This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: f/r975xFiRSCentf8vCR8EiZ3f7PJ+MZZSDkarFkO2Q= Subject key identifier: A3:F4:40:63:10:67:8B:59:D5:15:9E:17:C6:57:9D:C8:6C:40:B1:3F Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05DA Signing time: Sat 20 Dec 2025 22:20:21 +0000 Manifest this update: Sat 20 Dec 2025 22:20:20 +0000 Manifest next update: Sat 27 Dec 2025 22:20:20 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: H+cTWJZvBa2iSSRUFDr9jAnqCB2USSB6106gN9B6XNY=) 2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) 3: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Dec 20 22:20:20 2025 GMT Not After : Dec 27 22:20:20 2025 GMT Subject: CN=69472124-4ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:12:3e:33:d3:38:7a:55:96:b9:fc:7f:df: 57:1f:a4:90:a9:9b:49:d5:19:b3:86:59:ab:b9:ef: 3d:6b:97:20:be:b5:ce:09:d6:b8:20:9e:14:fa:53: 17:6a:68:29:09:a3:a8:cd:ef:58:fe:49:da:22:42: 1b:2d:21:b8:12:22:4e:cb:4d:45:1b:8b:7f:3d:2e: b2:5e:14:23:08:d6:c8:06:9e:de:90:22:64:3c:3d: 6d:2f:2b:d1:59:d2:b0:83:69:d4:66:43:d6:27:d0: 33:f8:57:31:25:2a:ee:24:3a:5d:b9:8f:2d:32:fd: 8a:73:c5:4a:a5:b6:79:bd:f8:ba:2f:30:68:24:92: 1f:3d:62:b1:4d:00:ec:c8:b7:46:0a:13:7c:45:dc: 86:64:3d:65:e7:12:ac:4b:b7:d8:e9:a9:4a:1e:58: 40:96:74:c8:da:27:0c:84:6b:c8:ac:f8:69:72:ef: 53:50:dd:0d:d1:11:30:e4:a3:fd:54:02:35:b6:35: d2:bf:86:57:a1:96:93:ba:8b:f6:17:b1:c9:4c:f9: 82:96:21:55:f7:b1:3f:95:81:4d:d5:64:84:c6:e7: ae:d9:89:01:4c:e7:49:a5:cd:e6:25:41:5b:39:cd: b3:ec:e7:ed:bc:50:96:90:13:6d:9a:50:2e:98:98: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:40:63:10:67:8B:59:D5:15:9E:17:C6:57:9D:C8:6C:40:B1:3F X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:89:24:44:73:6b:23:ee:e0:2b:d1:e3:6e:a8:79:7d:b5:cc: b3:d3:ed:c5:76:92:a9:d2:6a:2a:d2:6a:29:25:0d:d4:71:e5: 06:0f:1d:ec:a2:e0:da:b2:02:8f:36:80:50:9e:49:f2:f5:81: 79:e5:d8:4e:63:5d:f8:37:98:8b:da:af:97:67:cf:95:8b:c6: 22:c4:a1:37:4e:1c:64:84:ca:f4:6a:9e:bf:5d:98:19:3f:74: 8f:60:98:ba:e6:54:f3:82:b6:cd:a4:c4:c1:3f:7f:e4:81:96: aa:9a:48:0b:45:8a:3a:3d:3a:8d:49:f5:76:03:85:80:30:f9: 1d:e9:d6:6e:5b:1c:83:76:3a:50:4f:ce:ea:0d:7b:bd:8b:19: 41:65:b8:b2:c6:6d:03:c0:25:0f:2f:a6:78:c7:05:0a:ae:2e: 52:b5:23:56:17:d3:6c:c6:a6:29:38:08:37:39:cc:74:a1:0f: 66:48:90:c9:82:a0:21:37:7c:19:d2:47:87:dc:c6:1d:4d:0b: 37:8d:cd:55:ae:60:5c:d2:9e:cc:e2:85:f8:39:5d:58:d9:67: 16:1d:21:2b:db:3a:9b:12:9c:f5:1f:69:94:d9:f0:2a:7e:04: d8:4e:33:02:0a:6b:65:49:3d:5f:76:2b:35:59:61:8e:76:62: 39:e2:c8:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUxMjIwMjIyMDIwWhcNMjUxMjI3MjIyMDIwWjAYMRYwFAYD VQQDDA02OTQ3MjEyNC00YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeMSPjPTOHpVlrn8f99XH6SQqZtJ1Rmzhlmrue89a5cgvrXOCda4IJ4U+lMX amgpCaOoze9Y/knaIkIbLSG4EiJOy01FG4t/PS6yXhQjCNbIBp7ekCJkPD1tLyvR WdKwg2nUZkPWJ9Az+FcxJSruJDpduY8tMv2Kc8VKpbZ5vfi6LzBoJJIfPWKxTQDs yLdGChN8RdyGZD1l5xKsS7fY6alKHlhAlnTI2icMhGvIrPhpcu9TUN0N0REw5KP9 VAI1tjXSv4ZXoZaTuov2F7HJTPmCliFV97E/lYFN1WSExueu2YkBTOdJpc3mJUFb Oc2z7OftvFCWkBNtmlAumJjFNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP0QGMQ Z4tZ1RWeF8ZXnchsQLE/MB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgiSREc2sj7uAr0eNuqHl9tcyz0+3FdpKp0moq0mopJQ3UceUGDx3s ouDasgKPNoBQnkny9YF55dhOY134N5iL2q+XZ8+Vi8YixKE3ThxkhMr0ap6/XZgZ P3SPYJi65lTzgrbNpMTBP3/kgZaqmkgLRYo6PTqNSfV2A4WAMPkd6dZuWxyDdjpQ T87qDXu9ixlBZbiyxm0DwCUPL6Z4xwUKri5StSNWF9NsxqYpOAg3Ocx0oQ9mSJDJ gqAhN3wZ0keH3MYdTQs3jc1VrmBc0p7M4oX4OV1Y2WcWHSEr2zqbEpz1H2mU2fAq fgTYTjMCCmtlST1fdis1WWGOdmI54si5 -----END CERTIFICATE-----Generated at Sun Dec 21 06:57:12 2025 by rpki-client