This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: jekbONpVjC7j5Z14I1m9Osb0RYYhn3ggFx5FQISMsXE= Subject key identifier: C3:D8:06:56:F7:CB:98:C9:AF:13:E0:BD:62:7F:34:6A:1B:6F:2D:E0 Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 01B3 Signing time: Tue 23 Dec 2025 02:08:57 +0000 Manifest this update: Tue 23 Dec 2025 02:08:57 +0000 Manifest next update: Tue 30 Dec 2025 02:08:57 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: 9LlWTdx12FlwnITRZSmHJRU/6wsLRAWzEbxCYpqSjok=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: +ZAU+8WW385rm9bRvwCNNyyrrQtRcVOXdwkDCIZKchs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Dec 23 02:08:57 2025 GMT Not After : Dec 30 02:08:57 2025 GMT Subject: CN=6949f9b9-3097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:06:43:8e:1f:aa:4d:3b:b1:fa:dc:6e:6c: 77:1e:df:17:d7:15:b8:d0:ad:6b:c4:9a:43:fe:ad: a2:17:6c:b2:3f:d8:b8:ea:af:05:dd:d9:59:0b:16: 52:bb:b4:4c:a6:3c:5d:6b:81:a4:fc:78:9a:51:64: 01:7a:65:26:b4:05:03:0a:88:65:f7:de:9d:43:0b: f4:c8:f4:16:2f:c0:f5:f8:27:a6:bd:04:fa:36:6d: e6:98:57:ea:6f:9c:90:b1:f9:fc:bf:36:84:59:bf: 9c:77:35:51:f7:8b:7a:f7:63:c6:cd:a2:f2:ea:e2: bd:a6:f4:0a:2a:df:3b:d8:0b:85:5d:81:ce:ce:50: 36:d5:a8:02:70:48:48:fe:2b:f5:37:2d:6f:5c:c6: cf:31:45:71:64:42:d6:1b:b7:61:87:4b:52:03:87: 80:3d:73:50:db:63:0b:47:21:bf:88:3d:42:26:3b: 8f:ba:d7:3b:0b:cc:0c:09:ed:95:dd:ed:2d:79:4f: 4b:a9:f5:3d:f7:84:62:f3:ca:9c:87:79:ed:ed:57: c1:2c:9e:5d:b3:b2:22:3e:b0:d9:15:28:63:8d:01: 22:34:7e:f5:72:7e:18:e6:5e:3c:9e:51:5c:37:6d: ca:ca:79:19:46:0d:0f:1a:80:eb:39:72:f8:26:01: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D8:06:56:F7:CB:98:C9:AF:13:E0:BD:62:7F:34:6A:1B:6F:2D:E0 X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7f:f0:6b:72:f1:20:5d:ca:42:2a:a9:3b:56:0b:c1:f2:64: cd:25:28:6c:cd:fa:d8:c7:7c:67:76:8b:a8:7c:93:2e:ba:eb: b9:66:4e:7c:87:9f:fb:ff:dc:af:88:25:17:17:44:34:4e:52: 81:77:ed:c0:c7:62:0c:cc:0f:07:61:21:99:79:1e:42:b3:3a: d2:dc:1e:27:83:a6:bf:6c:bb:8d:ed:eb:c1:2b:d8:f1:ab:b6: 5b:79:88:3b:55:fd:c8:2c:c2:a7:bd:8b:d1:0e:19:a8:69:8f: e3:b6:4d:eb:8f:55:be:b9:c3:da:e1:4c:35:28:2c:9c:85:05: f4:01:8d:86:79:29:a3:68:4e:94:a5:8e:5f:1b:ed:05:27:1b: 90:90:1b:c2:89:6e:1e:23:2e:f8:c8:81:40:94:ce:ac:62:f9: 04:cf:82:98:de:fb:06:0b:c4:cc:eb:f5:b1:a4:75:65:99:83: ea:90:5d:88:91:8e:ef:40:cc:92:20:e6:5b:49:42:55:f3:18: 8c:3d:b3:a8:c5:4c:63:9d:2e:98:0d:99:17:c5:f2:90:81:05: 97:93:d9:77:cb:25:38:d8:b6:08:a4:0c:fd:02:61:0a:9b:7b: 1f:03:7d:31:14:aa:3a:66:a6:4c:ed:f7:54:86:5e:ac:76:70: 3b:fb:4e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUxMjIzMDIwODU3WhcNMjUxMjMwMDIwODU3WjAYMRYwFAYD VQQDDA02OTQ5ZjliOS0zMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv88GQ44fqk07sfrcbmx3Ht8X1xW40K1rxJpD/q2iF2yyP9i46q8F3dlZCxZS u7RMpjxda4Gk/HiaUWQBemUmtAUDCohl996dQwv0yPQWL8D1+CemvQT6Nm3mmFfq b5yQsfn8vzaEWb+cdzVR94t692PGzaLy6uK9pvQKKt872AuFXYHOzlA21agCcEhI /iv1Ny1vXMbPMUVxZELWG7dhh0tSA4eAPXNQ22MLRyG/iD1CJjuPutc7C8wMCe2V 3e0teU9LqfU994Ri88qch3nt7VfBLJ5ds7IiPrDZFShjjQEiNH71cn4Y5l48nlFc N23KynkZRg0PGoDrOXL4JgEX8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPYBlb3 y5jJrxPgvWJ/NGobby3gMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaf/BrcvEgXcpCKqk7VgvB8mTNJShszfrYx3xndouofJMuuuu5Zk58 h5/7/9yviCUXF0Q0TlKBd+3Ax2IMzA8HYSGZeR5CszrS3B4ng6a/bLuN7evBK9jx q7ZbeYg7Vf3ILMKnvYvRDhmoaY/jtk3rj1W+ucPa4Uw1KCychQX0AY2GeSmjaE6U pY5fG+0FJxuQkBvCiW4eIy74yIFAlM6sYvkEz4KY3vsGC8TM6/WxpHVlmYPqkF2I kY7vQMySIOZbSUJV8xiMPbOoxUxjnS6YDZkXxfKQgQWXk9l3yyU42LYIpAz9AmEK m3sfA30xFKo6ZqZM7fdUhl6sdnA7+05d -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:22 2025 by rpki-client