This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: pghQFpS3W2njg1CpbGYJmnjz0hAhLeF3pRGmxVotHSg= Subject key identifier: 48:0E:07:9D:51:C2:2C:9C:D6:3B:BA:6C:0D:15:AF:89:53:52:48:55 Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 08D9 Signing time: Thu 04 Dec 2025 19:35:10 +0000 Manifest this update: Thu 04 Dec 2025 19:35:10 +0000 Manifest next update: Thu 11 Dec 2025 19:35:10 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: u2nY0s2ZDXjigoiCYFu3lrYgwLqwb7I7DD/+L108N+Q=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: CVJgpgajxXp0nfuwvvTtpQWL1YkwrnLOPz0dX0Da2i8=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: 0NHrksBzZ1sw6KKMUlk4z1DIMariid2PsdJfHN0oQM8=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: GmMG2dURnElUOnQiq0F5h7Z6METNWOktXhEJ+2ZzA/g=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: XkWTXb6PHytvZUY7EAUhHe4Q0yrK6oVBVW0wC1ENUcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2298 (0x8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Dec 4 19:35:10 2025 GMT Not After : Dec 11 19:35:10 2025 GMT Subject: CN=6931e26e-1535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:ce:00:d6:89:d2:17:6a:41:6d:d1:f2:f2: b4:92:cc:c3:f8:52:b9:e0:50:5f:69:da:f3:32:59: 59:3f:4f:68:d1:83:45:57:68:40:ef:16:a7:fb:d3: 8c:ce:da:da:a7:3b:06:3b:02:4c:21:9d:ed:ce:f2: 11:ce:9c:0c:8b:bb:bb:0c:c2:dc:98:8a:ed:fb:71: 2a:0e:92:8d:1e:1f:27:f7:71:93:24:34:85:5c:2e: cb:e1:8c:f7:5b:34:dc:2c:cd:1f:9b:bc:6e:2f:b4: 77:20:c8:90:e4:f8:af:87:82:e9:a6:1e:14:0d:ab: 0a:56:1b:49:11:8f:1b:6f:34:a9:6b:3c:f8:42:79: b3:18:e8:17:83:5a:03:e2:f8:0c:57:7e:84:70:2b: 24:bb:8f:95:9c:99:9c:c3:c5:4d:d6:1c:88:ef:ab: fd:5d:dd:7b:01:81:cd:56:6d:d1:63:82:63:59:ba: bc:a2:53:44:20:b7:b5:be:b4:cc:7d:c6:55:78:59: 23:c8:9a:55:b2:4a:d1:b1:c2:5f:88:fd:58:b8:5f: e4:09:69:9e:48:1e:46:75:8e:40:0d:02:a7:48:8a: 76:cb:ce:4a:09:0e:96:f4:32:7a:05:b1:7e:54:d2: 6f:2f:bf:11:b8:31:23:7f:c0:9f:7a:4b:27:36:0c: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:07:9D:51:C2:2C:9C:D6:3B:BA:6C:0D:15:AF:89:53:52:48:55 X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0f:ff:54:16:30:00:54:98:c7:63:f7:73:f1:ac:d7:a4:1f: f5:c6:93:3b:6b:b7:1e:82:a4:d7:d3:22:3e:3e:c6:9b:e3:d4: fa:3b:41:ba:51:37:69:54:ec:c0:12:96:f4:7f:72:4e:fe:44: a1:6a:ce:a3:ea:3c:d8:df:17:6d:02:38:c7:98:94:9b:40:ea: c6:af:a6:20:cb:17:fa:96:82:60:bc:9b:e7:a1:87:25:da:11: 58:e6:b5:49:97:b8:f1:8e:24:d8:85:92:7d:65:61:31:2a:d5: 3b:82:8f:b0:72:a7:79:75:63:c7:ac:44:7a:e6:4e:52:0e:9e: 67:51:8d:b7:fe:e5:7c:cd:e5:61:fa:23:93:5c:fd:20:d7:a5: a1:d9:8e:02:4b:1e:a8:fc:f9:ac:43:f6:3e:5f:2a:b3:e5:5f: b3:75:0d:17:ca:ac:45:3c:c2:28:52:20:40:8a:be:ec:77:69: 08:17:a2:36:aa:be:4b:71:58:ce:e0:54:88:9f:90:7e:10:a1: 89:bd:08:78:5c:4b:22:d5:ab:82:32:02:23:4d:0b:98:3f:58: 36:fe:a2:bd:04:44:5f:29:c4:b3:24:7a:85:7f:3e:5f:1d:80: a9:17:0a:ee:30:7a:3c:10:39:9f:8d:a9:a2:93:44:47:8c:e8: 67:6f:77:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUxMjA0MTkzNTEwWhcNMjUxMjExMTkzNTEwWjAYMRYwFAYD VQQDEw02OTMxZTI2ZS0xNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPPOANaJ0hdqQW3R8vK0kszD+FK54FBfadrzMllZP09o0YNFV2hA7xan+9OM ztrapzsGOwJMIZ3tzvIRzpwMi7u7DMLcmIrt+3EqDpKNHh8n93GTJDSFXC7L4Yz3 WzTcLM0fm7xuL7R3IMiQ5Pivh4Lpph4UDasKVhtJEY8bbzSpazz4QnmzGOgXg1oD 4vgMV36EcCsku4+VnJmcw8VN1hyI76v9Xd17AYHNVm3RY4JjWbq8olNEILe1vrTM fcZVeFkjyJpVskrRscJfiP1YuF/kCWmeSB5GdY5ADQKnSIp2y85KCQ6W9DJ6BbF+ VNJvL78RuDEjf8CfeksnNgzwdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgOB51R wiyc1ju6bA0Vr4lTUkhVMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvD/9UFjAAVJjHY/dz8azXpB/1xpM7a7cegqTX0yI+Psab49T6O0G6 UTdpVOzAEpb0f3JO/kShas6j6jzY3xdtAjjHmJSbQOrGr6Ygyxf6loJgvJvnoYcl 2hFY5rVJl7jxjiTYhZJ9ZWExKtU7go+wcqd5dWPHrER65k5SDp5nUY23/uV8zeVh +iOTXP0g16Wh2Y4CSx6o/PmsQ/Y+Xyqz5V+zdQ0XyqxFPMIoUiBAir7sd2kIF6I2 qr5LcVjO4FSIn5B+EKGJvQh4XEsi1auCMgIjTQuYP1g2/qK9BERfKcSzJHqFfz5f HYCpFwruMHo8EDmfjamik0RHjOhnb3dR -----END CERTIFICATE-----Generated at Sat Dec 6 20:11:15 2025 by rpki-client