This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json) Hash identifier: lnVZeWhO7LCsRFuovGgfykRf879fERuHyox/x31SH0Q= Subject key identifier: 82:58:F8:05:C4:80:D5:1B:87:67:12:F0:D2:81:1B:59:B2:A8:C5:15 Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft Manifest number: 021A Signing time: Sun 21 Dec 2025 01:25:34 +0000 Manifest this update: Sun 21 Dec 2025 01:25:34 +0000 Manifest next update: Sun 28 Dec 2025 01:25:34 +0000 Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: bJ02C+5D+XsTZrvn/DQdnR0txX6Gyn4dwuJI5VrCNqc=) 2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: 3X8JQRJ56NXF/A25OQxe1Q8xkJiOt4/FMaPtZ+BwKik=) 3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: tZEzhiKfHDteKh17cCbwci/tZYnVymPaW90yd5ZJ1q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Validity Not Before: Dec 21 01:25:34 2025 GMT Not After : Dec 28 01:25:34 2025 GMT Subject: CN=69474c8e-d82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:17:6a:2d:26:3b:95:22:0d:c9:83:ee:53: e2:0a:48:66:dd:f0:e7:21:ef:ae:d2:4f:1f:99:9d: 5c:56:41:0f:a2:ff:98:c3:f5:5b:cf:50:ad:a7:24: 17:0d:15:ec:b0:4b:61:fc:14:bb:2d:2d:fe:22:04: 4f:33:c2:08:15:e0:ce:11:57:67:13:d7:dd:8b:ea: 2a:4d:91:07:b0:14:b5:17:8e:6c:f9:17:d2:ea:0f: ec:e0:16:a1:72:0e:9d:df:31:44:ae:c6:f5:49:25: f0:f2:34:b9:e9:a3:38:d4:d0:6e:b7:ca:52:5d:dd: c9:c6:03:0f:07:69:bf:e1:79:bf:48:6a:84:90:bb: 4e:7d:83:11:09:f9:cb:ad:d5:ae:0f:37:6a:cb:e9: c9:30:3b:bb:b3:9e:be:ef:44:10:1b:0a:85:0e:df: e8:71:5e:d5:c3:75:37:fa:13:1a:0d:85:78:ae:a2: ba:9d:23:60:bc:3f:d1:41:9a:82:24:7d:bf:60:dd: 18:03:4f:a4:60:47:57:a7:61:11:b3:67:81:c7:f1: 6f:d8:00:63:9a:d8:5d:0d:ea:97:50:bd:a4:53:17: 28:4b:1e:26:45:62:a3:77:df:da:5d:e1:c7:de:c6: b7:2a:92:3c:b8:4f:0a:5a:ea:85:39:7b:39:b4:46: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:F8:05:C4:80:D5:1B:87:67:12:F0:D2:81:1B:59:B2:A8:C5:15 X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a6:09:a6:8d:1a:1c:1f:ec:aa:c1:5c:77:55:89:c3:2c:4a: 48:9d:45:18:c8:dc:eb:ec:84:6f:07:2f:5b:98:b2:6a:bd:c2: 40:a6:d8:01:f6:78:ac:f4:43:6d:4f:95:80:2b:12:5b:a1:8c: b2:f3:7e:57:f3:a9:08:3b:d8:41:56:b5:f9:2c:39:1a:9c:24: f2:52:c5:52:14:cf:18:5e:2f:ff:ee:df:f2:91:70:b1:7a:57: 9f:74:52:ee:9e:a1:63:3c:79:67:3b:00:46:4e:86:4e:dd:f8: 89:73:bd:12:9e:8d:1d:6c:e5:1d:8c:93:2f:59:01:d3:2a:0d: ac:92:9c:8b:e5:5c:2b:fb:08:a0:0c:bd:91:15:15:3a:59:44: 36:6f:04:3f:d6:b3:73:20:26:a4:ba:dd:82:52:27:61:98:68: ad:73:78:f9:19:75:fc:f5:2d:b2:b8:74:15:73:fe:42:3a:e9: 3a:69:fb:01:19:f3:cf:f7:f1:0c:97:39:11:53:bc:fa:f3:7a: 46:33:55:06:64:ba:60:2e:2d:52:a7:1c:67:01:1f:df:f8:59: 09:df:d2:ba:4c:cf:d7:c5:e7:e3:82:24:c6:9f:08:b2:70:9c: 87:00:5b:c6:3c:57:04:58:9f:93:0e:ca:33:ec:01:a6:5f:1d: 63:47:5d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjUxMjIxMDEyNTM0WhcNMjUxMjI4MDEyNTM0WjAYMRYwFAYD VQQDDA02OTQ3NGM4ZS1kODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuigXai0mO5UiDcmD7lPiCkhm3fDnIe+u0k8fmZ1cVkEPov+Yw/Vbz1CtpyQX DRXssEth/BS7LS3+IgRPM8IIFeDOEVdnE9fdi+oqTZEHsBS1F45s+RfS6g/s4Bah cg6d3zFErsb1SSXw8jS56aM41NBut8pSXd3JxgMPB2m/4Xm/SGqEkLtOfYMRCfnL rdWuDzdqy+nJMDu7s56+70QQGwqFDt/ocV7Vw3U3+hMaDYV4rqK6nSNgvD/RQZqC JH2/YN0YA0+kYEdXp2ERs2eBx/Fv2ABjmthdDeqXUL2kUxcoSx4mRWKjd9/aXeHH 3sa3KpI8uE8KWuqFOXs5tEZe4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJY+AXE gNUbh2cS8NKBG1myqMUVMB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC bGI2MXpaRDIySG52NlpFS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKpgmmjRocH+yqwVx3VYnDLEpInUUYyNzr7IRvBy9bmLJqvcJAptgB 9nis9ENtT5WAKxJboYyy835X86kIO9hBVrX5LDkanCTyUsVSFM8YXi//7t/ykXCx elefdFLunqFjPHlnOwBGToZO3fiJc70Sno0dbOUdjJMvWQHTKg2skpyL5Vwr+wig DL2RFRU6WUQ2bwQ/1rNzICakut2CUidhmGitc3j5GXX89S2yuHQVc/5COuk6afsB GfPP9/EMlzkRU7z683pGM1UGZLpgLi1SpxxnAR/f+FkJ39K6TM/XxefjgiTGnwiy cJyHAFvGPFcEWJ+TDsoz7AGmXx1jR13a -----END CERTIFICATE-----Generated at Sun Dec 21 21:47:15 2025 by rpki-client