This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json) Hash identifier: RyAkJsWsGGQ06G688l32SyiO3Ox/lkseb7le8OwmHXU= Subject key identifier: 5D:00:A1:22:27:26:85:B4:F7:F6:B8:74:F2:1E:38:35:02:DF:E2:C1 Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft Manifest number: 0414 Signing time: Thu 04 Dec 2025 22:53:37 +0000 Manifest this update: Thu 04 Dec 2025 22:53:36 +0000 Manifest next update: Thu 11 Dec 2025 22:53:36 +0000 Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: ENQFQNfmF2HdBz43hXytAXMGiTK5XcXKsWenp/NxnVU=) 2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 1kY42j3eWLAd8yp1AvznjQwJBoHaBnQrkaPK6EtSCdQ=) 3: 06820D08961011ECA540626AC4F9AE02.roa (hash: XbxtLk1+2CfWndcMlMOnwCxgbfEchquqUDJGfTWj61E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Dec 4 22:53:36 2025 GMT Not After : Dec 11 22:53:36 2025 GMT Subject: CN=693210f1-363f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cb:92:d5:7c:81:53:2c:5d:fe:4d:d7:0e:aa: 5d:d5:41:15:de:27:bf:b3:a5:e6:85:13:f5:0a:34: 1e:34:6f:95:86:c5:f2:0d:aa:47:fa:1f:b6:68:c6: 4e:1d:ab:b6:97:b3:aa:dd:f2:81:4c:55:7f:13:d8: b1:cb:ae:be:60:dd:8d:a6:02:f7:f9:bb:d0:44:ea: c5:79:78:76:af:b5:d8:a2:21:b3:d4:3d:30:5a:d0: 7d:48:df:50:5f:17:16:20:ae:8f:dd:3e:e2:16:ba: cb:4f:30:a5:c2:f7:7c:bb:54:de:4c:79:19:c8:c0: d1:ae:84:7e:38:27:18:a7:28:36:01:3f:e6:0a:13: 3f:63:f6:35:45:87:e1:63:f1:db:4c:8d:84:c3:2c: 9b:c0:d9:58:b5:36:85:cf:64:c1:f1:22:33:32:5d: 79:87:2f:dd:2f:3f:ea:47:d7:a0:a8:a1:5e:f5:69: 02:b3:f7:28:e7:7b:cc:3d:2e:9e:4b:02:92:e5:6a: 62:bc:66:d3:fb:6a:11:ae:44:34:00:9b:53:fc:34: d8:58:20:1c:a4:ad:49:81:81:20:41:d5:00:39:3b: 2d:dc:14:a9:39:88:bf:ff:02:c0:49:e9:3a:ac:22: 23:1a:bf:8a:1a:9d:7c:f7:51:28:2e:70:cb:55:75: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:00:A1:22:27:26:85:B4:F7:F6:B8:74:F2:1E:38:35:02:DF:E2:C1 X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:cf:af:10:f4:42:bf:2d:eb:1f:ed:5f:06:b2:f1:01:ff:3c: 8c:88:c3:a1:55:52:55:3e:90:03:68:48:1b:83:89:93:a1:aa: d9:82:f6:3a:96:27:d8:92:b0:b4:65:f6:e2:7b:8f:74:c2:08: 99:e5:0c:81:65:73:93:c8:85:38:3f:2a:ef:26:55:f9:b2:3b: 2d:40:c3:f2:f1:e4:9d:43:78:b3:53:eb:d3:c3:39:da:05:8c: 63:0a:d2:3d:62:66:e4:6b:65:46:d6:54:a3:49:06:29:20:e1: 35:90:bd:cb:2e:1d:46:a5:2c:03:4c:80:cb:34:75:d6:12:be: 08:40:a4:c4:e0:c8:df:7b:3a:9d:53:e4:7a:ae:b0:73:35:c1: 2d:4d:c2:4f:24:da:26:23:e1:cc:bb:52:a0:1b:4f:fb:e3:45: 0e:cc:ef:5d:b5:ed:df:7e:05:a5:3c:1e:5e:30:5e:be:ed:27: 48:ba:59:ef:5f:b4:93:df:6f:fd:39:4f:86:fb:60:94:2f:f1: a8:25:18:6f:30:1e:ab:c5:f2:16:a8:77:42:41:81:f6:91:8d: 22:02:a6:c9:8a:6b:e0:05:0a:dc:08:b4:57:ca:ce:b0:c8:a5: 77:ed:02:48:c5:21:15:d3:31:e7:41:ba:ac:c0:5a:00:14:08: e8:cc:fa:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjUxMjA0MjI1MzM2WhcNMjUxMjExMjI1MzM2WjAYMRYwFAYD VQQDEw02OTMyMTBmMS0zNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78uS1XyBUyxd/k3XDqpd1UEV3ie/s6XmhRP1CjQeNG+VhsXyDapH+h+2aMZO Hau2l7Oq3fKBTFV/E9ixy66+YN2NpgL3+bvQROrFeXh2r7XYoiGz1D0wWtB9SN9Q XxcWIK6P3T7iFrrLTzClwvd8u1TeTHkZyMDRroR+OCcYpyg2AT/mChM/Y/Y1RYfh Y/HbTI2EwyybwNlYtTaFz2TB8SIzMl15hy/dLz/qR9egqKFe9WkCs/co53vMPS6e SwKS5WpivGbT+2oRrkQ0AJtT/DTYWCAcpK1JgYEgQdUAOTst3BSpOYi//wLASek6 rCIjGr+KGp1891EoLnDLVXWN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0AoSIn JoW09/a4dPIeODUC3+LBMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z ekczeFpsdnh5SUN2bWJlMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVz68Q9EK/Lesf7V8GsvEB/zyMiMOhVVJVPpADaEgbg4mToarZgvY6 lifYkrC0Zfbie490wgiZ5QyBZXOTyIU4PyrvJlX5sjstQMPy8eSdQ3izU+vTwzna BYxjCtI9Ymbka2VG1lSjSQYpIOE1kL3LLh1GpSwDTIDLNHXWEr4IQKTE4Mjfezqd U+R6rrBzNcEtTcJPJNomI+HMu1KgG0/740UOzO9dte3ffgWlPB5eMF6+7SdIulnv X7ST32/9OU+G+2CUL/GoJRhvMB6rxfIWqHdCQYH2kY0iAqbJimvgBQrcCLRXys6w yKV37QJIxSEV0zHnQbqswFoAFAjozPow -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:25 2025 by rpki-client