This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: hRltqTmpo5v85439RoGPvJcCCq1kYAUcQCRDl6Moxik= Subject key identifier: FE:0D:67:C1:CE:AA:03:F5:C9:85:9D:18:69:65:3C:4D:4E:31:FC:BB Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 0928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 0907 Signing time: Sat 06 Dec 2025 19:27:59 +0000 Manifest this update: Sat 06 Dec 2025 19:27:58 +0000 Manifest next update: Sat 13 Dec 2025 19:27:58 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: faTz49akEbojpY340GMJInF8z4obaI/V6ZYiRo+3Qag=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2344 (0x928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Dec 6 19:27:58 2025 GMT Not After : Dec 13 19:27:58 2025 GMT Subject: CN=693483bf-ec3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:ad:48:d4:b8:93:6f:8b:dc:4d:64:c7:24: f4:98:e4:1e:34:d2:80:44:94:7b:26:a9:12:bf:10: 61:ea:0f:ea:47:32:a6:18:5f:d2:d3:19:2e:66:61: d6:c2:e1:dd:06:d3:ca:23:1d:95:e7:6d:f2:a4:9f: b0:90:61:d8:58:48:f8:2b:7e:fc:be:dd:0a:aa:66: 93:89:09:c1:2c:95:e5:52:34:62:87:aa:fd:52:2e: 00:c1:1e:f2:22:56:34:57:84:21:e2:a3:56:9d:1f: 63:b6:84:72:99:79:e8:a7:43:67:ca:a5:bf:cd:cd: 5e:c1:0a:06:53:59:7f:62:82:d9:5e:fb:d0:60:42: 80:13:82:5b:c0:7d:ed:5b:10:5b:b2:70:f0:56:1a: 51:bb:86:5e:a0:6c:53:63:cd:81:de:00:6c:e3:72: 7c:30:d9:66:79:37:53:f3:ac:56:b0:48:58:c1:8d: d0:2f:b9:55:8d:9b:b8:6f:cd:29:4e:67:77:3c:5c: 1e:c1:92:5d:7a:5f:1f:a0:78:eb:8c:4e:d6:7f:1a: 3b:6e:5e:c2:9f:eb:66:2d:1a:b1:3e:0c:dd:29:51: e6:c2:84:4c:cf:ec:9a:70:4b:af:53:1a:7d:71:d4: 3d:6e:cd:73:63:22:a8:a2:24:41:33:4b:64:44:f4: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0D:67:C1:CE:AA:03:F5:C9:85:9D:18:69:65:3C:4D:4E:31:FC:BB X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:14:34:0d:63:67:57:46:95:76:8b:1e:e2:66:e0:ac:5b:a0: 7d:97:1b:a0:77:df:89:e4:7b:10:d5:59:ae:83:71:74:e6:b9: d1:c0:df:6b:7c:a6:02:e4:65:dc:44:85:4d:ee:85:e2:72:b5: 8f:a8:fa:f3:4e:ca:60:cd:85:07:eb:3b:81:f8:25:5a:82:59: 7d:43:d1:68:7a:47:07:43:00:59:2c:14:5d:ac:37:60:ed:53: 75:7a:6d:49:79:45:c8:75:4b:85:5f:f7:c4:17:c2:22:25:a5: ae:aa:aa:3e:e7:b9:ae:25:a3:0e:c1:b0:b2:94:18:95:1c:3b: 4c:9b:c9:ba:45:70:a2:0a:5e:4b:0f:c6:f7:88:98:f6:4f:9d: 6c:e9:6f:1b:3e:7e:18:fe:dc:95:10:f0:12:4f:ce:50:13:7b: ef:d4:f9:fd:90:84:2c:42:ed:fd:88:c2:9c:67:b1:a6:c8:40: bf:09:dd:70:77:d8:49:b0:37:14:03:31:02:91:26:9f:d1:6f: 14:01:c4:55:b7:2c:49:54:77:28:6f:4a:9d:30:cc:78:e7:e4: 20:50:23:bf:c3:6f:7d:04:0e:1d:04:a6:3b:4c:7c:d6:3f:9c: 91:09:97:e8:14:60:af:64:c6:7c:d0:a5:c1:5c:80:b0:8f:54: d5:b7:90:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUxMjA2MTkyNzU4WhcNMjUxMjEzMTkyNzU4WjAYMRYwFAYD VQQDEw02OTM0ODNiZi1lYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAatSNS4k2+L3E1kxyT0mOQeNNKARJR7JqkSvxBh6g/qRzKmGF/S0xkuZmHW wuHdBtPKIx2V523ypJ+wkGHYWEj4K378vt0KqmaTiQnBLJXlUjRih6r9Ui4AwR7y IlY0V4Qh4qNWnR9jtoRymXnop0NnyqW/zc1ewQoGU1l/YoLZXvvQYEKAE4JbwH3t WxBbsnDwVhpRu4ZeoGxTY82B3gBs43J8MNlmeTdT86xWsEhYwY3QL7lVjZu4b80p Tmd3PFwewZJdel8foHjrjE7Wfxo7bl7Cn+tmLRqxPgzdKVHmwoRMz+yacEuvUxp9 cdQ9bs1zYyKooiRBM0tkRPS0RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4NZ8HO qgP1yYWdGGllPE1OMfy7MB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuFDQNY2dXRpV2ix7iZuCsW6B9lxugd9+J5HsQ1Vmug3F05rnRwN9r fKYC5GXcRIVN7oXicrWPqPrzTspgzYUH6zuB+CVagll9Q9FoekcHQwBZLBRdrDdg 7VN1em1JeUXIdUuFX/fEF8IiJaWuqqo+57muJaMOwbCylBiVHDtMm8m6RXCiCl5L D8b3iJj2T51s6W8bPn4Y/tyVEPAST85QE3vv1Pn9kIQsQu39iMKcZ7GmyEC/Cd1w d9hJsDcUAzECkSaf0W8UAcRVtyxJVHcob0qdMMx45+QgUCO/w299BA4dBKY7THzW P5yRCZfoFGCvZMZ80KXBXICwj1TVt5Bx -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:50 2025 by rpki-client