This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft File: E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json) Hash identifier: F+s29+JUzUvYTc0G+Sau5IdKJrsRACUnlMJw5U6OmKM= Subject key identifier: 2D:35:35:76:D2:9C:BC:1D:4F:1D:A7:6E:2A:E8:B9:49:3B:87:79:DF Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft Manifest number: 0559 Signing time: Thu 04 Dec 2025 22:02:03 +0000 Manifest this update: Thu 04 Dec 2025 22:02:03 +0000 Manifest next update: Thu 11 Dec 2025 22:02:03 +0000 Files and hashes: 1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: lMCTEow4krdOm0SDTzwn9tiID3ZtSZu+AJcKnoOGzAg=) 2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: Dec 4 22:02:03 2025 GMT Not After : Dec 11 22:02:03 2025 GMT Subject: CN=693204db-4d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:9f:55:8b:80:e9:4e:00:9e:47:2b:16:20: e1:80:b1:56:18:7f:ed:40:27:a7:5b:d8:fb:06:b0: b2:f2:0d:61:cf:51:e3:87:5c:2a:9f:c1:28:cc:10: ed:ef:3b:a9:00:e9:4a:9d:ac:77:cd:a7:68:5a:32: 3f:47:3c:3d:df:82:81:8c:b1:63:3a:9d:37:0a:ba: 27:01:90:8f:94:56:35:11:28:52:8c:e4:19:6a:af: c8:83:eb:f6:d7:19:a7:cf:80:11:f1:ea:11:57:68: e2:2e:f6:b1:80:ea:57:8d:9e:c2:45:fa:33:bb:75: 4c:e9:5a:4c:72:8a:19:2a:0c:df:c7:e5:ae:63:fb: fc:96:60:2e:0e:06:98:6d:08:ed:0c:dd:04:17:c8: 69:0a:62:5b:bd:19:17:71:f2:81:c4:38:f6:54:cb: 24:8e:c7:2f:d8:1d:49:d7:05:d9:9d:a7:ea:6a:33: a3:3a:c1:01:3c:bc:20:27:d0:3e:79:57:e8:62:d2: 56:41:88:9c:f9:5a:32:8a:d3:a5:4e:21:25:dd:09: c3:c9:c2:9a:04:e7:77:45:73:56:b5:7b:75:f7:e7: c4:00:94:de:de:81:e0:a4:13:98:23:7e:2c:b2:9b: bb:84:ef:d5:db:a2:90:78:2d:35:1c:1f:b6:c3:1e: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:35:76:D2:9C:BC:1D:4F:1D:A7:6E:2A:E8:B9:49:3B:87:79:DF X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:14:9c:06:01:96:33:22:57:8f:8c:1a:64:07:ab:4e:2b:ab: bf:4c:b9:21:79:65:03:c5:93:d8:f9:ed:a8:32:8e:07:07:26: 97:29:4f:1a:0a:35:cc:40:a8:30:01:00:4e:46:1a:27:b6:a2: 3f:8b:d2:18:71:ab:53:74:12:3d:71:99:66:50:6a:2c:71:4d: 3f:3a:95:f3:8f:c1:a0:26:54:b1:09:80:3c:61:da:a5:d5:d6: 3a:c3:b3:01:ce:a5:b7:c4:e6:f9:d5:e5:8a:89:cb:69:66:a3: e6:a7:bd:b6:b2:6f:0c:f7:fa:47:ef:fa:c0:71:95:97:5e:4c: bf:e6:f3:96:ef:99:c8:be:de:e9:d2:1d:70:a4:e6:6b:1b:79: c3:93:18:ba:d0:2a:1f:b3:b6:91:e4:68:54:67:7f:48:84:ce: a8:52:47:e7:c8:da:7e:17:58:d1:d4:ca:84:62:60:d0:56:f1: b8:38:21:03:e3:4e:40:be:52:ac:4f:c5:a0:87:b2:fd:2a:58: 4a:90:85:86:82:3a:3b:d1:c0:91:ee:ec:54:98:ff:63:4c:07: 38:89:e6:80:9a:32:72:5f:af:33:3f:3d:62:85:ac:5f:a0:70: b6:3f:29:83:56:b2:3a:ab:b0:ec:82:e5:43:bd:67:f5:75:d1: e4:58:80:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjUxMjA0MjIwMjAzWhcNMjUxMjExMjIwMjAzWjAYMRYwFAYD VQQDEw02OTMyMDRkYi00ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OqfVYuA6U4AnkcrFiDhgLFWGH/tQCenW9j7BrCy8g1hz1Hjh1wqn8EozBDt 7zupAOlKnax3zadoWjI/Rzw934KBjLFjOp03CronAZCPlFY1EShSjOQZaq/Ig+v2 1xmnz4AR8eoRV2jiLvaxgOpXjZ7CRfozu3VM6VpMcooZKgzfx+WuY/v8lmAuDgaY bQjtDN0EF8hpCmJbvRkXcfKBxDj2VMskjscv2B1J1wXZnafqajOjOsEBPLwgJ9A+ eVfoYtJWQYic+VoyitOlTiEl3QnDycKaBOd3RXNWtXt19+fEAJTe3oHgpBOYI34s spu7hO/V26KQeC01HB+2wx57xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC01NXbS nLwdTx2nbirouUk7h3nfMB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REY1Ni9CRDdGQTAzODE1MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9D QmY4dVBSc3I0YmtOY3N4ZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClFJwGAZYzIlePjBpkB6tOK6u/TLkheWUDxZPY+e2oMo4HByaXKU8a CjXMQKgwAQBORhontqI/i9IYcatTdBI9cZlmUGoscU0/OpXzj8GgJlSxCYA8Ydql 1dY6w7MBzqW3xOb51eWKictpZqPmp722sm8M9/pH7/rAcZWXXky/5vOW75nIvt7p 0h1wpOZrG3nDkxi60Cofs7aR5GhUZ39IhM6oUkfnyNp+F1jR1MqEYmDQVvG4OCED 405AvlKsT8Wgh7L9KlhKkIWGgjo70cCR7uxUmP9jTAc4ieaAmjJyX68zPz1ihaxf oHC2PymDVrI6q7DsguVDvWf1ddHkWIDt -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:54 2025 by rpki-client