This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: J9HcMP/npt85eb0EO741lTk3O5gu96A8YT9aN5ZSIdc= Subject key identifier: 04:71:E1:72:CD:44:19:F5:D3:E0:F6:6A:F2:E7:1E:54:21:B1:1D:7C Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 087D Signing time: Tue 16 Dec 2025 20:46:23 +0000 Manifest this update: Tue 16 Dec 2025 20:46:23 +0000 Manifest next update: Tue 23 Dec 2025 20:46:23 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: 1ZHUvIK9Y47DNEh9LuuP/3arUbHbg4uS+Vwslc8luDE=) 2: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: 3KAXB0y77UEXT0NSmBqRqJYol3EdpUOQESEbjqAUowo=) 3: 311C494286CC11F09348D16BC4F9AE02.roa (hash: +BsmD54GLCQa0LnHgyrHw492ycZW9i6yM0KqljFRK2Y=) 4: C34D8010A7D311F0A3E6E75EC4F9AE02.roa (hash: E/cmWCt7wJm7XfYKnd6uTnnMTRXprrckSYOl8rNGMiw=) 5: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: D4/4gO/cbJfEP5wlYW+iiyf7YJHeT+1Ir2WyIsZ62e8=) 6: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: /nLaGI3z1xCPylElkOX2xhje5D3mGsOohSwIv2xzDUQ=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: bA19Y+YseTfcXQaXEUZi3q3mODfpiIfKTPYCQNkXISs=) 8: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: VzbPsPGLDl5f/oFOZ9NpXnSyLExyEIRw6V+vhyTevuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Dec 16 20:46:23 2025 GMT Not After : Dec 23 20:46:23 2025 GMT Subject: CN=6941c51f-67e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:8e:17:9d:b1:19:79:1c:d2:f6:f4:4b:07: 7e:fc:d5:04:e7:4b:4c:ac:e3:84:ae:cd:77:66:93: d2:21:bb:21:68:16:22:d5:8c:62:af:90:b4:76:67: e7:e5:75:37:43:81:65:03:a0:9d:be:05:d3:9c:61: ce:ca:57:93:f6:ec:c0:41:8f:d8:d8:94:ef:b5:c0: 3f:49:8b:09:6c:23:b7:e2:cc:ce:9b:ee:95:41:2b: 1a:c9:6e:3c:28:0f:f9:e0:81:36:10:88:20:7b:bd: 7c:7b:48:64:ca:ea:5c:fb:32:96:ab:36:89:a0:19: c3:df:22:55:64:cb:64:89:d4:20:9b:65:72:80:a2: 48:68:2c:ab:ff:5f:e8:37:f3:4f:16:17:b4:36:48: ec:5f:38:fa:f7:d6:e7:60:3d:88:f2:f3:88:da:7d: 51:71:00:19:b4:78:66:b3:c9:b7:e4:cf:f8:4a:21: 0a:ba:53:42:ee:f6:32:3f:68:3a:fd:7f:3a:5f:65: f9:24:db:00:c8:ce:81:b5:5f:6f:35:6d:ef:cf:57: 60:02:ee:5e:2c:0a:d1:f2:41:93:50:7d:a2:dd:db: 44:fd:cc:a1:97:6e:13:45:d7:07:72:c6:ed:eb:c2: 58:91:2a:fd:10:54:6a:28:b7:2a:79:72:76:ec:53: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:E1:72:CD:44:19:F5:D3:E0:F6:6A:F2:E7:1E:54:21:B1:1D:7C X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:29:15:54:1e:7b:01:87:ad:86:bb:d7:87:a7:5a:1a:e3:58: d4:c8:7e:e7:e2:a0:53:66:30:54:d8:e9:9a:bc:05:e3:d6:83: ab:1d:0b:c6:79:9b:76:56:17:cd:79:27:50:c8:5e:3d:9b:ad: 23:64:53:39:ff:ce:87:18:e7:47:fb:9a:c3:0a:9f:46:31:81: 23:43:3b:99:5a:57:06:b7:4f:73:44:a2:7d:8f:54:20:0e:24: aa:44:d2:3b:62:7d:ff:b6:d4:1b:4b:ba:d3:48:93:a6:02:57: 17:8f:a3:d7:2e:96:e4:0a:77:73:1e:ad:49:3d:c1:63:e8:1a: a4:d7:3c:27:9e:95:c3:e2:ff:51:a0:a2:a9:7a:85:96:82:40: 01:9b:94:5a:c5:4d:4f:02:9e:f3:cf:a0:e0:76:3c:9d:ad:27: 45:ea:bc:0c:a4:0f:f1:9d:38:62:e0:94:4e:b4:e3:29:e2:ce: a0:87:a2:78:94:b2:27:63:a0:63:3c:1d:b0:82:8a:63:91:5a: 31:4e:b4:68:44:f5:c3:cb:ff:66:76:9b:58:64:cd:1f:71:3c: 96:96:fa:e1:ef:9c:6e:36:c7:0f:21:f6:31:f2:79:6f:fe:db: 2c:9d:35:c8:1c:31:11:01:2e:a4:b5:0b:b0:00:27:58:fe:35: d1:3f:9f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUxMjE2MjA0NjIzWhcNMjUxMjIzMjA0NjIzWjAYMRYwFAYD VQQDDA02OTQxYzUxZi02N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3WOF52xGXkc0vb0Swd+/NUE50tMrOOErs13ZpPSIbshaBYi1Yxir5C0dmfn 5XU3Q4FlA6CdvgXTnGHOyleT9uzAQY/Y2JTvtcA/SYsJbCO34szOm+6VQSsayW48 KA/54IE2EIgge718e0hkyupc+zKWqzaJoBnD3yJVZMtkidQgm2VygKJIaCyr/1/o N/NPFhe0NkjsXzj699bnYD2I8vOI2n1RcQAZtHhms8m35M/4SiEKulNC7vYyP2g6 /X86X2X5JNsAyM6BtV9vNW3vz1dgAu5eLArR8kGTUH2i3dtE/cyhl24TRdcHcsbt 68JYkSr9EFRqKLcqeXJ27FO4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARx4XLN RBn10+D2avLnHlQhsR18MB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqKRVUHnsBh62Gu9eHp1oa41jUyH7n4qBTZjBU2OmavAXj1oOrHQvG eZt2VhfNeSdQyF49m60jZFM5/86HGOdH+5rDCp9GMYEjQzuZWlcGt09zRKJ9j1Qg DiSqRNI7Yn3/ttQbS7rTSJOmAlcXj6PXLpbkCndzHq1JPcFj6Bqk1zwnnpXD4v9R oKKpeoWWgkABm5RaxU1PAp7zz6DgdjydrSdF6rwMpA/xnThi4JROtOMp4s6gh6J4 lLInY6BjPB2wgopjkVoxTrRoRPXDy/9mdptYZM0fcTyWlvrh75xuNscPIfYx8nlv /tssnTXIHDERAS6ktQuwACdY/jXRP58k -----END CERTIFICATE-----Generated at Wed Dec 17 08:58:23 2025 by rpki-client