This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json) Hash identifier: jXhsFEWHAKRqRX7wt7s+UsIyKCthx3arpdgvD5fi/Bo= Subject key identifier: 07:38:27:24:B0:89:A4:01:DD:24:D8:61:4A:8B:14:85:43:B4:85:DE Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft Manifest number: 06CB Signing time: Thu 04 Dec 2025 20:57:51 +0000 Manifest this update: Thu 04 Dec 2025 20:57:51 +0000 Manifest next update: Thu 11 Dec 2025 20:57:51 +0000 Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: CNv2XrmbsHNkwVtkeaWrpYnh5mrz/M5OnsaIy4m7S14=) 2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: 90VtaliYuYSpWhN/aywXhHAjbblGVidwwylxbvYodJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC46B, serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Validity Not Before: Dec 4 20:57:51 2025 GMT Not After : Dec 11 20:57:51 2025 GMT Subject: CN=6931f5cf-85ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:88:8a:bc:eb:c1:fa:43:9f:f2:95:a8:89: aa:97:fa:2b:d7:d8:3c:e2:f5:68:f8:88:b2:54:82: cf:b5:5a:9d:4d:e9:5e:ce:23:9f:1c:f7:dc:51:64: 1e:e0:12:6c:0f:1b:29:fa:93:e9:6b:e1:63:b8:b9: b0:6c:dd:4b:9f:c9:a9:1f:a1:a9:0b:26:22:ee:dd: b2:72:bb:e6:7a:44:c4:25:7b:28:d1:17:8c:53:ef: a5:36:17:22:4f:53:27:4a:e5:3c:e7:fc:a2:24:fe: 51:2b:cc:c6:05:4c:84:0f:81:6d:9d:2b:7d:66:1e: 89:51:91:9d:df:e7:4d:67:99:66:5b:7b:9d:af:b1: e3:b4:3d:97:5c:25:1c:6c:47:f1:36:37:2b:98:93: 4d:b3:47:55:cb:58:95:b7:a7:9d:e8:08:a9:10:5c: bb:c8:6a:d7:0f:0d:0d:ea:66:3a:8d:1c:9d:96:25: 34:17:01:51:89:b6:e2:8a:c0:18:51:1c:43:da:1c: 35:ff:ea:37:2b:c1:37:78:76:e9:f0:0d:ec:37:5d: d0:ef:a8:34:b9:c1:32:02:71:f5:8c:e9:c1:99:cd: d4:95:84:4f:b6:fa:6c:4f:ef:95:92:dc:17:39:e2: c5:39:15:ec:d5:17:4d:ff:97:e0:1c:b6:b3:65:20: 66:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:27:24:B0:89:A4:01:DD:24:D8:61:4A:8B:14:85:43:B4:85:DE X509v3 Authority Key Identifier: keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:4c:a8:e7:86:88:43:18:4e:c8:bf:2e:3c:79:6c:73:29: 4c:37:89:da:a2:aa:3b:c2:16:82:ce:6d:c1:3d:ea:42:91:61: ae:48:66:ef:4b:19:7b:89:99:55:64:0d:ce:d1:38:03:7c:67: c6:6d:a6:87:34:12:2b:65:2c:7b:1d:5e:e7:7f:ca:ba:b7:5f: c1:bd:43:f1:6c:f7:df:33:c4:ad:ea:54:cf:73:c4:99:d4:f9: bf:54:26:bf:fd:8f:ac:7e:16:62:55:05:ae:8a:a1:e4:42:5b: 2e:58:7e:4a:77:b8:e4:bc:61:af:4e:93:97:d9:0c:28:09:a5: 49:ba:dc:bb:a8:ea:7a:4f:01:ad:a0:95:f0:a0:08:c5:0b:a7: d4:57:dc:41:f3:65:78:07:65:3b:bb:2b:de:d8:7e:f4:5b:f1: d9:5c:5b:72:f8:3a:5c:ee:58:12:99:a1:db:3f:42:d5:7a:29: 58:47:c2:69:58:f3:3b:a0:0e:50:f7:7a:59:60:fe:e0:37:57: a3:14:f6:db:a7:3f:1d:dc:21:97:df:30:4c:05:89:e7:f0:a7: 05:80:f6:1a:88:a6:69:74:be:90:1f:50:3f:42:d9:26:04:b4: e0:fb:eb:5c:2f:3f:2f:22:74:ec:da:c0:2e:6b:0f:6c:e4:6a: 7c:30:40:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1RTdBOTE0N0NF RDMwOUJDMDIwHhcNMjUxMjA0MjA1NzUxWhcNMjUxMjExMjA1NzUxWjAYMRYwFAYD VQQDEw02OTMxZjVjZi04NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZSIirzrwfpDn/KVqImql/or19g84vVo+IiyVILPtVqdTeleziOfHPfcUWQe 4BJsDxsp+pPpa+FjuLmwbN1Ln8mpH6GpCyYi7t2ycrvmekTEJXso0ReMU++lNhci T1MnSuU85/yiJP5RK8zGBUyED4FtnSt9Zh6JUZGd3+dNZ5lmW3udr7HjtD2XXCUc bEfxNjcrmJNNs0dVy1iVt6ed6AipEFy7yGrXDw0N6mY6jRydliU0FwFRibbiisAY URxD2hw1/+o3K8E3eHbp8A3sN13Q76g0ucEyAnH1jOnBmc3UlYRPtvpsT++VktwX OeLFORXs1RdN/5fgHLazZSBm/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc4JySw iaQB3STYYUqLFIVDtIXeMB8GA1UdIwQYMBaAFOT95NY4XPo6hz7EXnqRR87TCbwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzQ2Qi9GNjg1QkM5QzdG QzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1qcUhQc1JlZXBGSHp0TUp2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVQM2sxamhjLWpxSFBzUmVlcEZIenRNSnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1q cUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8NUyo54aIQxhOyL8uPHlscylMN4naoqo7whaCzm3BPepCkWGuSGbv Sxl7iZlVZA3O0TgDfGfGbaaHNBIrZSx7HV7nf8q6t1/BvUPxbPffM8St6lTPc8SZ 1Pm/VCa//Y+sfhZiVQWuiqHkQlsuWH5Kd7jkvGGvTpOX2QwoCaVJuty7qOp6TwGt oJXwoAjFC6fUV9xB82V4B2U7uyve2H70W/HZXFty+Dpc7lgSmaHbP0LVeilYR8Jp WPM7oA5Q93pZYP7gN1ejFPbbpz8d3CGX3zBMBYnn8KcFgPYaiKZpdL6QH1A/Qtkm BLTg++tcLz8vInTs2sAuaw9s5Gp8MEAf -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:45 2025 by rpki-client