This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: 1ySSc26IIAEbxb+DqAN7MmX6yC8BaY3S2+OrAR0CWiw= Subject key identifier: C6:48:82:AA:3C:5A:F1:2E:F4:37:C9:F3:F1:CF:F0:5E:97:62:4F:DE Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 0508 Signing time: Sat 20 Dec 2025 22:55:15 +0000 Manifest this update: Sat 20 Dec 2025 22:55:15 +0000 Manifest next update: Sat 27 Dec 2025 22:55:15 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: FB9A93bK5DsnOODQClRZOz+tFBGvv7tAQI8p6MUKyQk=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Dec 20 22:55:15 2025 GMT Not After : Dec 27 22:55:15 2025 GMT Subject: CN=69472953-10da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:42:a3:6c:8c:56:75:c1:01:f6:d6:27:3f: 8a:fb:d6:a5:5c:e7:c2:ec:35:d9:7b:c6:4e:38:97: 23:50:b1:60:1c:4d:f1:36:b5:36:70:6e:05:1a:ed: 1a:c5:05:ef:cc:bc:27:5a:f1:e8:86:8a:28:80:7e: 4e:d5:b1:84:36:72:e5:46:06:a7:01:ed:12:03:a3: 90:5f:6b:0d:69:86:53:d1:58:70:d7:18:48:8b:03: fa:37:e0:bf:cf:4f:15:98:19:03:70:d3:5a:db:30: bb:e3:80:cd:f2:cf:50:e8:7e:34:23:df:56:ff:cc: ce:70:bd:b9:de:cb:78:bf:39:63:34:79:42:85:6a: a1:c1:d0:bd:b8:4d:42:a2:74:2e:14:1e:eb:2f:c1: 58:98:94:47:e9:be:4c:d8:58:ad:a2:3a:d0:64:09: 5a:e3:fb:24:55:ab:ce:af:68:85:13:97:ea:a7:a1: 32:0b:32:f5:95:d0:65:87:e9:9f:00:e9:02:39:db: 76:e9:03:ba:f7:a5:3f:31:cb:7c:3d:50:6e:83:24: a2:c0:1f:da:15:33:8e:06:a4:6f:a4:14:14:44:d9: 20:45:51:aa:e8:cd:49:bb:f6:86:4d:5d:6e:49:db: 8e:ee:43:69:86:e5:fd:6f:88:17:ad:71:a0:8b:95: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:82:AA:3C:5A:F1:2E:F4:37:C9:F3:F1:CF:F0:5E:97:62:4F:DE X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ab:96:13:aa:1c:de:dc:1b:34:b4:39:56:71:3c:06:93:40: 8a:fa:51:28:f3:0e:1e:a6:e3:d5:e7:5d:0a:77:f2:5d:b9:0a: d9:a1:c8:30:3a:ac:0a:ca:9e:aa:aa:fd:84:eb:50:bf:c9:a1: e2:eb:ee:71:82:5d:42:85:85:74:8f:ee:20:2d:a0:24:c0:a3: 00:fb:26:b7:8f:ec:8d:98:03:95:50:4e:96:23:97:c5:1c:a2: 95:e3:34:05:31:65:84:1a:6a:4e:07:ec:22:66:f9:3d:72:63: 30:0c:fa:06:b9:98:e0:be:ac:56:74:a0:57:e3:44:05:a5:7e: 9c:4f:60:f9:e3:81:54:76:91:6a:80:97:e7:41:24:00:e6:b9: ae:70:50:63:19:1d:6a:27:0e:1c:e2:4a:3b:3f:2c:d6:6c:8f: c9:23:80:c6:11:db:0d:8e:12:fe:df:8e:cb:f8:41:91:72:da: b0:fd:4e:2a:a5:59:42:58:d8:40:80:24:fb:b7:3c:8f:9c:f0: ff:98:68:44:02:f6:be:bd:f1:89:80:4d:3c:b0:e0:2c:60:56: 32:d5:e6:34:07:46:07:54:cc:d3:72:a8:fc:d1:22:5f:65:ae: 1b:26:56:dd:25:90:ec:da:7d:3b:fb:20:5e:7f:08:9b:2a:f1: 43:33:97:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUxMjIwMjI1NTE1WhcNMjUxMjI3MjI1NTE1WjAYMRYwFAYD VQQDDA02OTQ3Mjk1My0xMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviBCo2yMVnXBAfbWJz+K+9alXOfC7DXZe8ZOOJcjULFgHE3xNrU2cG4FGu0a xQXvzLwnWvHohooogH5O1bGENnLlRganAe0SA6OQX2sNaYZT0Vhw1xhIiwP6N+C/ z08VmBkDcNNa2zC744DN8s9Q6H40I99W/8zOcL253st4vzljNHlChWqhwdC9uE1C onQuFB7rL8FYmJRH6b5M2FitojrQZAla4/skVavOr2iFE5fqp6EyCzL1ldBlh+mf AOkCOdt26QO696U/Mct8PVBugySiwB/aFTOOBqRvpBQURNkgRVGq6M1Ju/aGTV1u SduO7kNphuX9b4gXrXGgi5VZqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZIgqo8 WvEu9DfJ8/HP8F6XYk/eMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxq5YTqhze3Bs0tDlWcTwGk0CK+lEo8w4epuPV510Kd/JduQrZocgw OqwKyp6qqv2E61C/yaHi6+5xgl1ChYV0j+4gLaAkwKMA+ya3j+yNmAOVUE6WI5fF HKKV4zQFMWWEGmpOB+wiZvk9cmMwDPoGuZjgvqxWdKBX40QFpX6cT2D544FUdpFq gJfnQSQA5rmucFBjGR1qJw4c4ko7PyzWbI/JI4DGEdsNjhL+347L+EGRctqw/U4q pVlCWNhAgCT7tzyPnPD/mGhEAva+vfGJgE08sOAsYFYy1eY0B0YHVMzTcqj80SJf Za4bJlbdJZDs2n07+yBefwibKvFDM5ea -----END CERTIFICATE-----Generated at Sun Dec 21 21:50:12 2025 by rpki-client