This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json) Hash identifier: y91sqkUVBmXHFvuysSIEZwgGxKCXBI0KhidvXybHtTo= Subject key identifier: C5:8F:A5:9C:F1:A8:7B:92:DF:0A:36:56:9D:06:1F:1B:68:A5:2C:3E Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft Manifest number: 34E9 Signing time: Sat 06 Dec 2025 14:36:31 +0000 Manifest this update: Sat 06 Dec 2025 14:36:31 +0000 Manifest next update: Sat 13 Dec 2025 14:36:31 +0000 Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: T5e7X7YIs9qXE7m32JNO7V7HfNjZM8roczgViYjHb+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Validity Not Before: Dec 6 14:36:31 2025 GMT Not After : Dec 13 14:36:31 2025 GMT Subject: CN=69343f6f-dd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f1:21:60:2b:15:25:8c:cf:b5:0c:17:d1:2f: 07:2f:54:f3:be:bc:2c:b7:53:30:65:7c:42:7d:3d: 07:10:28:2b:4a:1f:ea:49:11:fd:fb:4c:30:2f:3a: c0:b8:65:0d:93:c0:80:70:4c:60:89:49:38:38:77: 00:dc:0f:31:fd:66:57:cd:b4:9c:ce:2a:e9:d6:b6: 6a:62:79:b9:f9:1c:cb:f3:6b:c8:1a:56:4a:97:a8: 69:5a:c5:24:0e:84:61:79:16:6f:f5:f5:d7:7d:ea: 5e:16:c3:38:ba:e6:11:fb:b3:f5:23:34:7a:d0:c7: 78:cc:2d:2d:b3:0c:1f:a5:33:1f:2b:15:aa:df:75: e3:83:72:3d:1c:d5:0f:9e:49:7a:b3:6d:b9:81:c7: 82:e3:31:53:7b:d3:b6:8e:c1:95:ae:54:c1:2c:a3: d0:ed:0b:27:fb:ae:0b:28:0d:21:fd:72:71:31:b3: c5:fa:41:9d:a9:aa:ca:04:b6:8c:1c:d0:2a:47:b1: c2:d4:81:5f:57:b0:29:d8:8d:3c:6f:f4:16:93:47: 49:8e:3b:91:a2:5c:e1:10:03:5f:5a:94:2d:38:df: 9e:f7:58:b7:a6:ce:2f:47:d7:fb:69:dc:1a:16:1a: 6d:b8:6e:5f:11:05:8b:c7:db:2e:a9:b9:6b:c8:5f: 74:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8F:A5:9C:F1:A8:7B:92:DF:0A:36:56:9D:06:1F:1B:68:A5:2C:3E X509v3 Authority Key Identifier: keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:bf:c9:34:dd:4f:55:aa:42:40:e9:0d:5b:e0:8e:87:e4: 9a:16:85:7e:6f:d0:f6:ce:e8:3a:cf:72:4a:c9:0e:f1:b9:9e: 93:97:a0:9f:b5:24:02:6e:38:93:52:cf:20:39:c9:dc:05:39: cb:41:7b:be:6c:44:f1:46:51:12:f1:e3:4f:37:dc:dc:86:e6: 05:03:63:bb:e7:ff:51:86:fe:57:39:b5:ec:3a:80:9c:07:8f: e6:ec:e0:2f:ef:76:b1:ab:5f:15:87:46:e5:d2:c2:25:1b:c6: 49:da:5c:0b:2a:ff:f8:7f:4f:cb:5e:ac:7b:3c:21:9f:42:87: ed:ed:20:f9:56:54:d9:f7:a1:b6:02:b3:95:f2:0b:4b:8f:c0: 57:de:4f:c3:a1:88:84:7d:7a:f4:ee:09:ea:87:63:bb:b5:cb: f4:a4:51:4a:18:5d:9f:09:be:ad:76:42:5b:c4:f9:57:1f:f9: d6:77:2d:c9:3a:dd:56:da:ac:39:54:3e:c8:f1:6e:1f:22:37: b4:06:d0:31:a9:6e:20:d9:20:1e:d2:31:bf:ad:70:a2:3e:26: 75:e3:ca:71:06:40:8f:0b:58:10:8b:0e:04:25:68:07:be:db: 91:98:a0:4a:ac:7d:db:24:a4:31:d4:a9:63:59:13:f5:db:36: 60:51:75:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVGRDA0QTQzNjg1 NjJBQjVFMjEwHhcNMjUxMjA2MTQzNjMxWhcNMjUxMjEzMTQzNjMxWjAYMRYwFAYD VQQDEw02OTM0M2Y2Zi1kZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fEhYCsVJYzPtQwX0S8HL1Tzvrwst1MwZXxCfT0HECgrSh/qSRH9+0wwLzrA uGUNk8CAcExgiUk4OHcA3A8x/WZXzbSczirp1rZqYnm5+RzL82vIGlZKl6hpWsUk DoRheRZv9fXXfepeFsM4uuYR+7P1IzR60Md4zC0tswwfpTMfKxWq33Xjg3I9HNUP nkl6s225gceC4zFTe9O2jsGVrlTBLKPQ7Qsn+64LKA0h/XJxMbPF+kGdqarKBLaM HNAqR7HC1IFfV7Ap2I08b/QWk0dJjjuRolzhEANfWpQtON+e91i3ps4vR9f7adwa FhptuG5fEQWLx9suqblryF90sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWPpZzx qHuS3wo2Vp0GHxtopSw+MB8GA1UdIwQYMBaAFOQzF25ZrptHZOte/QSkNoViq14h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxOC9CNTcxOUREMjFE OEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0wZGs2MTc5QktRMmhXS3JY aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVETVhibG11bTBkazYxNzlCS1EyaFdLclhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0w ZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9w7/JNN1PVapCQOkNW+COh+SaFoV+b9D2zug6z3JKyQ7xuZ6Tl6Cf tSQCbjiTUs8gOcncBTnLQXu+bETxRlES8eNPN9zchuYFA2O75/9Rhv5XObXsOoCc B4/m7OAv73axq18Vh0bl0sIlG8ZJ2lwLKv/4f0/LXqx7PCGfQoft7SD5VlTZ96G2 ArOV8gtLj8BX3k/DoYiEfXr07gnqh2O7tcv0pFFKGF2fCb6tdkJbxPlXH/nWdy3J Ot1W2qw5VD7I8W4fIje0BtAxqW4g2SAe0jG/rXCiPiZ148pxBkCPC1gQiw4EJWgH vtuRmKBKrH3bJKQx1KljWRP12zZgUXXk -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:14 2025 by rpki-client