This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: 2A8uMJ3849DTXjbGyUYh/XeO9H3PPbQB2d/tF1JNVms= Subject key identifier: CB:3A:B0:45:2F:33:03:1C:12:DC:9D:8B:57:E2:A9:AE:CD:BA:33:42 Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 57 Signing time: Sun 21 Dec 2025 06:13:49 +0000 Manifest this update: Sun 21 Dec 2025 06:13:48 +0000 Manifest next update: Sun 28 Dec 2025 06:13:48 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: TKpN8pqDgIvR1gEMxzYaEJGTuSgEItxTkINK9OGzUmE=) 2: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) 3: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Dec 21 06:13:48 2025 GMT Not After : Dec 28 06:13:48 2025 GMT Subject: CN=6947901c-1395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:bd:2e:05:6f:ba:eb:43:15:c6:53:28:9f: 28:85:96:2f:f5:24:11:18:f9:08:5f:86:31:ac:d5: 34:35:b8:d5:b6:2e:62:4b:34:27:62:91:b5:6a:84: f9:f0:f9:d7:fa:68:19:a2:01:8f:d1:00:97:e9:9f: 6c:2b:44:53:6b:18:b5:b4:ce:5e:f9:68:98:d2:79: 33:fd:65:ae:39:37:55:21:55:d9:f0:ed:14:f6:44: e6:5d:21:ce:95:9b:a4:ab:e3:f0:31:d8:c2:c3:1a: 4b:69:41:41:47:fd:5d:03:45:60:9b:87:d4:c8:9a: a1:94:5a:d5:4d:42:30:8a:93:0c:43:ea:0e:e1:92: e6:ea:15:ce:c2:21:cc:fc:6c:61:e1:05:1d:e9:3d: e3:f1:6e:d2:40:17:b0:fd:5c:3c:2a:82:f5:7a:7a: 78:b1:3c:3a:33:76:e6:ae:b0:48:d3:c9:35:8b:32: 00:4f:38:3d:c0:26:47:b8:31:33:06:45:b0:91:ae: d0:8c:7d:92:d2:73:16:20:70:4a:e8:43:2e:4f:88: b1:8a:a9:ec:84:4b:d3:1f:4c:f8:77:bd:64:99:6c: d3:7b:52:cc:e4:c7:44:ba:a3:45:b3:1e:18:9b:d4: 05:6d:32:62:81:02:5b:a2:72:39:3e:9e:65:ea:09: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:B0:45:2F:33:03:1C:12:DC:9D:8B:57:E2:A9:AE:CD:BA:33:42 X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2c:3b:47:60:3f:75:86:c4:b7:e2:1e:56:46:2c:9b:b8:16: 11:cd:60:44:14:06:72:24:ee:fb:7e:7f:37:d9:45:b6:64:c8: 84:87:45:99:e5:9e:a5:ae:2b:c5:ac:a3:ae:7a:01:31:cc:f4: 3a:ca:df:26:3e:f8:cc:57:4a:a2:c1:db:d0:2f:06:54:90:8a: 40:6c:4e:ba:8e:10:25:c8:c1:10:3f:d2:cb:fa:b6:4a:7b:00: ef:69:15:fa:4b:4d:2b:f8:be:ed:2d:dd:bb:f8:c2:a2:ba:17: a6:54:8e:9a:93:ef:e8:13:09:ee:8b:62:40:72:06:a6:a1:c4: 8b:c5:aa:35:ca:92:cb:b2:f1:36:27:59:55:47:62:2e:dd:ee: b8:cb:6c:5b:85:45:23:02:dc:9c:8c:f2:dd:e1:50:e6:9b:73: e0:b2:c7:6e:c2:a0:82:bf:7b:e7:20:5f:f4:9f:83:fb:be:e2: 5b:4e:81:00:78:87:31:86:3c:9a:6e:44:7f:1d:c4:13:ee:c1: 5c:fa:2a:85:d3:00:89:c0:60:5c:c6:4b:d9:ef:cf:15:c4:f1: 22:17:31:ad:ab:0e:a3:0c:75:e0:63:d1:1a:e9:39:c0:e2:a7: e4:8d:16:af:b9:88:08:be:20:55:e0:38:a5:cf:8d:bf:e9:5e: 16:fe:74:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTEyMjEwNjEzNDhaFw0yNTEyMjgwNjEzNDhaMBgxFjAUBgNV BAMMDTY5NDc5MDFjLTEzOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXw70uBW+660MVxlMonyiFli/1JBEY+QhfhjGs1TQ1uNW2LmJLNCdikbVqhPnw +df6aBmiAY/RAJfpn2wrRFNrGLW0zl75aJjSeTP9Za45N1UhVdnw7RT2ROZdIc6V m6Sr4/Ax2MLDGktpQUFH/V0DRWCbh9TImqGUWtVNQjCKkwxD6g7hkubqFc7CIcz8 bGHhBR3pPePxbtJAF7D9XDwqgvV6enixPDozduausEjTyTWLMgBPOD3AJke4MTMG RbCRrtCMfZLScxYgcEroQy5PiLGKqeyES9MfTPh3vWSZbNN7Uszkx0S6o0WzHhib 1AVtMmKBAluicjk+nmXqCd3XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyzqwRS8z AxwS3J2LV+Kprs26M0IwHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcsO0dgP3WGxLfiHlZGLJu4FhHNYEQUBnIk7vt+fzfZRbZkyISHRZnl nqWuK8Wso656ATHM9DrK3yY++MxXSqLB29AvBlSQikBsTrqOECXIwRA/0sv6tkp7 AO9pFfpLTSv4vu0t3bv4wqK6F6ZUjpqT7+gTCe6LYkByBqahxIvFqjXKksuy8TYn WVVHYi7d7rjLbFuFRSMC3JyM8t3hUOabc+Cyx27CoIK/e+cgX/Sfg/u+4ltOgQB4 hzGGPJpuRH8dxBPuwVz6KoXTAInAYFzGS9nvzxXE8SIXMa2rDqMMdeBj0RrpOcDi p+SNFq+5iAi+IFXgOKXPjb/pXhb+dOo= -----END CERTIFICATE-----Generated at Tue Dec 23 03:49:57 2025 by rpki-client