This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: hyBBcRMsAbRfEpq/dyzxsRztsJiWILllUTnbk11lDoU= Subject key identifier: F9:F2:11:D2:C5:34:B5:89:3C:72:F9:9A:F5:9B:ED:85:FD:F0:E9:B4 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 06D6 Signing time: Mon 22 Dec 2025 21:29:12 +0000 Manifest this update: Mon 22 Dec 2025 21:29:12 +0000 Manifest next update: Mon 29 Dec 2025 21:29:12 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: O6MVKOTzE7qVieAwGv2dyojYnUN0oyUZj+Kn78WGOww=) 2: 2540A3D24C9F11F0B3E79877C4F9AE02.roa (hash: 6T54i51OGw9J/SGlpB680rrKuAdgx9J1NeMWxwYBKWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: Dec 22 21:29:12 2025 GMT Not After : Dec 29 21:29:12 2025 GMT Subject: CN=6949b828-228e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:2a:22:dd:7e:7b:1a:11:a9:c6:d4:d8:38: 70:ac:e6:41:af:b0:29:00:08:ab:03:fa:b0:e4:e7: 80:1a:f1:76:52:e1:ec:9f:ab:cd:46:6b:6f:80:61: 4c:f7:d2:43:77:c5:a5:8d:b4:5c:df:db:bb:f1:dd: b8:eb:2a:36:22:31:20:98:73:5c:3e:92:00:d6:c0: db:67:12:6a:d0:1a:72:4a:b0:01:cc:9d:b0:9e:14: 07:42:10:2a:11:0d:cc:78:f0:cf:2f:82:8b:4c:67: e7:55:bc:50:5a:54:ac:43:83:9d:c0:53:d9:19:57: de:f1:e7:3a:39:5a:5d:b9:8c:a0:5b:b4:20:ef:98: 14:75:1d:58:15:0b:33:6f:dd:73:c4:5e:a9:cf:8a: 47:24:02:01:12:59:af:a9:42:05:5a:81:71:39:42: 12:72:dd:19:67:96:89:1d:f1:26:41:29:eb:58:db: 1a:8f:75:39:d2:f1:a6:84:6a:42:70:85:61:91:7f: b4:80:26:d3:c0:d0:37:69:ef:80:43:06:74:85:74: 76:7c:75:11:43:75:18:a6:05:55:12:c9:52:0b:b6: e2:fa:b8:8e:85:c4:d7:24:61:15:87:6d:46:08:17: ca:2b:18:a7:be:4d:05:99:30:99:d8:f9:fa:cc:13: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F2:11:D2:C5:34:B5:89:3C:72:F9:9A:F5:9B:ED:85:FD:F0:E9:B4 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:36:9b:7b:b7:42:25:ad:3d:7c:11:8f:71:d5:8e:0d:35:61: 61:5e:db:ed:42:28:8c:c6:05:d6:43:23:e8:94:26:a1:c2:53: bc:74:8b:ca:46:87:ed:c2:45:fa:84:af:ca:80:f2:3f:76:d0: 1e:13:b2:b7:3f:91:e9:49:4a:14:b2:31:d7:e6:29:59:a4:74: 9c:4c:c9:48:7e:33:38:f4:f6:92:a6:f9:24:2a:61:d5:d3:d5: 51:9b:ed:c3:6a:69:46:9e:1f:14:84:9e:bb:a5:c7:61:fb:db: 0e:06:7d:34:02:b6:ac:fb:26:82:43:ec:33:02:bb:e2:44:d2: f7:62:d7:83:35:f2:6a:36:e6:2f:04:8f:b4:b3:55:87:62:00: 53:9a:e0:1d:fc:39:06:fc:08:2f:85:fd:75:8c:7c:6d:cb:55: 20:19:28:0e:9c:7e:f7:b0:cb:b3:16:15:52:db:be:07:d6:e2: 6c:69:26:9e:da:b4:82:6e:df:a0:9b:96:63:51:6c:56:e3:7e: 75:b9:65:24:da:6c:31:76:ca:b0:9f:33:a7:05:62:a5:c7:f4: 18:e9:33:08:08:f1:19:f8:1a:5d:ff:e1:14:75:ea:b5:53:3c: eb:ae:01:b6:d1:2d:1b:12:02:40:c6:7d:db:c6:8c:cd:8e:cf: 7d:9d:7d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjUxMjIyMjEyOTEyWhcNMjUxMjI5MjEyOTEyWjAYMRYwFAYD VQQDDA02OTQ5YjgyOC0yMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslwqIt1+exoRqcbU2DhwrOZBr7ApAAirA/qw5OeAGvF2UuHsn6vNRmtvgGFM 99JDd8WljbRc39u78d246yo2IjEgmHNcPpIA1sDbZxJq0BpySrABzJ2wnhQHQhAq EQ3MePDPL4KLTGfnVbxQWlSsQ4OdwFPZGVfe8ec6OVpduYygW7Qg75gUdR1YFQsz b91zxF6pz4pHJAIBElmvqUIFWoFxOUISct0ZZ5aJHfEmQSnrWNsaj3U50vGmhGpC cIVhkX+0gCbTwNA3ae+AQwZ0hXR2fHURQ3UYpgVVEslSC7bi+riOhcTXJGEVh21G CBfKKxinvk0FmTCZ2Pn6zBPulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnyEdLF NLWJPHL5mvWb7YX98Om0MB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Npt7t0IlrT18EY9x1Y4NNWFhXtvtQiiMxgXWQyPolCahwlO8dIvK RoftwkX6hK/KgPI/dtAeE7K3P5HpSUoUsjHX5ilZpHScTMlIfjM49PaSpvkkKmHV 09VRm+3DamlGnh8UhJ67pcdh+9sOBn00Aras+yaCQ+wzArviRNL3YteDNfJqNuYv BI+0s1WHYgBTmuAd/DkG/Agvhf11jHxty1UgGSgOnH73sMuzFhVS274H1uJsaSae 2rSCbt+gm5ZjUWxW4351uWUk2mwxdsqwnzOnBWKlx/QY6TMICPEZ+Bpd/+EUdeq1 UzzrrgG20S0bEgJAxn3bxozNjs99nX2E -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:43 2025 by rpki-client