This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft File: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json) Hash identifier: BEj2IRzGQSAc0Xqn6cypzvMKFO2wu5f7vCYK1NS1RcY= Subject key identifier: B6:B1:E1:EC:FA:BF:85:89:9B:BF:12:8C:AC:0D:FC:0F:59:80:F7:56 Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0 Certificate issuer: /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft Manifest number: 1D Signing time: Fri 05 Dec 2025 05:38:21 +0000 Manifest this update: Fri 05 Dec 2025 05:38:20 +0000 Manifest next update: Fri 12 Dec 2025 05:38:20 +0000 Files and hashes: 1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: diN9Op7FnhonxnL26odf+WdMocW6TinVEaDruJ9Lcfg=) 2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: kENvzHNKo6IjGoWcT7mvOgf2Y85E5p1Dl4B5gZlD2OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0 Validity Not Before: Dec 5 05:38:20 2025 GMT Not After : Dec 12 05:38:20 2025 GMT Subject: CN=69326fcc-e6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:0c:68:9e:ce:d0:5d:c0:c0:38:d7:f7:3f: 65:f9:2a:21:87:f9:bd:5b:bd:cc:c6:46:c8:5e:dc: 15:61:cc:b7:dd:46:50:9e:75:a2:0e:22:ef:cf:77: 1b:81:68:94:36:65:d8:57:9e:5a:d9:91:21:ff:99: 88:03:13:a2:7b:f0:48:b6:a1:87:cf:b1:26:ed:78: 1c:63:ec:4b:80:9d:18:9b:37:f7:4d:2a:23:e7:78: 67:56:f2:e1:5c:4a:4f:27:e8:66:8a:74:30:d1:0b: d5:ff:83:c9:22:bb:c0:d8:43:f5:64:13:31:ea:26: 54:80:ab:7b:4d:8b:6a:04:b4:d6:6d:5e:c5:73:09: 6e:c0:56:c6:8c:00:3e:24:4c:13:28:5b:64:af:99: c2:6a:1e:9a:f3:dd:7f:af:e1:09:57:34:c1:70:9a: 44:b8:e2:dc:bb:9e:d8:8f:24:61:97:2c:63:51:7c: 31:06:f3:7d:e4:e6:a6:5a:0e:73:14:ed:fa:42:43: 24:3a:be:0d:b9:f0:c2:7b:45:5f:7b:02:3d:52:de: fd:ad:d8:24:a5:b6:e0:ab:54:7b:89:e8:38:5c:4a: 5a:9b:62:f2:6b:b1:43:0e:29:21:25:f1:fe:0d:fb: 9f:dd:63:56:48:ce:cf:63:56:de:0a:ac:40:59:10: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:E1:EC:FA:BF:85:89:9B:BF:12:8C:AC:0D:FC:0F:59:80:F7:56 X509v3 Authority Key Identifier: keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:15:84:df:87:4e:fb:e7:88:7b:3c:cc:a0:7b:b4:62:e1:aa: 13:90:5f:55:c4:d1:08:8b:5f:d7:1f:e9:c4:34:e4:f8:ae:8c: 2c:a9:f8:75:d9:d3:c1:81:32:9b:79:4f:25:cd:2c:09:70:f1: 69:a7:59:71:cd:4b:8c:1c:dc:18:1a:5b:6e:d8:04:d7:ab:68: 6a:52:60:c6:e3:42:d0:22:f0:e2:cc:d3:13:05:2b:79:f9:2f: 6d:f5:fb:02:6a:13:72:ac:60:a2:a7:9f:71:b2:3e:ad:f7:c5: 5d:98:b1:b0:8c:5e:6e:ae:66:64:0f:86:29:e8:7c:c8:38:78: 0e:b3:9f:e2:14:87:07:6d:c1:7e:81:c3:15:0c:74:78:c9:cc: 70:a3:3a:ef:c2:32:30:17:24:cd:e6:07:25:47:2f:89:f8:ac: 16:26:42:1d:ec:c9:71:23:6e:58:ec:d1:ba:14:09:52:27:19: 40:b6:ed:5f:06:de:7c:be:f1:c7:e1:91:bd:65:75:1d:b1:84: 11:5f:ee:2f:bd:8c:bd:67:36:aa:44:3c:9f:40:79:8e:f4:66: d1:3e:24:0c:9f:80:a8:18:aa:10:02:9f:91:8d:47:d2:df:3e: 9d:1f:5e:ee:67:b4:65:d7:c1:39:8b:83:21:54:cb:de:4c:84: a0:23:24:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDAzMDExMC8GA1UEBRMoMzM5N0I4ODkwRTMzN0RBMDk0OEQ2OTdENDIzMEQ2RkU0 NjMzRDBEMDAeFw0yNTEyMDUwNTM4MjBaFw0yNTEyMTIwNTM4MjBaMBgxFjAUBgNV BAMTDTY5MzI2ZmNjLWU2ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnsAxons7QXcDAONf3P2X5KiGH+b1bvczGRshe3BVhzLfdRlCedaIOIu/PdxuB aJQ2ZdhXnlrZkSH/mYgDE6J78Ei2oYfPsSbteBxj7EuAnRibN/dNKiPneGdW8uFc Sk8n6GaKdDDRC9X/g8kiu8DYQ/VkEzHqJlSAq3tNi2oEtNZtXsVzCW7AVsaMAD4k TBMoW2SvmcJqHprz3X+v4QlXNMFwmkS44ty7ntiPJGGXLGNRfDEG833k5qZaDnMU 7fpCQyQ6vg258MJ7RV97Aj1S3v2t2CSltuCrVHuJ6DhcSlqbYvJrsUMOKSEl8f4N +5/dY1ZIzs9jVt4KrEBZEPLHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtrHh7Pq/ hYmbvxKMrA38D1mA91YwHwYDVR0jBBgwFoAUM5e4iQ4zfaCUjWl9QjDW/kYz0NAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MDMwLzIwMDYzQzYwQUIx MzExRjA5NzZDOUIxRUM0RjlBRTAyL001ZTRpUTR6ZmFDVWpXbDlRakRXX2tZejBO QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTVlNGlRNHpmYUNValdsOVFqRFdfa1l6ME5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 MDMwLzIwMDYzQzYwQUIxMzExRjA5NzZDOUIxRUM0RjlBRTAyL001ZTRpUTR6ZmFD VWpXbDlRakRXX2tZejBOQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYVhN+HTvvniHs8zKB7tGLhqhOQX1XE0QiLX9cf6cQ05PiujCyp+HXZ 08GBMpt5TyXNLAlw8WmnWXHNS4wc3BgaW27YBNeraGpSYMbjQtAi8OLM0xMFK3n5 L231+wJqE3KsYKKnn3GyPq33xV2YsbCMXm6uZmQPhinofMg4eA6zn+IUhwdtwX6B wxUMdHjJzHCjOu/CMjAXJM3mByVHL4n4rBYmQh3syXEjbljs0boUCVInGUC27V8G 3ny+8cfhkb1ldR2xhBFf7i+9jL1nNqpEPJ9AeY70ZtE+JAyfgKgYqhACn5GNR9Lf Pp0fXu5ntGXXwTmLgyFUy95MhKAjJAY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:14:34 2025 by rpki-client