This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft File: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json) Hash identifier: nRHiRo/jDH6bHwqmNTG0mSVa2bJCFIqWLqQwKk0O314= Subject key identifier: 37:8D:77:3D:23:78:B6:F3:F1:53:B6:CC:26:63:C9:6D:3D:9C:62:25 Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft Manifest number: 0811 Signing time: Sat 20 Dec 2025 20:19:13 +0000 Manifest this update: Sat 20 Dec 2025 20:19:12 +0000 Manifest next update: Sat 27 Dec 2025 20:19:12 +0000 Files and hashes: 1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: Fb7H0hMTIYNpj8zYAju5rZKR3aGlupulYgqrIUK9t80=) 2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: hbQmOshNkorS1/g78QiEhSVwbWUn9A8H0a6ZSzOWB98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Validity Not Before: Dec 20 20:19:12 2025 GMT Not After : Dec 27 20:19:12 2025 GMT Subject: CN=694704c0-9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:40:d3:10:ef:ad:20:fd:f3:ee:6f:08:ff: 8d:13:32:f6:d5:f7:e8:9a:99:53:28:10:38:f7:46: 95:ca:20:27:58:3b:a6:69:b4:98:d8:de:63:fd:ea: 23:65:a3:92:f9:33:ed:80:b2:a0:c4:dc:b2:e8:1e: a5:bf:a2:4b:b9:02:ec:d6:6b:c6:67:d0:3e:0c:43: 1b:6b:05:d2:35:99:8f:a0:a6:4f:b3:cd:8e:2e:34: 26:78:1e:65:da:a2:33:de:43:ad:7b:52:01:59:8e: dc:ed:66:68:ca:21:55:8b:79:b2:36:00:aa:6d:8d: 51:e6:4f:6c:85:37:14:b4:16:32:1a:3d:6a:ce:a0: 60:17:f1:e8:ee:ca:48:cc:25:9c:fd:37:c9:fc:fe: 64:89:4f:78:d9:99:d9:b3:7c:a8:0c:d9:6e:2d:1e: cb:1e:8e:e8:24:bb:01:20:65:29:8d:30:73:35:55: b2:d6:92:36:7d:d2:88:58:5d:ab:93:32:7b:c4:6d: 83:31:eb:63:c4:77:44:29:29:bc:b2:e0:ef:e5:96: 81:52:af:79:ac:3a:56:8c:2a:ec:b0:77:72:d5:e7: 3a:e0:bb:56:55:46:38:a2:14:2c:c0:5b:5f:22:b8: b7:09:99:f5:5e:de:30:e0:44:38:85:ad:6c:85:f0: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8D:77:3D:23:78:B6:F3:F1:53:B6:CC:26:63:C9:6D:3D:9C:62:25 X509v3 Authority Key Identifier: keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fc:89:51:f8:2d:7e:33:0f:39:6d:58:7d:46:6b:76:83:ba: be:41:a7:2a:99:9d:4a:2e:26:03:a1:27:e9:63:76:07:af:61: 18:5a:4d:ff:fb:af:7c:bc:ab:97:d1:5f:48:5c:6c:c6:6d:1b: 5e:49:99:15:1e:84:40:02:19:e2:41:87:19:11:a0:08:1d:0d: c5:36:f3:5c:7f:31:03:1f:13:eb:85:2a:c4:96:77:ca:4e:0e: f5:2d:2d:1a:15:ad:ad:08:9c:7e:98:0c:c2:60:0e:b5:71:98: 8b:16:71:d9:42:8a:5e:a4:85:1b:f5:0d:80:8a:0d:44:96:cf: 32:98:96:11:e4:3a:90:3a:a0:a2:90:4d:a6:95:fa:0d:3f:05: c3:a8:86:92:34:3c:76:19:cb:2c:3d:6f:97:20:b4:34:90:1d: 36:60:5f:e6:51:90:3a:89:b3:e1:b3:19:b8:d2:01:71:5f:d8: 84:7f:b5:fb:31:fe:d4:0d:bd:60:8d:5f:df:b8:51:43:54:32: 4e:84:c1:51:5c:14:31:25:b2:00:6a:c4:49:71:43:6c:2a:89: 46:9f:9e:b3:4a:72:e1:d7:a7:78:84:bd:22:8a:9d:72:1c:90: 3e:1a:76:a0:a3:26:e5:e8:fa:db:bb:c0:e0:2f:7b:d1:ea:c4: 63:4c:31:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzQkExMTAvBgNVBAUTKEU0NjIzQ0ZENDQzRTYyMzJGMjZDMjNFODFGREY5NzU4 QjI2RjNCMkMwHhcNMjUxMjIwMjAxOTEyWhcNMjUxMjI3MjAxOTEyWjAYMRYwFAYD VQQDDA02OTQ3MDRjMC05MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjBA0xDvrSD98+5vCP+NEzL21ffomplTKBA490aVyiAnWDumabSY2N5j/eoj ZaOS+TPtgLKgxNyy6B6lv6JLuQLs1mvGZ9A+DEMbawXSNZmPoKZPs82OLjQmeB5l 2qIz3kOte1IBWY7c7WZoyiFVi3myNgCqbY1R5k9shTcUtBYyGj1qzqBgF/Ho7spI zCWc/TfJ/P5kiU942ZnZs3yoDNluLR7LHo7oJLsBIGUpjTBzNVWy1pI2fdKIWF2r kzJ7xG2DMetjxHdEKSm8suDv5ZaBUq95rDpWjCrssHdy1ec64LtWVUY4ohQswFtf Iri3CZn1Xt4w4EQ4ha1shfA4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeNdz0j eLbz8VO2zCZjyW09nGIlMB8GA1UdIwQYMBaAFORiPP1EPmIy8mwj6B/fl1iybzss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjNCQS9GRjIwRUJEQzAx M0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlqTHliQ1BvSDktWFdMSnZP eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHSThfVVEtWWpMeWJDUG9IOS1YV0xKdk95dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjNCQS9GRjIwRUJEQzAxM0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlq THliQ1BvSDktWFdMSnZPeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8/IlR+C1+Mw85bVh9Rmt2g7q+QacqmZ1KLiYDoSfpY3YHr2EYWk3/ +698vKuX0V9IXGzGbRteSZkVHoRAAhniQYcZEaAIHQ3FNvNcfzEDHxPrhSrElnfK Tg71LS0aFa2tCJx+mAzCYA61cZiLFnHZQopepIUb9Q2Aig1Els8ymJYR5DqQOqCi kE2mlfoNPwXDqIaSNDx2GcssPW+XILQ0kB02YF/mUZA6ibPhsxm40gFxX9iEf7X7 Mf7UDb1gjV/fuFFDVDJOhMFRXBQxJbIAasRJcUNsKolGn56zSnLh16d4hL0iip1y HJA+Gnagoybl6Prbu8DgL3vR6sRjTDG6 -----END CERTIFICATE-----Generated at Sun Dec 21 17:30:01 2025 by rpki-client