This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft File: 5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json) Hash identifier: xTOYW6gDiL9y2lPXFZprHouDKiSWYbDtDDcQ2YqJFAk= Subject key identifier: EA:F6:2B:90:33:7F:C9:16:D7:67:21:39:53:67:C5:C7:CF:9F:51:88 Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09 Certificate issuer: /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft Manifest number: 23 Signing time: Fri 05 Dec 2025 05:33:21 +0000 Manifest this update: Fri 05 Dec 2025 05:33:21 +0000 Manifest next update: Fri 12 Dec 2025 05:33:20 +0000 Files and hashes: 1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: VXeyZdY6gPyDnrkNcRhW8vKGQ1c1IEeE9OB2XubGOB4=) 2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: JHl7T/hUKLaY1UFwRDqsjEcFvOE7EYojRZktIev0/Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709 Validity Not Before: Dec 5 05:33:21 2025 GMT Not After : Dec 12 05:33:20 2025 GMT Subject: CN=69326ea1-e882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:0a:54:4e:b2:70:f7:0d:bd:07:37:a3:38: bf:2f:87:ad:a9:4f:55:6b:c6:0c:8c:ab:cc:d4:26: ef:1d:0d:b0:59:bb:26:3f:3b:47:c7:c0:7f:e4:37: 9e:45:33:97:a8:1b:3b:da:6b:03:e4:f3:39:34:d6: 8a:ac:44:ef:e9:13:36:9a:c1:8e:e4:12:07:b3:6b: 61:81:3f:77:67:fd:b0:7a:57:7b:9e:bc:9f:fd:55: 4f:5f:9a:04:e0:c5:9c:20:56:73:80:60:46:ba:1e: f0:19:cb:a1:6c:da:87:55:59:47:12:70:c9:59:d0: d0:ac:7d:9f:66:06:54:b5:a7:fd:83:f4:96:43:a6: cc:8f:d8:39:01:37:ea:2c:b1:9e:ed:18:40:88:ef: 1d:51:2d:50:49:24:67:6d:ee:81:2e:df:d0:b7:ea: 38:46:87:d6:01:97:0e:7d:d4:d5:d8:81:6d:f6:20: b3:33:e4:ba:ca:81:99:22:19:7c:0a:71:95:e3:df: ca:64:d8:eb:79:bf:20:79:cd:f1:1b:6d:e3:9a:8f: a3:ea:b1:1d:b6:ca:42:1f:a8:c0:bf:89:90:61:e3: 9a:b3:5b:24:e4:08:bd:cf:02:1e:59:e6:af:ba:b8: 1d:b9:8b:5d:92:db:34:cf:a3:ac:74:b7:10:d2:6b: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F6:2B:90:33:7F:C9:16:D7:67:21:39:53:67:C5:C7:CF:9F:51:88 X509v3 Authority Key Identifier: keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8f:bb:3d:c3:c2:ab:ed:02:fb:d7:0e:96:70:bb:b3:40:f7: c0:47:26:77:4f:93:89:50:06:2d:56:2f:1b:e3:8d:31:bb:13: 49:ab:61:3a:99:6f:42:33:39:95:5b:9d:f0:d4:c2:90:a9:84: d9:bf:45:bc:ff:83:0c:c6:da:da:62:ee:52:c8:4c:86:10:b7: 6a:14:8a:a0:f9:93:6b:63:98:d2:50:2e:b5:c9:ad:e4:24:7f: 86:e5:5a:7c:16:fc:e7:3e:76:64:bb:8d:65:d4:22:07:62:4d: 34:43:a8:0e:38:7c:86:92:3c:73:7e:84:25:53:d7:49:b9:de: 23:77:5c:82:49:dc:b9:a4:11:da:ea:4e:c2:35:15:2f:ef:91: f1:6d:96:8c:b6:57:55:8e:ec:59:a6:9e:20:7b:b7:02:8d:18: a2:85:97:e0:33:6f:28:f4:05:bc:a5:ee:41:88:97:3f:82:8e: 6e:aa:b0:8e:79:1f:9d:00:60:96:28:85:89:45:b8:04:dd:7f: 9e:94:42:ea:e4:98:97:8e:99:3a:2c:28:49:50:1f:3e:15:64: 46:bf:bd:74:83:69:83:03:65:bb:6c:5f:e8:98:ce:e5:f8:bb: 01:0e:fb:32:40:dc:1c:7c:31:c4:83:28:eb:38:ed:03:f5:5f: 30:2c:d0:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzA2MDExMC8GA1UEBRMoRTQ4ODYxQTI2OEEzRTk0RDdCN0U4NEJBNzRFRUFGNDc3 Mjg5NjcwOTAeFw0yNTEyMDUwNTMzMjFaFw0yNTEyMTIwNTMzMjBaMBgxFjAUBgNV BAMTDTY5MzI2ZWExLWU4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6RwpUTrJw9w29BzejOL8vh62pT1VrxgyMq8zUJu8dDbBZuyY/O0fHwH/kN55F M5eoGzvaawPk8zk01oqsRO/pEzaawY7kEgeza2GBP3dn/bB6V3uevJ/9VU9fmgTg xZwgVnOAYEa6HvAZy6Fs2odVWUcScMlZ0NCsfZ9mBlS1p/2D9JZDpsyP2DkBN+os sZ7tGECI7x1RLVBJJGdt7oEu39C36jhGh9YBlw591NXYgW32ILMz5LrKgZkiGXwK cZXj38pk2Ot5vyB5zfEbbeOaj6PqsR22ykIfqMC/iZBh45qzWyTkCL3PAh5Z5q+6 uB25i12S2zTPo6x0txDSa8t1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6vYrkDN/ yRbXZyE5U2fFx8+fUYgwHwYDVR0jBBgwFoAU5Ihhomij6U17foS6dO6vR3KJZwkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDYwL0VGOTQxQTEwOUNF RjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUxN2ZvUzZkTzZ2UjNLSlp3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUloaG9taWo2VTE3Zm9TNmRPNnZSM0tKWndrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz MDYwL0VGOTQxQTEwOUNFRjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUx N2ZvUzZkTzZ2UjNLSlp3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmPuz3DwqvtAvvXDpZwu7NA98BHJndPk4lQBi1WLxvjjTG7E0mrYTqZ b0IzOZVbnfDUwpCphNm/Rbz/gwzG2tpi7lLITIYQt2oUiqD5k2tjmNJQLrXJreQk f4blWnwW/Oc+dmS7jWXUIgdiTTRDqA44fIaSPHN+hCVT10m53iN3XIJJ3LmkEdrq TsI1FS/vkfFtloy2V1WO7FmmniB7twKNGKKFl+Azbyj0Bbyl7kGIlz+Cjm6qsI55 H50AYJYohYlFuATdf56UQurkmJeOmTosKElQHz4VZEa/vXSDaYMDZbtsX+iYzuX4 uwEO+zJA3Bx8McSDKOs47QP1XzAs0JU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:40 2025 by rpki-client