This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: qm3P23xWI0gGdWaCPY/LAU3509eT6jb3xR0OfsobfCc= Subject key identifier: 5B:23:43:F6:26:49:E7:56:EB:AA:93:09:41:3E:D6:CA:79:0B:E2:60 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 08DB Signing time: Thu 04 Dec 2025 19:35:05 +0000 Manifest this update: Thu 04 Dec 2025 19:35:05 +0000 Manifest next update: Thu 11 Dec 2025 19:35:05 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 05RSeeds+LpEVuDNVyIAEA13c+no8jET4b2fBxUd5ho=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Dec 4 19:35:05 2025 GMT Not After : Dec 11 19:35:05 2025 GMT Subject: CN=6931e269-9e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:62:ab:8c:56:c6:32:31:b2:f6:ad:a6:a0: 96:e5:3e:93:3b:4b:da:6d:a5:8d:a3:ee:dd:eb:08: 86:6b:88:e2:9a:b2:21:ae:0c:cb:b9:d4:36:ed:51: 09:69:3e:82:8c:bc:74:2a:50:da:a2:fe:ac:33:59: 10:8f:20:3b:e6:ff:b0:81:ea:8e:bc:b7:8c:7c:dc: 7e:8e:87:36:be:e7:6c:c0:e6:e6:80:13:6c:b2:a6: 28:de:de:ca:1e:e3:d3:40:1d:ff:53:a0:bb:66:ac: 88:1b:d9:a8:12:35:4e:79:31:8f:db:3f:07:91:1b: a9:47:fe:05:e5:49:77:8c:a1:79:af:45:ad:3f:db: 5f:ad:b2:fd:da:83:05:73:94:9c:6a:86:2e:fb:e1: c2:83:ae:d5:a7:5e:38:27:b4:eb:2b:4e:d7:46:5f: d8:8f:85:ef:e1:4e:3b:30:39:13:59:d3:70:8e:2e: 70:e7:b4:81:9f:f3:cd:f6:8a:fa:db:ce:97:26:1c: f1:f0:4e:5c:15:b0:49:81:d8:6b:85:2a:64:78:90: dd:e9:60:15:32:8e:10:70:96:94:09:6e:3d:c5:f9: 01:a1:95:be:9b:b5:0b:79:8c:c4:b6:db:83:c1:0b: ef:ed:55:2a:cf:b9:f1:3b:12:19:df:61:23:6b:36: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:23:43:F6:26:49:E7:56:EB:AA:93:09:41:3E:D6:CA:79:0B:E2:60 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:bd:50:8b:8b:a5:26:ef:ef:ec:2b:e4:57:7f:6e:42:ab:bb: b7:55:64:1d:e9:95:9e:86:53:a1:14:5a:e7:db:0c:f2:31:de: 0c:39:c3:ab:73:37:92:51:c9:59:29:57:cb:c3:13:b7:bb:44: 2c:bc:05:c6:2a:bd:46:5f:3f:ec:51:60:d4:03:96:45:23:db: 45:b9:7d:b9:89:54:3a:2c:ff:f1:d3:98:79:bd:04:0d:5e:06: b4:9b:44:d9:9b:17:f6:80:85:07:20:79:2c:29:4a:e2:c6:71: 37:51:81:c3:19:b5:f9:81:e4:b2:1e:7e:19:87:5f:b3:96:34: c6:db:71:f4:af:ef:a2:87:41:d9:79:36:5e:a0:4b:5e:2f:d6: 61:4b:32:fb:cd:3d:da:c1:f3:3e:6d:30:b6:60:59:ae:67:ef: 78:32:5a:38:ca:ac:36:7e:41:4b:a1:41:0c:fb:7a:00:5a:55: 09:13:02:e6:ee:03:70:7e:a6:04:87:69:53:b0:bf:8f:0f:3b: 7b:2e:01:2d:0a:6a:bc:44:10:e1:90:b9:02:e8:8e:9e:a2:12: 21:cc:42:61:7d:6e:ef:2d:65:f4:4f:e9:d8:7c:86:46:83:49: 45:51:12:9c:e4:63:58:db:41:b9:0e:3d:ad:ec:d0:58:34:bc: f2:1a:68:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUxMjA0MTkzNTA1WhcNMjUxMjExMTkzNTA1WjAYMRYwFAYD VQQDEw02OTMxZTI2OS05ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuStiq4xWxjIxsvatpqCW5T6TO0vabaWNo+7d6wiGa4jimrIhrgzLudQ27VEJ aT6CjLx0KlDaov6sM1kQjyA75v+wgeqOvLeMfNx+joc2vudswObmgBNssqYo3t7K HuPTQB3/U6C7ZqyIG9moEjVOeTGP2z8HkRupR/4F5Ul3jKF5r0WtP9tfrbL92oMF c5ScaoYu++HCg67Vp144J7TrK07XRl/Yj4Xv4U47MDkTWdNwji5w57SBn/PN9or6 286XJhzx8E5cFbBJgdhrhSpkeJDd6WAVMo4QcJaUCW49xfkBoZW+m7ULeYzEttuD wQvv7VUqz7nxOxIZ32EjazZHWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsjQ/Ym SedW66qTCUE+1sp5C+JgMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnvVCLi6Um7+/sK+RXf25Cq7u3VWQd6ZWehlOhFFrn2wzyMd4MOcOr czeSUclZKVfLwxO3u0QsvAXGKr1GXz/sUWDUA5ZFI9tFuX25iVQ6LP/x05h5vQQN Xga0m0TZmxf2gIUHIHksKUrixnE3UYHDGbX5geSyHn4Zh1+zljTG23H0r++ih0HZ eTZeoEteL9ZhSzL7zT3awfM+bTC2YFmuZ+94Mlo4yqw2fkFLoUEM+3oAWlUJEwLm 7gNwfqYEh2lTsL+PDzt7LgEtCmq8RBDhkLkC6I6eohIhzEJhfW7vLWX0T+nYfIZG g0lFURKc5GNY20G5Dj2t7NBYNLzyGmhU -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:33 2025 by rpki-client