This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: sxUF22Ra7EdCEyQSmeVv3DPpYqDBYXNWrCBas579abU= Subject key identifier: E1:0F:E7:71:29:25:FF:EC:3E:BA:0F:43:C7:8C:E4:2B:E4:52:E5:44 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 03B1 Signing time: Thu 18 Dec 2025 23:57:41 +0000 Manifest this update: Thu 18 Dec 2025 23:57:41 +0000 Manifest next update: Thu 25 Dec 2025 23:57:41 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: rIwgiEGEzB2dUXnvFS3q8b+qewlIR9AHuU+HmU8gg0k=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: OdJBHfeW2Re+5Y2fi/VDd9mvhSQUJ11CYcf0wDjfUuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: Dec 18 23:57:41 2025 GMT Not After : Dec 25 23:57:41 2025 GMT Subject: CN=694494f5-23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:03:2d:1f:2d:fb:63:be:85:88:82:72:84: 1c:23:96:ad:cd:fd:35:6f:f8:d2:63:42:07:13:5f: 84:87:90:ff:f4:f9:a8:9a:ff:0b:5a:c1:51:b0:1b: 53:95:0b:aa:54:1a:21:f6:b4:31:d2:4a:5d:34:57: 00:7b:9a:88:62:9a:d2:09:f5:e3:41:7b:d1:3f:e1: b5:fe:47:af:af:bb:60:14:91:91:63:5d:5a:18:c7: cd:ef:1e:55:fb:26:1c:c9:11:96:fa:de:4a:76:d2: 06:d2:02:dc:71:5a:a6:f8:d2:1a:27:b9:da:60:5c: 74:53:35:7a:7b:30:dd:ba:85:b6:b9:8b:b6:40:b2: 39:e6:0a:fe:98:d2:e9:23:d7:45:fe:41:04:b9:c2: 56:d1:e6:36:05:19:e0:5d:0f:92:fa:df:53:37:bb: 93:98:75:bc:d0:6b:af:46:31:39:0a:b4:3c:a7:3f: dc:d1:c7:de:54:e5:ec:52:31:bc:e4:8c:e9:29:e4: ca:46:4e:24:63:7d:0f:c5:23:08:7b:2c:f4:25:42: 3c:ad:7a:df:54:5e:c9:75:47:b5:4f:1b:87:73:fd: b5:4c:2b:5f:06:c7:ad:6d:fa:89:97:e2:fc:8b:18: a0:a9:74:ad:35:72:e0:f2:e3:49:78:3c:0e:11:e3: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0F:E7:71:29:25:FF:EC:3E:BA:0F:43:C7:8C:E4:2B:E4:52:E5:44 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:37:9b:e1:9b:8d:ea:2e:f2:0d:e5:cf:9f:71:af:7f:4e:01: a4:63:e6:df:ee:df:78:8d:f2:95:fa:10:7e:c3:1f:a7:67:fe: 23:b7:d8:df:01:a3:2c:81:ed:af:8d:bb:e6:6b:99:9c:86:24: 49:50:bf:e0:b4:07:45:40:80:a6:d7:2a:49:9f:75:a9:78:7f: f1:15:a8:76:82:cd:55:cd:ba:0e:f0:99:8b:44:dc:61:e4:21: bb:d6:9a:2e:d3:0b:10:10:02:e9:81:40:97:40:bc:2a:d4:af: 99:d1:79:61:41:36:9b:be:c6:e1:ad:52:32:e4:e3:d4:c5:c5: 62:72:96:a3:0f:d4:b2:6c:fa:c1:96:f0:94:58:46:b4:9f:51: ad:bb:3f:7a:99:15:23:63:69:12:30:7d:06:35:e9:b3:00:1a: e3:d4:2b:50:8d:05:38:00:75:03:54:4d:f3:a2:8f:60:89:10: 4b:25:9e:ce:f9:52:22:61:fe:dc:03:08:44:ec:68:ff:09:99: 6a:a3:63:1f:d8:8b:2b:33:3f:15:8f:ee:87:f1:1d:4c:eb:50: 11:ea:85:b7:76:91:f7:34:f0:a8:9c:2b:61:57:46:a2:23:5b: f5:01:b4:10:1b:8e:1f:eb:3e:2b:cb:b4:f3:d2:58:e0:47:2e: 42:ee:0b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjUxMjE4MjM1NzQxWhcNMjUxMjI1MjM1NzQxWjAYMRYwFAYD VQQDDA02OTQ0OTRmNS0yM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu78DLR8t+2O+hYiCcoQcI5atzf01b/jSY0IHE1+Eh5D/9Pmomv8LWsFRsBtT lQuqVBoh9rQx0kpdNFcAe5qIYprSCfXjQXvRP+G1/kevr7tgFJGRY11aGMfN7x5V +yYcyRGW+t5KdtIG0gLccVqm+NIaJ7naYFx0UzV6ezDduoW2uYu2QLI55gr+mNLp I9dF/kEEucJW0eY2BRngXQ+S+t9TN7uTmHW80GuvRjE5CrQ8pz/c0cfeVOXsUjG8 5IzpKeTKRk4kY30PxSMIeyz0JUI8rXrfVF7JdUe1TxuHc/21TCtfBsetbfqJl+L8 ixigqXStNXLg8uNJeDwOEeN9XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEP53Ep Jf/sProPQ8eM5CvkUuVEMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhN5vhm43qLvIN5c+fca9/TgGkY+bf7t94jfKV+hB+wx+nZ/4jt9jf AaMsge2vjbvma5mchiRJUL/gtAdFQICm1ypJn3WpeH/xFah2gs1VzboO8JmLRNxh 5CG71pou0wsQEALpgUCXQLwq1K+Z0XlhQTabvsbhrVIy5OPUxcVicpajD9SybPrB lvCUWEa0n1Gtuz96mRUjY2kSMH0GNemzABrj1CtQjQU4AHUDVE3zoo9giRBLJZ7O +VIiYf7cAwhE7Gj/CZlqo2Mf2IsrMz8Vj+6H8R1M61AR6oW3dpH3NPConCthV0ai I1v1AbQQG44f6z4ry7Tz0ljgRy5C7gtM -----END CERTIFICATE-----Generated at Fri Dec 19 18:19:45 2025 by rpki-client