This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: Eu9uhTOOq8XIw3sjViKJjJp0ziRUWEbR5iJujfuF1x0= Subject key identifier: 3B:E5:A7:85:EC:D9:28:EE:56:DF:53:C8:A9:2A:1D:0B:AA:60:BA:8B Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 5A Signing time: Wed 03 Dec 2025 05:28:31 +0000 Manifest this update: Wed 03 Dec 2025 05:28:31 +0000 Manifest next update: Wed 10 Dec 2025 05:28:31 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: iiZpV4fWdPaFtWIOxlS8DEP2a+f3qopoRD05L8MAhOg=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: PluL4u9/W0M7wPOfAaOa3JDqqwKeth4r4yq9LLQTP5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Dec 3 05:28:31 2025 GMT Not After : Dec 10 05:28:31 2025 GMT Subject: CN=692fca7f-165f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:2a:f2:8e:1b:03:ae:4d:ad:52:5a:72:57: 60:76:71:84:35:49:64:46:e9:6b:b9:1b:09:9c:42: 24:84:4d:4a:c7:7a:25:40:fd:c6:9d:cb:1c:39:40: 5c:0b:53:9d:e4:88:3c:cb:ba:3c:5b:16:a1:0f:e7: 31:02:12:88:89:0a:8a:bb:fd:a2:51:8f:f0:10:6d: d6:0e:3f:73:61:27:5c:b8:37:27:69:4d:54:f7:f7: 69:8c:c2:33:40:bd:a4:70:43:2c:f9:8a:9b:bf:f9: c8:8f:92:06:ea:3f:5b:33:78:f5:cb:dc:66:83:73: 06:8e:4b:cb:78:72:f5:fa:05:a3:ed:3f:ac:03:d0: 32:2b:7b:bd:e5:7e:71:3d:07:c3:8f:61:54:8f:ad: 50:89:66:32:40:0c:73:56:f6:68:f3:aa:51:e5:98: 36:27:e5:a8:69:46:2d:dc:58:b7:e5:63:26:99:67: 1e:6f:8d:aa:cc:2d:a6:06:28:27:0d:9d:51:60:8d: bd:39:59:bd:a2:c8:dc:35:52:c6:dc:0a:f3:56:b5: 4f:c4:a5:fc:3a:5f:87:27:68:2d:02:00:a8:71:c1: 47:3d:73:38:04:fa:0a:79:a9:6c:25:b9:0e:7a:a8: 9a:4c:fc:e1:da:39:02:01:61:3e:89:41:5d:2e:ba: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:A7:85:EC:D9:28:EE:56:DF:53:C8:A9:2A:1D:0B:AA:60:BA:8B X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:04:3d:06:f7:94:7d:f2:f1:e3:49:ef:61:00:a5:99:ae:df: 23:03:af:88:c3:e7:a9:6d:5c:e5:cb:9b:66:d5:2f:2b:75:25: 4b:07:2c:e3:b7:24:ba:eb:bf:ec:13:82:ae:13:30:1c:76:39: 38:98:13:e3:5f:30:7a:2b:14:84:73:3f:78:c6:86:40:ee:ea: 44:fe:37:10:e8:95:a1:cd:f9:0d:96:dc:2a:0d:11:07:2e:f2: 9e:7e:ce:0e:f6:27:01:48:bb:41:27:94:f0:7b:b4:03:c9:d7: 30:c5:66:06:18:a9:62:44:90:83:76:63:b3:fa:e4:10:e3:4f: f3:57:01:b6:c6:10:5c:c7:66:f3:9d:54:dd:ff:46:86:cd:4b: 60:9f:cb:65:bd:93:d9:e3:53:f4:47:b2:54:88:51:db:ef:7d: f5:b9:e0:36:8d:16:94:5e:22:9c:29:c4:ce:8d:e3:b6:a7:c2: 0c:20:2f:c0:a5:d5:82:e4:2c:fd:a9:4e:3f:84:22:3d:9b:95: f9:b6:60:45:cd:d1:e4:e5:a6:ce:f3:5e:5a:05:61:37:fb:0b: fd:37:dd:e7:2b:69:8f:ab:52:6d:12:ea:a5:0e:c4:2a:33:9e: 03:fa:a4:0f:63:f9:eb:ec:24:2a:34:b8:11:82:22:12:9b:42: be:eb:9a:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoMEY5MTRBMURDOTRGNUJFNDJFODgzQzJBREQ1NDMwQkNE RjZERjMzNDAeFw0yNTEyMDMwNTI4MzFaFw0yNTEyMTAwNTI4MzFaMBgxFjAUBgNV BAMTDTY5MmZjYTdmLTE2NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcnCryjhsDrk2tUlpyV2B2cYQ1SWRG6Wu5GwmcQiSETUrHeiVA/cadyxw5QFwL U53kiDzLujxbFqEP5zECEoiJCoq7/aJRj/AQbdYOP3NhJ1y4NydpTVT392mMwjNA vaRwQyz5ipu/+ciPkgbqP1szePXL3GaDcwaOS8t4cvX6BaPtP6wD0DIre73lfnE9 B8OPYVSPrVCJZjJADHNW9mjzqlHlmDYn5ahpRi3cWLflYyaZZx5vjarMLaYGKCcN nVFgjb05Wb2iyNw1UsbcCvNWtU/Epfw6X4cnaC0CAKhxwUc9czgE+gp5qWwluQ56 qJpM/OHaOQIBYT6JQV0uutD7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO+WnhezZ KO5W31PIqSodC6pguoswHwYDVR0jBBgwFoAUD5FKHclPW+QuiDwq3VQwvN9t8zQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzBGNDNFQzNDNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDVGS0hjbFBXLVF1aUR3cTNWUXd2Tjl0OHpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzBGNDNFQzNDNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1R dWlEd3EzVlF3dk45dDh6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwEPQb3lH3y8eNJ72EApZmu3yMDr4jD56ltXOXLm2bVLyt1JUsHLOO3 JLrrv+wTgq4TMBx2OTiYE+NfMHorFIRzP3jGhkDu6kT+NxDolaHN+Q2W3CoNEQcu 8p5+zg72JwFIu0EnlPB7tAPJ1zDFZgYYqWJEkIN2Y7P65BDjT/NXAbbGEFzHZvOd VN3/RobNS2Cfy2W9k9njU/RHslSIUdvvffW54DaNFpReIpwpxM6N47anwgwgL8Cl 1YLkLP2pTj+EIj2blfm2YEXN0eTlps7zXloFYTf7C/033ecraY+rUm0S6qUOxCoz ngP6pA9j+evsJCo0uBGCIhKbQr7rmtg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:20 2025 by rpki-client