This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: tDF9KXKlMmFb44FdwL5T4UtteAH5t8fBcht9FiS4kus= Subject key identifier: 0A:11:EA:E9:F8:99:10:25:C0:68:C3:62:E8:2B:3E:89:8D:F6:98:FD Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 01C0 Signing time: Fri 05 Dec 2025 01:22:00 +0000 Manifest this update: Fri 05 Dec 2025 01:22:00 +0000 Manifest next update: Fri 12 Dec 2025 01:22:00 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: +DgDoAJO8lMR5QlfUwlyYRGfTHgUyl/d4gYPXJQUGQg=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Dec 5 01:22:00 2025 GMT Not After : Dec 12 01:22:00 2025 GMT Subject: CN=693233b8-fd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:67:97:82:be:f4:3f:63:4f:87:c3:1b:29: dd:e3:34:c3:eb:37:5b:99:e4:41:37:9d:ab:0f:50: 5e:68:10:da:71:ae:14:51:fc:d2:e5:38:2a:48:0c: fb:fd:49:cf:f8:e2:1e:17:98:5d:8c:4e:1c:64:15: a5:9e:5c:82:8c:00:91:3e:6a:52:48:77:21:39:a7: f7:1b:20:1f:13:e3:30:2d:4d:b4:4a:4b:76:a2:e6: 58:6d:dd:57:87:5b:9a:0b:14:0c:cd:bf:95:be:cb: f6:f2:13:c3:b8:7f:ab:d0:53:31:2f:58:31:85:9b: 7e:d5:2e:e7:6f:7e:3c:a9:08:80:79:42:bd:33:18: 2d:e5:d3:6f:45:d0:64:8d:14:5a:18:96:b4:7a:33: c1:bc:fe:cc:07:f8:2d:95:9a:c2:08:c2:8b:8d:b4: 94:f9:bd:68:f3:93:d0:0b:04:97:05:70:e4:48:42: 9d:5b:93:0f:09:3d:2a:e3:e0:7c:1c:c8:dc:99:d9: 14:71:3b:a3:8a:0c:46:05:f4:fa:50:fc:fa:0c:b5: 0a:2c:e7:0a:28:18:d9:db:fe:8f:6c:56:e8:eb:3f: 08:db:6c:d0:1f:ea:57:d2:52:b6:55:71:b8:f7:e8: 35:92:40:e9:f2:79:30:a1:7c:15:9d:5a:3b:1a:5b: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:EA:E9:F8:99:10:25:C0:68:C3:62:E8:2B:3E:89:8D:F6:98:FD X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6a:8d:d0:79:8f:47:e0:28:b4:53:87:79:84:b6:73:05:ac: 36:89:25:06:8c:03:d0:51:8e:bd:2e:cf:47:cf:1e:0e:c1:85: 9e:0f:87:0b:d9:d2:c7:c4:e1:22:cc:a3:0e:80:ce:49:bf:58: 48:c1:83:89:b3:75:ec:f8:cc:a9:93:c0:95:06:f5:32:f4:49: 12:bf:6b:b6:83:78:0c:fa:44:4b:60:76:a9:c1:60:cd:b8:e8: c0:35:d2:7d:6e:bd:f7:9f:19:1b:89:0b:bb:06:91:ab:fe:22: c4:0b:a6:82:70:b9:2e:ab:8b:63:33:9e:39:29:b9:69:61:4a: 5c:c8:78:1e:9a:a8:4b:e5:e5:0d:4c:d2:f5:a2:cf:89:6c:a3: 2b:75:c4:b9:e9:34:28:72:4f:80:dd:f9:1e:c8:84:78:a2:75: 0e:4e:f7:e8:a6:5d:bb:a9:8a:96:34:f0:9a:4c:d8:46:16:22: d2:0b:aa:1f:0f:ad:16:a9:70:43:ca:96:a8:41:04:eb:87:06: 30:b0:e5:85:7a:b2:25:98:8b:6b:e0:6e:a4:e2:6a:57:12:e3: 0d:c2:00:f6:f1:51:9f:f5:54:ad:5d:22:00:49:11:13:3b:5d: c7:2c:7d:4f:46:c6:05:ae:08:7c:86:9c:86:69:61:20:f9:77: c5:8c:ea:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUxMjA1MDEyMjAwWhcNMjUxMjEyMDEyMjAwWjAYMRYwFAYD VQQDEw02OTMyMzNiOC1mZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2Fnl4K+9D9jT4fDGynd4zTD6zdbmeRBN52rD1BeaBDaca4UUfzS5TgqSAz7 /UnP+OIeF5hdjE4cZBWlnlyCjACRPmpSSHchOaf3GyAfE+MwLU20Skt2ouZYbd1X h1uaCxQMzb+Vvsv28hPDuH+r0FMxL1gxhZt+1S7nb348qQiAeUK9Mxgt5dNvRdBk jRRaGJa0ejPBvP7MB/gtlZrCCMKLjbSU+b1o85PQCwSXBXDkSEKdW5MPCT0q4+B8 HMjcmdkUcTujigxGBfT6UPz6DLUKLOcKKBjZ2/6PbFbo6z8I22zQH+pX0lK2VXG4 9+g1kkDp8nkwoXwVnVo7GlsryQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoR6un4 mRAlwGjDYugrPomN9pj9MB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ao3QeY9H4Ci0U4d5hLZzBaw2iSUGjAPQUY69Ls9Hzx4OwYWeD4cL 2dLHxOEizKMOgM5Jv1hIwYOJs3Xs+Mypk8CVBvUy9EkSv2u2g3gM+kRLYHapwWDN uOjANdJ9br33nxkbiQu7BpGr/iLEC6aCcLkuq4tjM545KblpYUpcyHgemqhL5eUN TNL1os+JbKMrdcS56TQock+A3fkeyIR4onUOTvfopl27qYqWNPCaTNhGFiLSC6of D60WqXBDypaoQQTrhwYwsOWFerIlmItr4G6k4mpXEuMNwgD28VGf9VStXSIASRET O13HLH1PRsYFrgh8hpyGaWEg+XfFjOp/ -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:05 2025 by rpki-client