tjl0OHpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzBGNDNFQzNDNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1R dWlEd3EzVlF3dk45dDh6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdk4g8Y7I3zVA7hZ70WLyBpYCXCdkx/niYn2qXHtjgTtQMimP8yQ2Vn FlXgAo2H6u+JapaXjmJVlsRQDuDzrEhWZsDmuwHHROXQ3Brl81JBNyWR9/DOnO1I BEDOBJNtCnqz/0VsCTTzf1t1AWbUTQwQugWxCNu91Pzo0TahPu1s+kZ/68Zxb8N1 rEZ3xW/HRhfL59yVekX9U2mZSKykAIQM9jHKRr4hl5grLc5d1CHpDypTCRJzwYBA ed/3GHmJEO8TsTB8KU8nmEJ4NEv2nKSOhGHuUmk7LqRe7Z5PjCJNLayiCEiS9SWN KBz40DQeszY8OEtro/A12W98/99E5XI= -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:34 2025 by rpki-client