This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: Mux+edA7wen3+SVyzDwjlL/lOZFXsPCYQSrphRflbSI= Subject key identifier: 1D:2E:4B:AE:08:11:04:87:44:17:15:EC:C0:48:B6:55:2D:7D:3F:CE Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05D2 Signing time: Thu 04 Dec 2025 21:44:51 +0000 Manifest this update: Thu 04 Dec 2025 21:44:51 +0000 Manifest next update: Thu 11 Dec 2025 21:44:51 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: ynhZdrSqUQsWp1G0imKYcNWhjMorPNkgOGri7vYEcQs=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Dec 4 21:44:51 2025 GMT Not After : Dec 11 21:44:51 2025 GMT Subject: CN=693200d3-c666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:ba:66:fe:96:7c:fa:3f:f0:9b:8e:69:fe: a5:3c:73:50:6c:f1:b8:0f:fd:b3:a8:60:bf:62:21: 41:6e:98:9b:63:ac:45:a7:8c:34:ce:52:1e:cf:d5: ac:37:d5:f9:66:2c:05:40:84:e1:8a:a8:a1:9a:1a: 7b:df:df:21:68:9d:53:03:6d:82:42:49:83:38:3e: dc:14:27:03:aa:14:4c:65:34:d9:bc:6c:f5:0f:8d: e7:d8:fe:83:6d:72:ba:d6:6c:df:e6:92:c9:38:34: cc:c2:e4:9d:1c:1a:37:bf:3e:dc:91:46:1b:4f:30: 5c:c9:48:a8:fb:2a:03:29:0d:08:60:b8:95:6f:1a: 8c:ce:e4:0b:b6:5e:de:18:41:5d:03:b2:78:dd:0e: df:70:ca:ed:ea:91:6a:4a:37:65:54:27:ea:1e:96: ec:2a:ee:72:03:ce:ae:95:2d:0f:23:8c:73:de:4f: 5b:02:92:d5:8f:21:13:bc:35:4e:1a:d3:fe:97:d9: d1:98:43:cc:84:24:1f:cd:a2:94:f4:8a:38:2a:5d: 86:d8:4a:00:34:f0:1a:e5:1e:13:67:38:b3:79:9f: 26:81:34:ed:93:5c:3b:e2:3c:8e:69:0f:1e:2d:78: 2c:ad:c2:cc:31:e4:ef:49:d9:10:b7:a9:ab:e0:8f: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2E:4B:AE:08:11:04:87:44:17:15:EC:C0:48:B6:55:2D:7D:3F:CE X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:17:4a:81:7c:fa:f8:86:cb:42:39:10:95:82:af:69:fd:2d: 13:c9:d6:f2:f4:f4:e5:4b:b5:24:c2:26:79:5c:ee:2f:96:39: e8:07:40:1f:99:8a:12:f8:5f:0a:e4:00:fa:93:37:49:9a:fb: 2c:ac:b5:7d:81:f3:38:9e:77:87:c9:22:e2:ca:8f:ba:9a:25: 48:00:04:cc:cb:92:16:6d:7c:b2:bd:d9:bd:ab:f1:aa:97:51: 2b:a3:a0:71:c6:ed:ab:83:d7:12:16:14:2a:ae:a7:4a:71:29: 0d:7a:c1:bc:f7:71:e3:da:53:69:3e:4e:c5:53:ef:bd:d7:46: cd:16:c1:08:2e:e4:1e:de:59:b8:53:8d:b9:e2:f7:dd:79:12: 77:9a:a6:fa:56:38:df:e0:09:b0:7a:2e:ea:9b:c5:3b:66:2a: 30:3d:43:da:c1:bd:48:6a:b6:a1:85:7a:e0:2e:c7:88:5b:55: 33:4d:01:d8:c0:a4:04:41:e8:28:db:da:38:f4:f6:fd:98:3e: 3c:3e:d9:3c:f6:9b:73:29:89:7f:dd:9f:0b:5d:52:e2:86:e5: b8:1d:45:c0:47:7f:48:e3:9b:96:25:d1:88:c2:84:98:94:b7: 5d:60:25:c2:93:3f:53:94:38:63:3c:4a:40:f0:d0:2c:57:dd: eb:91:92:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUxMjA0MjE0NDUxWhcNMjUxMjExMjE0NDUxWjAYMRYwFAYD VQQDEw02OTMyMDBkMy1jNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs926Zv6WfPo/8JuOaf6lPHNQbPG4D/2zqGC/YiFBbpibY6xFp4w0zlIez9Ws N9X5ZiwFQIThiqihmhp7398haJ1TA22CQkmDOD7cFCcDqhRMZTTZvGz1D43n2P6D bXK61mzf5pLJODTMwuSdHBo3vz7ckUYbTzBcyUio+yoDKQ0IYLiVbxqMzuQLtl7e GEFdA7J43Q7fcMrt6pFqSjdlVCfqHpbsKu5yA86ulS0PI4xz3k9bApLVjyETvDVO GtP+l9nRmEPMhCQfzaKU9Io4Kl2G2EoANPAa5R4TZzizeZ8mgTTtk1w74jyOaQ8e LXgsrcLMMeTvSdkQt6mr4I/09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0uS64I EQSHRBcV7MBItlUtfT/OMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtF0qBfPr4hstCORCVgq9p/S0Tydby9PTlS7UkwiZ5XO4vljnoB0Af mYoS+F8K5AD6kzdJmvssrLV9gfM4nneHySLiyo+6miVIAATMy5IWbXyyvdm9q/Gq l1Ero6Bxxu2rg9cSFhQqrqdKcSkNesG893Hj2lNpPk7FU++910bNFsEILuQe3lm4 U4254vfdeRJ3mqb6Vjjf4Amwei7qm8U7ZiowPUPawb1IarahhXrgLseIW1UzTQHY wKQEQego29o49Pb9mD48Ptk89ptzKYl/3Z8LXVLihuW4HUXAR39I45uWJdGIwoSY lLddYCXCkz9TlDhjPEpA8NAsV93rkZKI -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:53 2025 by rpki-client