This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft File: j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json) Hash identifier: kXY5JnVqA+YEEowLUatQhdLFieICHG+ql/2GhTOgqHI= Subject key identifier: 5A:0A:8B:B6:53:30:30:AA:2A:7D:14:74:AF:AF:F4:A4:7C:DF:26:9D Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft Manifest number: 0293 Signing time: Thu 04 Dec 2025 23:53:25 +0000 Manifest this update: Thu 04 Dec 2025 23:53:25 +0000 Manifest next update: Thu 11 Dec 2025 23:53:25 +0000 Files and hashes: 1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: Inzd/qEz/UnLtSArbKF33yYwDhRuYUkf9RVbEf4CGUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Validity Not Before: Dec 4 23:53:25 2025 GMT Not After : Dec 11 23:53:25 2025 GMT Subject: CN=69321ef5-3953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:a9:17:df:61:5c:6c:d4:2b:69:94:9c:da: dd:65:12:34:29:cb:59:6c:88:96:7c:87:5d:fc:4a: 70:46:ef:fa:9e:fd:24:53:7d:02:1c:13:fe:25:c9: 69:df:57:88:9f:46:5d:b6:69:b0:2f:e5:6e:96:e7: 28:49:be:7c:3a:0c:d3:0b:2f:fa:ae:4e:c6:35:7f: 53:e1:24:ff:e7:29:f7:bb:f9:b2:76:c2:15:da:df: e0:62:1a:60:d9:69:a4:a2:c8:93:1b:a8:78:19:3b: 2e:7f:b8:b6:42:5f:6d:b0:b4:9b:a7:47:0c:33:17: f7:24:be:bf:02:7b:2e:f2:da:49:c3:43:df:8f:fe: 71:68:d6:a3:81:01:a3:bd:c0:9c:82:89:2e:1a:a1: e6:9d:e6:6f:51:54:0b:96:5d:a6:67:86:fd:5b:3d: 0b:5b:ca:8a:2c:02:04:ad:b3:90:d6:69:40:46:97: 54:05:03:91:88:2c:01:cb:bc:ef:b5:25:73:0c:33: 5e:55:06:e6:3f:27:3c:4d:f5:11:76:d4:99:c0:05: d3:d2:07:91:dc:a1:25:1c:ba:e3:82:4e:ec:3f:0a: 7f:87:87:c1:aa:a9:19:e3:28:ec:d3:79:45:bc:1a: 7c:9c:a5:20:de:11:d1:e3:f7:ad:69:af:aa:29:53: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:8B:B6:53:30:30:AA:2A:7D:14:74:AF:AF:F4:A4:7C:DF:26:9D X509v3 Authority Key Identifier: keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:87:ca:5c:78:0c:17:88:6e:f5:86:aa:ac:02:58:0e:e0:bc: b1:0c:7b:bf:0d:0d:c5:00:14:3f:d4:b2:af:c2:8b:68:f0:2d: c3:44:cf:36:a3:c0:48:7e:84:aa:98:6c:6e:3c:9b:3b:4d:bf: 57:5e:4e:a0:70:0a:81:68:3b:a9:f8:c3:d2:06:32:b4:98:5d: ec:28:43:02:61:78:58:61:f7:2f:1b:c6:d3:57:0f:bf:57:a5: 1e:5a:43:ab:b5:c4:d2:3e:98:5a:a5:9b:3b:63:94:92:7f:89: 7d:72:24:40:77:ac:e6:a7:f5:b3:af:ec:7c:5d:b0:2a:5e:1c: 76:73:65:fe:a9:41:98:c6:13:1e:95:b7:f8:18:80:10:05:ad: 07:0c:22:b4:4d:4d:ce:f1:ef:0b:f7:0a:25:92:66:3c:07:90: d7:59:9e:78:98:19:8e:85:21:55:ae:63:6d:e9:6e:9f:a6:5b: bf:f9:e2:cb:e7:d5:24:ad:e0:97:8c:d5:2a:47:4b:95:93:df: e5:84:ee:42:d7:d7:5d:a0:a1:08:24:b1:b0:d6:94:ca:1a:84: d1:2e:91:d1:53:ee:1f:f3:be:fa:40:49:15:8a:34:3d:81:43: a2:d6:31:ff:c9:2e:ce:f3:84:71:ee:ff:99:62:3a:55:68:80: 71:bb:81:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxREUxMTAvBgNVBAUTKDhGOTY3MkFDQUQ5QTUxRjAzRDQ4QkM0M0I2MzNBOTU3 MzQ5OEUzREUwHhcNMjUxMjA0MjM1MzI1WhcNMjUxMjExMjM1MzI1WjAYMRYwFAYD VQQDEw02OTMyMWVmNS0zOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJKpF99hXGzUK2mUnNrdZRI0KctZbIiWfIdd/EpwRu/6nv0kU30CHBP+Jclp 31eIn0ZdtmmwL+VulucoSb58OgzTCy/6rk7GNX9T4ST/5yn3u/mydsIV2t/gYhpg 2WmkosiTG6h4GTsuf7i2Ql9tsLSbp0cMMxf3JL6/Ansu8tpJw0Pfj/5xaNajgQGj vcCcgokuGqHmneZvUVQLll2mZ4b9Wz0LW8qKLAIErbOQ1mlARpdUBQORiCwBy7zv tSVzDDNeVQbmPyc8TfURdtSZwAXT0geR3KElHLrjgk7sPwp/h4fBqqkZ4yjs03lF vBp8nKUg3hHR4/etaa+qKVP2gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoKi7ZT MDCqKn0UdK+v9KR83yadMB8GA1UdIwQYMBaAFI+WcqytmlHwPUi8Q7YzqVc0mOPe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFERS83MzJENjlCNjI3 NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVmQTlTTHhEdGpPcFZ6U1k0 OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1WnlySzJhVWZBOVNMeER0ak9wVnpTWTQ5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFERS83MzJENjlCNjI3NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVm QTlTTHhEdGpPcFZ6U1k0OTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnh8pceAwXiG71hqqsAlgO4LyxDHu/DQ3FABQ/1LKvwoto8C3DRM82 o8BIfoSqmGxuPJs7Tb9XXk6gcAqBaDup+MPSBjK0mF3sKEMCYXhYYfcvG8bTVw+/ V6UeWkOrtcTSPphapZs7Y5SSf4l9ciRAd6zmp/Wzr+x8XbAqXhx2c2X+qUGYxhMe lbf4GIAQBa0HDCK0TU3O8e8L9wolkmY8B5DXWZ54mBmOhSFVrmNt6W6fplu/+eLL 59UkreCXjNUqR0uVk9/lhO5C19ddoKEIJLGw1pTKGoTRLpHRU+4f8776QEkVijQ9 gUOi1jH/yS7O84Rx7v+ZYjpVaIBxu4GL -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:07 2025 by rpki-client