This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json) Hash identifier: pw7ktzB+hryLBbTyPXSna3dpZol4PQPkSPxjQcgms14= Subject key identifier: 36:70:FD:EE:BE:60:2A:4A:A3:5D:B1:24:F0:D6:79:D3:B8:AC:97:09 Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft Manifest number: 06D1 Signing time: Tue 16 Dec 2025 21:35:35 +0000 Manifest this update: Tue 16 Dec 2025 21:35:34 +0000 Manifest next update: Tue 23 Dec 2025 21:35:34 +0000 Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: EE6UojtsTcFINMW+uqjbC5CJqDf3qSZRp5NRJD7hKu0=) 2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: 90VtaliYuYSpWhN/aywXhHAjbblGVidwwylxbvYodJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 21:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC46B, serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Validity Not Before: Dec 16 21:35:34 2025 GMT Not After : Dec 23 21:35:34 2025 GMT Subject: CN=6941d0a7-ec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:85:2c:14:96:72:ed:7e:27:0d:3b:04:43: be:5a:eb:d1:fe:a8:c2:79:6a:9c:02:a3:4a:08:95: 1b:e1:5f:a9:ff:b5:f7:ed:09:79:a4:9c:4a:1a:1e: a6:3f:96:e2:36:df:3c:5a:05:84:ac:e5:79:7e:cb: d3:b2:6d:0a:ce:58:98:22:bf:e0:50:33:bc:97:de: 5f:87:7e:28:7f:1e:72:27:b9:9a:c7:07:6c:2c:bd: b7:29:6f:82:ec:fa:06:9c:47:88:67:e8:62:00:b1: 88:2b:b6:c2:65:b7:79:46:58:ee:17:74:b8:a2:d2: b0:64:c5:60:b4:96:b1:36:a7:7c:6e:cb:f4:e0:a6: 2e:97:82:29:b0:e2:e8:99:b3:c1:30:0e:fd:c8:7a: 2e:70:11:a8:28:e7:75:a5:c6:8f:41:30:a0:67:3d: 75:49:fb:eb:2f:eb:76:c8:5b:9a:16:9f:ba:26:f1: c4:c0:53:f5:a1:ff:e2:14:b6:8a:0f:a2:3b:bf:dd: cb:52:c3:ba:c6:37:dc:10:51:ea:a7:31:ed:37:32: c9:48:99:83:55:b2:77:96:ab:98:91:0e:02:c4:7b: d1:64:ac:f6:6d:0c:07:42:4c:ff:6e:79:0e:c4:e9: 22:8d:20:19:92:58:c1:15:77:65:67:43:f3:79:83: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:70:FD:EE:BE:60:2A:4A:A3:5D:B1:24:F0:D6:79:D3:B8:AC:97:09 X509v3 Authority Key Identifier: keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e8:9f:94:1f:8b:4f:dd:fd:95:93:54:e7:e8:f8:06:f8:96: d4:35:28:df:d7:4c:d4:02:da:cc:f9:48:c5:f4:05:98:0c:c8: be:23:ae:cf:57:f4:02:db:25:6c:e7:87:23:f9:dd:df:99:1b: bf:47:f8:dd:7f:2e:bf:17:86:b2:fa:a8:0d:9c:7e:37:a6:95: c9:e9:79:06:46:5e:e8:60:5e:37:67:45:cf:51:0a:d3:5f:ad: df:90:f8:5d:c1:09:c0:94:4c:8d:00:48:a3:8e:f1:54:e6:43: c5:08:c2:12:bb:f6:6b:db:af:ac:6e:67:a9:0e:0d:b8:ec:eb: b5:6e:a9:cf:fe:70:6c:14:cf:e5:2b:5c:6a:a8:a8:47:39:88: aa:19:cf:1e:6e:b6:0f:6a:3f:d6:e0:fb:ff:74:d4:0f:83:b9: b7:92:33:5d:30:78:90:cf:03:f7:97:52:76:5a:dc:62:51:43: 96:82:2c:0b:f8:1e:7c:b6:2d:b8:83:d6:21:12:6b:a7:25:c5: b0:92:5c:c1:e8:61:30:8e:93:16:44:8a:f5:cc:ee:80:23:7a: f5:2f:b4:ed:c6:1a:f8:7c:71:62:ac:e8:1a:f4:9f:90:7f:73: 1f:bb:a6:e4:75:7d:eb:37:b3:1e:52:7e:27:fb:94:0a:6e:2a: a3:45:73:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1RTdBOTE0N0NF RDMwOUJDMDIwHhcNMjUxMjE2MjEzNTM0WhcNMjUxMjIzMjEzNTM0WjAYMRYwFAYD VQQDDA02OTQxZDBhNy1lYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR2FLBSWcu1+Jw07BEO+WuvR/qjCeWqcAqNKCJUb4V+p/7X37Ql5pJxKGh6m P5biNt88WgWErOV5fsvTsm0KzliYIr/gUDO8l95fh34ofx5yJ7maxwdsLL23KW+C 7PoGnEeIZ+hiALGIK7bCZbd5RljuF3S4otKwZMVgtJaxNqd8bsv04KYul4IpsOLo mbPBMA79yHoucBGoKOd1pcaPQTCgZz11SfvrL+t2yFuaFp+6JvHEwFP1of/iFLaK D6I7v93LUsO6xjfcEFHqpzHtNzLJSJmDVbJ3lquYkQ4CxHvRZKz2bQwHQkz/bnkO xOkijSAZkljBFXdlZ0PzeYPQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZw/e6+ YCpKo12xJPDWedO4rJcJMB8GA1UdIwQYMBaAFOT95NY4XPo6hz7EXnqRR87TCbwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzQ2Qi9GNjg1QkM5QzdG QzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1qcUhQc1JlZXBGSHp0TUp2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVQM2sxamhjLWpxSFBzUmVlcEZIenRNSnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1q cUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn6J+UH4tP3f2Vk1Tn6PgG+JbUNSjf10zUAtrM+UjF9AWYDMi+I67P V/QC2yVs54cj+d3fmRu/R/jdfy6/F4ay+qgNnH43ppXJ6XkGRl7oYF43Z0XPUQrT X63fkPhdwQnAlEyNAEijjvFU5kPFCMISu/Zr26+sbmepDg247Ou1bqnP/nBsFM/l K1xqqKhHOYiqGc8ebrYPaj/W4Pv/dNQPg7m3kjNdMHiQzwP3l1J2WtxiUUOWgiwL +B58ti24g9YhEmunJcWwklzB6GEwjpMWRIr1zO6AI3r1L7Ttxhr4fHFirOga9J+Q f3Mfu6bkdX3rN7MeUn4n+5QKbiqjRXNH -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:44 2025 by rpki-client