This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: z61OBAE/fPOhPTu1VSfXw55bi4qbWwfM+bc0ZysftxE= Subject key identifier: 6C:5B:C2:B7:26:8B:24:DB:AE:BB:E6:EB:3B:0F:61:6C:75:BC:46:BD Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 051C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 051C Signing time: Thu 04 Dec 2025 22:08:17 +0000 Manifest this update: Thu 04 Dec 2025 22:08:17 +0000 Manifest next update: Thu 11 Dec 2025 22:08:17 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: kE2Mso9E0/LcubDQvf3FRS4EcHA6drV3nxmJGz4ulrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Dec 4 22:08:17 2025 GMT Not After : Dec 11 22:08:17 2025 GMT Subject: CN=69320651-ff6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:4d:78:49:3a:4f:4d:f5:8f:da:88:0d:bb: de:36:d8:4c:2f:4f:0c:e2:dd:73:a5:85:0f:28:c7: 70:30:c6:99:12:cf:9c:a2:4c:39:35:33:60:f9:46: 2a:52:23:0b:07:5c:3e:e8:cb:d1:be:53:0d:60:32: ca:4f:bd:d6:99:4d:db:40:34:a4:e3:3b:de:2c:7f: b2:d4:fd:b8:15:73:77:70:53:cc:c4:9b:da:5f:c0: c4:b0:bc:53:7c:f5:87:0b:a8:2a:97:18:ba:2a:ec: 36:b5:a2:97:b0:0f:f6:90:58:41:d1:4a:91:1c:e5: d5:7e:62:d7:0f:d1:25:74:0b:34:f2:4b:9f:38:f4: 6c:ab:c1:c2:6f:32:fe:68:a4:5e:78:56:d6:f0:00: dd:7e:58:cd:07:b8:88:72:32:da:0d:fd:66:b5:5e: ac:76:bc:a9:c3:cf:3e:47:29:97:05:db:8d:dc:13: 60:ca:da:57:e4:e3:a8:52:04:e4:a8:91:3d:7b:2f: 80:f0:58:86:f2:83:32:8d:98:66:5f:ae:39:73:ce: e0:fe:f0:49:04:31:39:12:c2:18:6f:5d:f1:4d:f7: ea:16:46:29:91:fa:fc:4d:53:7f:65:b4:cb:a5:6e: d4:3c:75:3b:fa:1b:77:8a:67:f0:43:b8:b8:8c:80: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5B:C2:B7:26:8B:24:DB:AE:BB:E6:EB:3B:0F:61:6C:75:BC:46:BD X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b2:8f:c6:e8:a8:49:6c:9d:d2:3a:e6:2e:8a:0a:f0:18:ba: d4:7b:e8:cd:24:e2:9e:d1:a5:5a:2c:7f:4d:09:64:85:a2:9b: 36:e8:c5:8c:bc:3b:3d:94:00:4c:c1:7b:46:9f:a7:7e:6e:84: 10:09:64:69:2c:15:40:d0:b8:9a:4e:99:d0:73:53:27:08:8f: 1c:3b:63:d8:41:75:8e:9d:f8:13:1f:2a:6d:1c:99:70:11:fe: 25:b3:0b:69:b8:24:1a:2e:da:cb:7a:77:b1:97:b7:39:b4:e1: 50:d3:1c:75:9e:bc:9f:50:4b:bb:e1:f0:cc:38:db:7c:84:63: e4:d0:de:f5:40:9b:87:a1:b7:88:85:bf:ab:98:81:ac:ed:1b: 84:89:4f:99:a7:f2:46:c1:8f:01:7b:fe:07:31:5d:4f:08:47: fb:c6:fe:5a:13:db:2f:65:41:5c:84:5f:0a:03:2b:a0:b6:45: 28:f3:03:5b:ac:8b:0c:e4:7e:c9:36:cd:0b:56:45:0c:af:bd: f1:fa:4d:e7:27:13:88:9a:ce:d5:1c:91:1b:bd:15:e5:7a:1b: 44:ad:da:6e:a2:a5:ae:5d:26:e2:bf:37:e5:f1:41:70:ae:69: 61:23:13:d9:2c:91:2b:fd:0a:93:73:5d:cf:a5:b0:e6:63:da: c5:f4:e2:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUxMjA0MjIwODE3WhcNMjUxMjExMjIwODE3WjAYMRYwFAYD VQQDEw02OTMyMDY1MS1mZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMdNeEk6T031j9qIDbveNthML08M4t1zpYUPKMdwMMaZEs+cokw5NTNg+UYq UiMLB1w+6MvRvlMNYDLKT73WmU3bQDSk4zveLH+y1P24FXN3cFPMxJvaX8DEsLxT fPWHC6gqlxi6Kuw2taKXsA/2kFhB0UqRHOXVfmLXD9EldAs08kufOPRsq8HCbzL+ aKReeFbW8ADdfljNB7iIcjLaDf1mtV6sdrypw88+RymXBduN3BNgytpX5OOoUgTk qJE9ey+A8FiG8oMyjZhmX645c87g/vBJBDE5EsIYb13xTffqFkYpkfr8TVN/ZbTL pW7UPHU7+ht3imfwQ7i4jID0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxbwrcm iyTbrrvm6zsPYWx1vEa9MB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByso/G6KhJbJ3SOuYuigrwGLrUe+jNJOKe0aVaLH9NCWSFops26MWM vDs9lABMwXtGn6d+boQQCWRpLBVA0LiaTpnQc1MnCI8cO2PYQXWOnfgTHyptHJlw Ef4lswtpuCQaLtrLenexl7c5tOFQ0xx1nryfUEu74fDMONt8hGPk0N71QJuHobeI hb+rmIGs7RuEiU+Zp/JGwY8Be/4HMV1PCEf7xv5aE9svZUFchF8KAyugtkUo8wNb rIsM5H7JNs0LVkUMr73x+k3nJxOIms7VHJEbvRXlehtErdpuoqWuXSbivzfl8UFw rmlhIxPZLJEr/QqTc13PpbDmY9rF9OKq -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:02 2025 by rpki-client