This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: Y5upHuUGvU2vhLWKeOsbUNkKRNSNu1S1PF+wU82bhqI= Subject key identifier: 86:63:58:32:B4:DE:F4:CD:D1:15:31:96:2A:82:37:BE:A8:3E:AE:6C Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: 23 Signing time: Fri 05 Dec 2025 05:34:47 +0000 Manifest this update: Fri 05 Dec 2025 05:34:46 +0000 Manifest next update: Fri 12 Dec 2025 05:34:46 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: gJimcq1DmK8JutLA5//d4hia2bZkGYmi7b21X18qq20=) 2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: ZY5NmPmVYKYD8Ao1eKkQAecn1eXKiXTVvX4cp2N0VAQ=) 3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: qcRG/dop8kZF9v/2SljCJ8so+bQR2vG4pDOzpAMHKg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Dec 5 05:34:46 2025 GMT Not After : Dec 12 05:34:46 2025 GMT Subject: CN=69326ef7-ac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:20:10:e1:6b:54:b2:50:bb:c1:77:75:3d: 56:86:ce:76:96:9a:be:08:9b:a1:8b:99:6a:e9:26: b4:ce:f8:21:e2:0d:ea:26:92:71:e4:9e:d5:09:cd: 87:70:34:ab:ce:7c:b9:6c:a6:b8:5a:14:73:5d:27: d3:d8:67:c6:bc:98:da:61:f2:85:f8:3a:ff:55:b1: 57:d3:0c:91:8f:97:1f:a8:ff:5b:d1:45:73:f5:e1: a2:9b:76:d0:a0:40:50:0d:d0:80:ee:ed:17:ca:50: 0f:4b:3a:3d:51:02:12:1e:32:9d:0d:92:00:9a:d8: cd:6b:7e:68:9e:27:6b:7e:8e:61:46:d2:34:68:a2: e6:ae:ce:df:ec:f6:04:e4:2d:a5:89:5b:5d:92:48: 8b:12:48:b9:f6:1b:94:d3:3b:d1:71:1c:5b:75:0e: 33:c0:e5:f5:2a:dc:c6:4b:13:ea:92:8f:63:53:4f: 51:f8:08:8a:1d:f3:0b:7c:96:4a:ea:c7:ee:fa:fb: 56:18:71:41:a3:b5:e2:16:21:ad:f4:a8:ae:33:f1: 59:56:14:a4:ab:c0:32:cd:8d:60:15:6b:a3:2e:1a: 5e:55:16:40:e8:90:77:72:34:fc:31:dd:8e:37:11: a5:d9:bd:40:d5:c8:4c:98:bb:7c:17:8d:ad:10:ad: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:63:58:32:B4:DE:F4:CD:D1:15:31:96:2A:82:37:BE:A8:3E:AE:6C X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:fa:8d:8d:5c:24:5f:ad:1a:08:93:38:dd:bc:32:17:63:85: 9e:02:db:a2:de:c9:10:1d:99:c3:64:8f:1f:40:39:e1:45:21: 7a:78:84:af:9b:38:e4:ee:e0:5c:90:e9:8a:ce:f7:f7:b8:1e: c4:cc:e9:bd:8a:f1:34:01:73:d0:e5:34:e6:03:30:e7:3f:f9: 77:33:a8:c2:b5:ec:01:d3:50:e5:1b:8e:a4:1a:e6:11:c6:33: bb:5f:65:b1:9e:32:53:82:07:99:bd:39:19:5e:36:97:87:82: cb:9e:7c:de:fb:26:1f:43:57:6c:96:88:3b:96:3f:49:17:d4: f0:b2:c5:6a:dd:7f:d4:df:13:01:cf:47:b3:b6:86:1f:fa:ef: b5:f7:89:fb:71:33:5b:d3:fc:d3:68:15:cc:f0:45:56:59:54: 8e:9a:26:d6:6c:af:d5:00:95:27:1b:c0:7a:6f:ea:d5:6b:87: 1e:d2:73:21:c7:b6:2a:96:a9:fc:59:b8:a8:05:be:0e:7e:62: 77:9c:c0:b0:24:72:f7:c3:77:a7:79:15:5d:d7:83:1a:01:92: d7:14:ae:44:aa:21:ab:50:d0:4e:5e:fc:74:1c:de:32:78:ff: e9:7f:46:79:42:a0:c0:63:f1:78:19:be:3e:4a:24:22:cf:c9: ef:95:55:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRDNTYwMzA1MEYx NERDM0Y0QzAeFw0yNTEyMDUwNTM0NDZaFw0yNTEyMTIwNTM0NDZaMBgxFjAUBgNV BAMTDTY5MzI2ZWY3LWFjODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEmyAQ4WtUslC7wXd1PVaGznaWmr4Im6GLmWrpJrTO+CHiDeomknHkntUJzYdw NKvOfLlsprhaFHNdJ9PYZ8a8mNph8oX4Ov9VsVfTDJGPlx+o/1vRRXP14aKbdtCg QFAN0IDu7RfKUA9LOj1RAhIeMp0NkgCa2M1rfmieJ2t+jmFG0jRoouauzt/s9gTk LaWJW12SSIsSSLn2G5TTO9FxHFt1DjPA5fUq3MZLE+qSj2NTT1H4CIod8wt8lkrq x+76+1YYcUGjteIWIa30qK4z8VlWFKSrwDLNjWAVa6MuGl5VFkDokHdyNPwx3Y43 EaXZvUDVyEyYu3wXja0QrfffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmNYMrTe 9M3RFTGWKoI3vqg+rmwwHwYDVR0jBBgwFoAU5wYBKhBr0JRljmBMVgMFDxTcP0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzJDRDdGRDBFOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Aw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXdZQktoQnIwSlJsam1CTVZnTUZEeFRjUDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NENELzJDRDdGRDBFOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpS bGptQk1WZ01GRHhUY1Awdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACH6jY1cJF+tGgiTON28MhdjhZ4C26LeyRAdmcNkjx9AOeFFIXp4hK+b OOTu4FyQ6YrO9/e4HsTM6b2K8TQBc9DlNOYDMOc/+XczqMK17AHTUOUbjqQa5hHG M7tfZbGeMlOCB5m9ORleNpeHgsuefN77Jh9DV2yWiDuWP0kX1PCyxWrdf9TfEwHP R7O2hh/677X3iftxM1vT/NNoFczwRVZZVI6aJtZsr9UAlScbwHpv6tVrhx7ScyHH tiqWqfxZuKgFvg5+YnecwLAkcvfDd6d5FV3XgxoBktcUrkSqIatQ0E5e/HQc3jJ4 /+l/RnlCoMBj8XgZvj5KJCLPye+VVXY= -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:21 2025 by rpki-client