This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: myzGlks6zsgRQX9KdghM78AT4joSt3mx01im4zAEHwA= Subject key identifier: 9E:FF:C3:C0:63:0D:11:48:04:47:DD:F8:87:2D:09:79:DE:24:36:A6 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 0211 Signing time: Fri 05 Dec 2025 00:37:30 +0000 Manifest this update: Fri 05 Dec 2025 00:37:29 +0000 Manifest next update: Fri 12 Dec 2025 00:37:29 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: HWTJXr6smYLQm71/Z8jGo9X0c8AWbX1jknYU2DBUHmk=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: o9bfnwoCTuetn0SRRGYX4ZpmTSdQG0cya1pWAww3M3c=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Dec 5 00:37:29 2025 GMT Not After : Dec 12 00:37:29 2025 GMT Subject: CN=6932294a-a254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:00:53:69:1a:e8:05:b6:9c:1e:42:2f:ec: cc:5b:50:bd:25:3d:8f:c1:4e:01:9c:88:9e:e7:e3: d0:33:d8:f0:e2:de:bf:d6:48:cd:44:20:fe:17:43: 21:ec:ae:95:56:00:c2:bb:d5:51:77:9b:39:d7:7c: b5:72:fb:58:1a:d7:0b:71:c1:7f:31:cc:e2:79:51: ae:74:f5:78:a2:1d:cc:5b:43:4e:82:e7:2d:8f:86: c3:b1:c7:59:f3:8b:52:58:20:07:33:2a:d5:f3:fd: e8:f1:0d:7e:7d:48:ff:e9:9e:02:18:c4:42:09:a6: aa:51:bf:55:43:69:c7:96:9f:a3:fb:fc:cb:5a:5e: 2d:c4:08:c2:01:2b:6d:92:bb:56:fe:af:a3:ec:7a: df:6c:fa:ee:76:f0:2a:a1:4b:d5:f3:67:6b:db:49: c8:4a:45:c8:bb:d1:1a:ef:05:bd:c7:67:8b:7f:60: 4c:ec:65:0e:c7:5d:f7:32:46:a1:ec:58:82:08:d5: 0c:b6:d4:4e:a9:4e:bd:9f:87:49:98:90:64:6c:ea: 72:e4:5e:90:71:9d:d3:83:f8:f3:4a:b9:88:a9:29: ff:04:94:18:69:1c:b1:0e:cf:1d:84:6f:b6:ec:f5: 07:85:eb:1c:7b:e5:0b:1c:13:dd:d3:d4:eb:b7:aa: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:C3:C0:63:0D:11:48:04:47:DD:F8:87:2D:09:79:DE:24:36:A6 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:29:1e:2d:f0:d0:f7:b2:f7:e5:f4:1f:b4:84:47:37:60:b8: 27:32:1f:c1:0d:f4:4a:c8:75:bb:d6:5b:70:03:4d:f7:c2:2c: 32:2e:c9:fb:a9:b8:98:b1:c6:d1:3a:1c:21:60:89:e0:2f:14: 31:d1:87:a6:ce:fa:38:ed:63:26:61:34:83:54:0b:92:98:bd: 25:c2:d4:ba:7e:7a:bb:c9:cd:7b:1a:63:53:7c:7b:62:80:47: eb:eb:1a:2e:8c:c5:fd:d9:2d:a3:e6:bd:f9:de:7a:dc:24:c5: cd:f8:77:f3:c8:75:24:e6:7e:33:d4:a1:da:ee:16:78:a4:78: 57:07:7e:28:62:84:b6:2d:1d:54:6e:8a:40:15:64:47:f2:70: 62:ca:4d:55:7d:a8:27:33:bb:65:f5:d2:84:6a:61:9f:a2:57: a5:07:7f:06:b4:02:0f:78:59:41:62:aa:4e:9d:bc:73:03:e7: 66:58:90:b6:7a:d1:2c:85:75:87:6b:61:25:3c:58:53:fa:29: 65:05:0d:b8:25:1c:09:7c:b3:43:ad:44:ec:20:ba:d3:d9:2a: c5:61:1a:b3:1a:34:6e:13:30:d7:2c:3e:16:86:e6:68:44:fd: 12:42:85:9b:1f:24:02:d9:7e:59:4f:5e:de:48:f6:06:03:06: 3a:0b:32:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUxMjA1MDAzNzI5WhcNMjUxMjEyMDAzNzI5WjAYMRYwFAYD VQQDEw02OTMyMjk0YS1hMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyecAU2ka6AW2nB5CL+zMW1C9JT2PwU4BnIie5+PQM9jw4t6/1kjNRCD+F0Mh 7K6VVgDCu9VRd5s513y1cvtYGtcLccF/MczieVGudPV4oh3MW0NOguctj4bDscdZ 84tSWCAHMyrV8/3o8Q1+fUj/6Z4CGMRCCaaqUb9VQ2nHlp+j+/zLWl4txAjCAStt krtW/q+j7HrfbPrudvAqoUvV82dr20nISkXIu9Ea7wW9x2eLf2BM7GUOx133Mkah 7FiCCNUMttROqU69n4dJmJBkbOpy5F6QcZ3Tg/jzSrmIqSn/BJQYaRyxDs8dhG+2 7PUHhesce+ULHBPd09Trt6reGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7/w8Bj DRFIBEfd+IctCXneJDamMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKR4t8ND3svfl9B+0hEc3YLgnMh/BDfRKyHW71ltwA033wiwyLsn7 qbiYscbROhwhYIngLxQx0Yemzvo47WMmYTSDVAuSmL0lwtS6fnq7yc17GmNTfHti gEfr6xoujMX92S2j5r353nrcJMXN+HfzyHUk5n4z1KHa7hZ4pHhXB34oYoS2LR1U bopAFWRH8nBiyk1VfagnM7tl9dKEamGfolelB38GtAIPeFlBYqpOnbxzA+dmWJC2 etEshXWHa2ElPFhT+illBQ24JRwJfLNDrUTsILrT2SrFYRqzGjRuEzDXLD4WhuZo RP0SQoWbHyQC2X5ZT17eSPYGAwY6CzIz -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:27 2025 by rpki-client