This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: sI/onuSYHin6DUUZQHlWrihfB0lUV5AxUc6ZY47Na2k= Subject key identifier: 5B:A4:12:DB:16:E1:28:B5:E6:64:B4:86:90:90:13:87:BB:76:06:39 Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 34ED Signing time: Mon 22 Dec 2025 14:39:19 +0000 Manifest this update: Mon 22 Dec 2025 14:39:18 +0000 Manifest next update: Mon 29 Dec 2025 14:39:18 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: KPZWIaOi3hk8leM6kCrC28trO7QwSeV8yBFT1LABpgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Dec 22 14:39:18 2025 GMT Not After : Dec 29 14:39:18 2025 GMT Subject: CN=69495817-10d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:f4:43:f3:a8:97:1f:99:76:8d:6e:37:65: f1:d3:bc:8b:5c:5c:c0:d2:ae:ab:c0:41:23:9c:11: 4a:4d:14:7e:b4:1e:f2:bb:78:90:de:f9:4d:b4:0a: 61:16:9b:27:ad:cf:12:c5:ed:1a:7c:7c:f1:ae:90: 82:3d:99:8e:c3:03:d5:87:96:b6:8f:1f:9b:ca:f9: ac:76:c0:1b:b8:44:37:76:68:1b:d7:41:68:f7:03: 5c:a0:9b:ef:93:df:dd:ae:28:b9:79:68:6f:d8:9e: 14:4e:06:63:9f:d8:ad:4a:2b:40:2c:74:d8:3c:7b: 9c:d4:fa:71:26:5a:cc:88:dd:d8:6a:63:3d:28:6b: 09:0e:02:68:dc:99:26:8e:93:ad:95:92:9b:93:9d: 0d:bc:b8:2c:3d:9e:fd:5c:bb:ef:c7:ad:b9:45:9e: 15:89:2f:7a:3a:28:53:c9:f1:21:81:18:bf:d2:86: 29:69:81:34:07:82:c6:17:c2:66:0a:82:0c:e5:ce: 5a:87:1f:7d:2a:01:76:f3:e9:3f:f6:64:bd:97:3a: ca:b5:86:f8:fc:f9:98:cd:12:07:10:ac:53:63:44: 84:fa:5d:92:6b:bd:13:61:03:a9:53:e2:b4:1f:9a: f7:5b:86:eb:08:af:6c:8e:7c:8c:c4:a7:65:2d:db: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A4:12:DB:16:E1:28:B5:E6:64:B4:86:90:90:13:87:BB:76:06:39 X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2e:c9:a9:12:4f:4b:73:3a:84:25:24:60:b6:cb:14:a1:ae: 45:5b:41:1a:0a:0b:7f:12:90:e6:67:31:e5:bd:30:2c:19:6d: cd:97:b6:14:a7:ab:e4:da:f4:3d:43:dd:4c:02:b1:e5:31:92: 43:15:ed:6c:60:2c:e6:37:e4:e9:0f:a3:48:82:41:0f:77:ea: 7d:fe:e1:58:a3:9e:e8:dd:ff:15:6b:a0:7f:c8:9d:73:2e:ab: f3:31:e1:77:70:1d:29:e9:57:45:ce:76:50:7d:3c:f6:02:fd: bb:0a:31:eb:32:29:b0:27:d6:eb:2b:cf:ad:ff:7d:f0:1d:cb: 04:1a:85:cf:24:5b:a6:26:a8:e0:10:d7:e7:ee:b1:83:ae:f7: 1a:62:c5:8c:00:63:d9:34:c0:71:40:16:be:92:b0:2a:7b:b9: 18:c9:a7:4c:c6:8a:6e:e8:3a:db:8f:78:6e:c4:c4:c9:9d:a7: de:6b:5e:99:39:89:73:3e:dc:76:6d:b0:e7:12:d2:56:5b:26: 1e:4b:80:a1:85:ca:f4:94:1c:77:77:8a:85:ac:41:e4:f0:fd: 3b:ef:93:23:04:96:54:33:f9:19:87:7d:a3:25:54:a8:bb:ea: 1c:b8:35:8f:71:56:fe:12:02:30:09:19:64:a8:5a:da:a0:ca: 6e:1d:b5:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjUxMjIyMTQzOTE4WhcNMjUxMjI5MTQzOTE4WjAYMRYwFAYD VQQDDA02OTQ5NTgxNy0xMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAheP0Q/Oolx+Zdo1uN2Xx07yLXFzA0q6rwEEjnBFKTRR+tB7yu3iQ3vlNtAph Fpsnrc8Sxe0afHzxrpCCPZmOwwPVh5a2jx+byvmsdsAbuEQ3dmgb10Fo9wNcoJvv k9/drii5eWhv2J4UTgZjn9itSitALHTYPHuc1PpxJlrMiN3YamM9KGsJDgJo3Jkm jpOtlZKbk50NvLgsPZ79XLvvx625RZ4ViS96OihTyfEhgRi/0oYpaYE0B4LGF8Jm CoIM5c5ahx99KgF28+k/9mS9lzrKtYb4/PmYzRIHEKxTY0SE+l2Sa70TYQOpU+K0 H5r3W4brCK9sjnyMxKdlLduGOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFukEtsW 4Si15mS0hpCQE4e7dgY5MB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALLsmpEk9LczqEJSRgtssUoa5FW0EaCgt/EpDmZzHlvTAsGW3Nl7YU p6vk2vQ9Q91MArHlMZJDFe1sYCzmN+TpD6NIgkEPd+p9/uFYo57o3f8Va6B/yJ1z LqvzMeF3cB0p6VdFznZQfTz2Av27CjHrMimwJ9brK8+t/33wHcsEGoXPJFumJqjg ENfn7rGDrvcaYsWMAGPZNMBxQBa+krAqe7kYyadMxopu6Drbj3huxMTJnafea16Z OYlzPtx2bbDnEtJWWyYeS4Chhcr0lBx3d4qFrEHk8P0775MjBJZUM/kZh32jJVSo u+ocuDWPcVb+EgIwCRlkqFraoMpuHbU9 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:33 2025 by rpki-client