This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: oQRPOu69WypoANp24I3h4wkWcIIQ6vrW73uuHld0ouI= Subject key identifier: 42:24:E5:16:06:39:B6:12:A8:B2:AA:02:CE:64:F3:7B:2C:70:8E:62 Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 01E4 Signing time: Tue 23 Dec 2025 01:50:20 +0000 Manifest this update: Tue 23 Dec 2025 01:50:19 +0000 Manifest next update: Tue 30 Dec 2025 01:50:19 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: YTi3KJfjajcrbA8R7xaH3/cGISJw0/A7x0GZs1Re66Y=) 2: 960C9032C72711F0BD856955C4F9AE02.roa (hash: PfnQedwApVfjJ4O5rlVi1EBEAKOdEI6iu/GpGFC7Hzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Dec 23 01:50:19 2025 GMT Not After : Dec 30 01:50:19 2025 GMT Subject: CN=6949f55b-d203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:1c:00:76:bb:8a:0e:b5:fa:f7:6e:7c:c0: 7d:2e:a4:e1:f5:f3:ce:b1:0c:d2:c8:e6:09:eb:13: 86:e4:04:f7:be:0f:20:30:69:c3:e4:30:66:17:e8: e9:9f:d4:2b:8d:f4:8d:34:62:d9:26:8d:70:b1:90: 6b:00:d0:d5:fd:56:94:ba:35:cd:78:57:1e:1b:06: 19:8d:81:15:68:2e:05:ad:5e:b6:41:64:1d:d2:10: 07:42:92:47:09:68:9c:31:16:0e:04:bd:6d:52:8d: aa:a6:fc:6c:35:a4:46:6a:c3:4b:ef:d5:b1:2c:0f: 05:19:81:49:ef:3c:23:c5:bb:a3:d6:d8:24:30:24: 51:22:5c:53:80:d3:b4:bd:3a:c1:ae:ba:ae:84:82: c8:e6:a8:7d:34:59:f5:86:2c:5d:0c:cc:56:f1:cc: 7c:69:df:dc:ad:8b:c4:aa:c9:79:f7:82:1d:39:66: 88:a7:36:60:e0:28:c5:82:a4:48:ed:5c:ed:7a:9f: a8:8e:09:9a:42:23:00:58:17:ef:21:44:a1:07:50: d2:ec:ea:27:5e:01:00:6d:d2:e0:7f:4c:00:9e:97: b5:5a:77:4f:4f:11:c8:8c:51:46:c7:16:c1:ef:35: 5d:54:9c:60:78:a7:73:00:7f:1c:11:24:a9:10:98: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:E5:16:06:39:B6:12:A8:B2:AA:02:CE:64:F3:7B:2C:70:8E:62 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d8:b3:3f:8f:48:85:31:6c:4f:87:09:85:56:2e:1b:01:7d: 3a:f9:37:9a:ab:17:e0:d9:51:3d:ed:64:fd:be:87:4b:c0:11: 2f:e7:ee:03:b4:71:a0:a8:35:b3:14:2b:67:4b:15:1e:5c:ca: b7:95:ca:ce:13:df:f7:ba:17:4e:03:34:9b:31:7c:42:3e:d8: 6e:d4:ab:e6:d4:60:53:b9:3a:56:a8:7f:bd:61:f5:82:a0:0b: 71:aa:3e:a8:0f:b1:fe:ad:03:db:5d:40:88:e7:23:58:96:2b: 02:ef:dd:be:4c:85:9c:65:29:1c:be:e2:0a:16:d1:fc:e7:37: 4f:f6:62:84:dd:d7:26:72:33:98:a9:1f:2a:b6:b9:f5:9c:54: 99:75:6b:5d:be:43:48:aa:d4:49:87:f0:01:97:30:89:93:e1: 2a:94:69:90:cd:63:6c:32:bd:67:a3:68:cd:70:19:a2:7d:dd: fa:f5:ce:a8:d7:d0:fe:1b:20:3e:75:3c:56:93:11:c0:a0:af: 71:c1:4b:15:33:36:1d:e8:94:d3:1c:ab:ff:75:05:bf:9f:b1: 27:fb:19:b5:a8:bb:8d:81:ca:6d:cf:a4:02:10:18:7d:bf:ce: bb:1d:10:59:b8:37:db:cf:30:29:51:17:12:f2:1b:db:b9:2c: 45:2c:78:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUxMjIzMDE1MDE5WhcNMjUxMjMwMDE1MDE5WjAYMRYwFAYD VQQDDA02OTQ5ZjU1Yi1kMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2McAHa7ig61+vdufMB9LqTh9fPOsQzSyOYJ6xOG5AT3vg8gMGnD5DBmF+jp n9QrjfSNNGLZJo1wsZBrANDV/VaUujXNeFceGwYZjYEVaC4FrV62QWQd0hAHQpJH CWicMRYOBL1tUo2qpvxsNaRGasNL79WxLA8FGYFJ7zwjxbuj1tgkMCRRIlxTgNO0 vTrBrrquhILI5qh9NFn1hixdDMxW8cx8ad/crYvEqsl594IdOWaIpzZg4CjFgqRI 7Vztep+ojgmaQiMAWBfvIUShB1DS7OonXgEAbdLgf0wAnpe1WndPTxHIjFFGxxbB 7zVdVJxgeKdzAH8cESSpEJil5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIk5RYG ObYSqLKqAs5k83sscI5iMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy2LM/j0iFMWxPhwmFVi4bAX06+Teaqxfg2VE97WT9vodLwBEv5+4D tHGgqDWzFCtnSxUeXMq3lcrOE9/3uhdOAzSbMXxCPthu1Kvm1GBTuTpWqH+9YfWC oAtxqj6oD7H+rQPbXUCI5yNYlisC792+TIWcZSkcvuIKFtH85zdP9mKE3dcmcjOY qR8qtrn1nFSZdWtdvkNIqtRJh/ABlzCJk+EqlGmQzWNsMr1no2jNcBmifd369c6o 19D+GyA+dTxWkxHAoK9xwUsVMzYd6JTTHKv/dQW/n7En+xm1qLuNgcptz6QCEBh9 v867HRBZuDfbzzApURcS8hvbuSxFLHiB -----END CERTIFICATE-----Generated at Tue Dec 23 07:09:26 2025 by rpki-client