This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: dq1tW3mcLJnGyZxOjOw3AgBI/oeJqrtUEtdaBnGtOD4= Subject key identifier: CF:BD:F2:DC:95:54:D2:63:10:B8:FF:51:0C:BB:8C:64:6A:51:2A:0E Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01A0 Signing time: Fri 05 Dec 2025 01:33:04 +0000 Manifest this update: Fri 05 Dec 2025 01:33:04 +0000 Manifest next update: Fri 12 Dec 2025 01:33:04 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: FJgTGFEZcyl/Cz8nm8Nvq5H7m08sk/7juyilpZXYW5U=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Dec 5 01:33:04 2025 GMT Not After : Dec 12 01:33:04 2025 GMT Subject: CN=69323650-16fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:46:51:74:4c:0d:bc:08:1c:d0:62:96:7c: 0c:3b:33:b8:19:d7:98:9d:c9:7e:9f:aa:52:09:40: c5:70:73:a5:e1:54:2c:98:3e:57:11:07:09:89:be: 99:e7:88:e9:89:79:94:08:41:98:17:bf:73:00:3e: 5d:90:e6:7d:f3:2a:5e:13:e1:8c:18:8f:e7:e1:fe: 5a:95:15:4f:42:d6:a4:d0:d1:58:ce:ca:02:df:88: 69:a0:4b:80:74:bd:ab:cb:94:f5:de:5f:73:fc:b0: 6d:ae:7d:11:73:b9:ab:6c:37:87:94:79:0e:dd:48: 76:e3:c8:06:41:95:09:d0:42:6b:03:a8:77:d0:56: 54:1e:ce:81:82:4d:da:f6:24:05:1a:9a:bc:45:39: 8c:e7:25:c2:8d:67:80:e5:49:e3:47:46:07:89:5d: 40:48:94:37:69:8d:82:c6:e4:7b:c0:28:30:72:00: cc:cc:22:24:1b:2b:97:4b:ab:0e:7a:00:6a:5c:da: 28:32:37:b4:a8:af:0a:a6:54:0a:3c:eb:29:2f:d3: 6a:a0:fb:26:d5:fc:7e:69:34:40:4c:1e:f9:00:53: 1a:81:7f:3b:5f:fb:66:0b:43:1f:57:50:6d:f0:46: be:13:d0:7d:90:e8:1c:eb:2e:f2:15:3e:c4:dd:c4: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BD:F2:DC:95:54:D2:63:10:B8:FF:51:0C:BB:8C:64:6A:51:2A:0E X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:96:3a:d8:1d:4f:7e:b6:32:5b:fd:e6:23:f8:a9:9e:a2:46: a9:c4:e6:24:4f:42:ea:06:e2:36:40:76:c5:3d:2e:42:e6:4f: 6d:fe:d0:39:46:98:da:97:62:c0:b8:0d:e5:12:24:e2:66:f2: 26:49:47:f8:07:e9:5f:bd:ed:c6:72:d8:89:ae:61:a1:f5:24: 36:fd:b1:c0:bb:a5:ff:f9:6d:92:5a:29:fe:4b:52:16:3b:e8: 92:87:9b:83:89:83:c0:b8:43:38:d7:cf:f9:e2:f0:83:71:0e: ff:9f:71:2b:9d:4d:fe:25:87:46:9d:3c:6d:29:fd:64:f8:d7: f7:49:11:5b:8a:78:08:74:44:e1:35:3e:5b:2e:9d:2c:54:fe: a9:66:09:f3:60:df:c0:9f:4e:1a:80:1b:c3:a3:03:5b:51:80: ce:34:bd:a5:d0:4a:29:13:76:ea:bf:9f:dd:94:20:6a:a5:f7: 5b:5b:18:5c:c5:fa:2d:6b:a9:ea:ec:34:f5:94:f6:a2:cc:e5: 2b:28:b8:99:59:95:a5:4e:34:55:22:b5:4d:da:bc:3c:32:b8: b6:c3:ff:62:a9:dd:f8:21:20:c2:8c:04:52:e6:e6:78:2e:ff: 53:9e:08:f8:c3:65:b2:95:15:b9:04:8c:36:19:22:92:05:cf: 60:5b:4d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUxMjA1MDEzMzA0WhcNMjUxMjEyMDEzMzA0WjAYMRYwFAYD VQQDEw02OTMyMzY1MC0xNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEZGUXRMDbwIHNBilnwMOzO4GdeYncl+n6pSCUDFcHOl4VQsmD5XEQcJib6Z 54jpiXmUCEGYF79zAD5dkOZ98ypeE+GMGI/n4f5alRVPQtak0NFYzsoC34hpoEuA dL2ry5T13l9z/LBtrn0Rc7mrbDeHlHkO3Uh248gGQZUJ0EJrA6h30FZUHs6Bgk3a 9iQFGpq8RTmM5yXCjWeA5UnjR0YHiV1ASJQ3aY2CxuR7wCgwcgDMzCIkGyuXS6sO egBqXNooMje0qK8KplQKPOspL9NqoPsm1fx+aTRATB75AFMagX87X/tmC0MfV1Bt 8Ea+E9B9kOgc6y7yFT7E3cTn5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+98tyV VNJjELj/UQy7jGRqUSoOMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgljrYHU9+tjJb/eYj+KmeokapxOYkT0LqBuI2QHbFPS5C5k9t/tA5 Rpjal2LAuA3lEiTiZvImSUf4B+lfve3GctiJrmGh9SQ2/bHAu6X/+W2SWin+S1IW O+iSh5uDiYPAuEM418/54vCDcQ7/n3ErnU3+JYdGnTxtKf1k+Nf3SRFbingIdETh NT5bLp0sVP6pZgnzYN/An04agBvDowNbUYDONL2l0EopE3bqv5/dlCBqpfdbWxhc xfota6nq7DT1lPaizOUrKLiZWZWlTjRVIrVN2rw8Mri2w/9iqd34ISDCjARS5uZ4 Lv9Tngj4w2WylRW5BIw2GSKSBc9gW02A -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:18 2025 by rpki-client