This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: KNdfsk7j0buxy58jVSJb1ds+UjwvGOR7eh9BlqJdT7g= Subject key identifier: 0E:B7:A9:05:20:5E:23:BD:E1:B1:20:54:6A:2C:18:83:F1:2F:8F:FC Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 0518 Signing time: Thu 18 Dec 2025 22:58:21 +0000 Manifest this update: Thu 18 Dec 2025 22:58:20 +0000 Manifest next update: Thu 25 Dec 2025 22:58:20 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: KojHdeUWKaaf4p+gFphDfubHQx8sfiKB9arhB4Y88t8=) 2: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) 3: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Dec 18 22:58:20 2025 GMT Not After : Dec 25 22:58:20 2025 GMT Subject: CN=6944870c-ce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:f0:d2:be:87:53:3b:5e:ff:e3:85:9a:bf: 72:64:8a:2b:0b:de:9f:ec:82:60:e1:eb:82:1b:86: 6d:7d:9c:9e:62:bb:73:d3:11:ac:5c:8d:56:f8:45: 2d:99:34:e0:1d:b7:6c:50:87:a0:4e:11:dc:48:2e: 7a:78:8e:4f:2f:bf:cc:83:d4:37:ff:34:37:3e:f0: 04:41:75:9d:a5:96:70:63:ef:74:62:ea:86:d4:92: 06:82:d0:b4:ba:d2:53:5f:32:de:9d:39:73:74:bc: 9b:a0:9e:be:01:11:de:91:26:79:40:96:f1:a3:e8: 9d:a2:be:d8:56:3f:5d:b4:71:97:d4:aa:33:86:09: 27:b2:ec:2e:ea:2a:8d:fb:97:61:bd:28:20:d9:18: 42:99:8a:7e:39:4b:a9:29:36:5e:5e:6b:9a:08:4a: f8:6c:62:59:76:25:99:4f:d1:32:09:4b:ec:3d:be: a5:0f:3a:ca:58:28:c3:0c:cb:d7:d6:62:fd:3a:95: 94:26:a5:ab:32:34:a6:f1:9c:0d:85:45:8a:85:6b: 3b:61:f0:c6:01:27:3a:73:41:f6:62:fc:ce:bb:47: b8:24:f5:f2:6f:ab:c5:b1:6a:3f:d4:7a:63:69:64: ac:57:7a:a2:5d:a0:69:ab:70:77:a9:f8:4e:b2:98: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:A9:05:20:5E:23:BD:E1:B1:20:54:6A:2C:18:83:F1:2F:8F:FC X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:a6:e4:1b:28:de:c6:e5:19:8c:87:42:7b:b3:b9:cf:94: 41:6a:87:dc:f7:76:20:f8:41:45:67:6d:2d:8a:71:73:28:d4: 18:d2:29:85:66:5d:3a:59:90:79:e5:85:24:88:08:53:26:89: ec:75:42:98:32:59:5d:99:60:40:40:d6:21:47:8f:be:5c:fc: 83:cd:f5:81:83:58:6b:56:33:36:ad:17:11:8c:a5:2a:5c:91: c0:b9:9b:e4:b0:d9:81:60:fc:f0:15:4f:40:00:98:f1:42:19: a4:95:71:fb:ae:34:bf:f6:ce:3d:5a:60:b6:32:88:6b:27:e0: 6c:92:1c:89:b3:9d:58:76:c1:cb:85:8e:60:fd:a5:81:c7:ca: 17:6f:4a:9f:8f:db:d9:04:9d:52:4c:c3:01:62:92:1b:0b:c7: ef:f5:c4:43:1d:f8:27:fc:82:ff:51:79:94:66:4a:9a:22:64: 5f:e3:6e:6e:1a:bd:ff:c5:cd:56:e7:7c:fb:c8:d9:b6:db:f8: 26:21:20:db:e2:8c:c2:60:92:7e:bf:c2:43:76:f7:c1:3c:d9: d6:37:51:7c:2c:28:53:22:0e:f6:63:c5:ec:0a:3a:7f:20:ca: cc:9a:46:12:2f:f5:11:03:ea:48:57:d7:d5:54:f2:0a:82:0e: fd:01:63:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUxMjE4MjI1ODIwWhcNMjUxMjI1MjI1ODIwWjAYMRYwFAYD VQQDDA02OTQ0ODcwYy1jZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz3w0r6HUzte/+OFmr9yZIorC96f7IJg4euCG4ZtfZyeYrtz0xGsXI1W+EUt mTTgHbdsUIegThHcSC56eI5PL7/Mg9Q3/zQ3PvAEQXWdpZZwY+90YuqG1JIGgtC0 utJTXzLenTlzdLyboJ6+ARHekSZ5QJbxo+idor7YVj9dtHGX1Kozhgknsuwu6iqN +5dhvSgg2RhCmYp+OUupKTZeXmuaCEr4bGJZdiWZT9EyCUvsPb6lDzrKWCjDDMvX 1mL9OpWUJqWrMjSm8ZwNhUWKhWs7YfDGASc6c0H2YvzOu0e4JPXyb6vFsWo/1Hpj aWSsV3qiXaBpq3B3qfhOspgfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA63qQUg XiO94bEgVGosGIPxL4/8MB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIwKbkGyjexuUZjIdCe7O5z5RBaofc93Yg+EFFZ20tinFzKNQY0imF Zl06WZB55YUkiAhTJonsdUKYMlldmWBAQNYhR4++XPyDzfWBg1hrVjM2rRcRjKUq XJHAuZvksNmBYPzwFU9AAJjxQhmklXH7rjS/9s49WmC2MohrJ+BskhyJs51YdsHL hY5g/aWBx8oXb0qfj9vZBJ1STMMBYpIbC8fv9cRDHfgn/IL/UXmUZkqaImRf425u Gr3/xc1W53z7yNm22/gmISDb4ozCYJJ+v8JDdvfBPNnWN1F8LChTIg72Y8XsCjp/ IMrMmkYSL/URA+pIV9fVVPIKgg79AWOo -----END CERTIFICATE-----Generated at Fri Dec 19 19:25:36 2025 by rpki-client