This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json) Hash identifier: YaKafY9zStNQGqoYU8S2PWIQ+HloG+JRSBomp/gns+w= Subject key identifier: 76:90:4E:75:1F:27:15:0C:B2:D4:82:88:B4:6C:FB:07:7A:08:4C:93 Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft Manifest number: 01C4 Signing time: Sun 21 Dec 2025 02:14:35 +0000 Manifest this update: Sun 21 Dec 2025 02:14:35 +0000 Manifest next update: Sun 28 Dec 2025 02:14:35 +0000 Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: fwRRnoi/ouzsjXRbocXCTCzUMVpYkFKvayTqvQVCJGw=) 2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: Q3p56EBz1xC365ZPw62kRQzqXww33xOtvu79Twkm2RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Validity Not Before: Dec 21 02:14:35 2025 GMT Not After : Dec 28 02:14:35 2025 GMT Subject: CN=6947580b-a567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:0c:73:06:55:c5:56:0a:e9:ee:ba:c4:70: 2c:3b:af:9c:a5:c0:90:44:06:e6:07:3b:07:d6:c6: e4:d5:f5:b0:28:05:e7:54:31:d8:61:6c:54:6e:85: 9b:8e:a4:fe:38:69:79:c3:d6:dc:2b:ce:f7:55:3d: a0:9f:38:8c:1e:ff:7c:57:2a:5a:32:e1:ae:01:93: 1e:2b:03:f2:b1:03:49:b4:78:0e:ff:5d:fc:2f:b8: 39:40:d8:0e:26:45:62:f6:ca:b8:ca:c3:dd:0b:af: a0:bb:9d:74:b5:9b:c8:23:40:6d:31:d7:ce:8b:67: cf:89:2a:b7:07:52:3c:a1:d1:b8:0f:a6:87:ff:59: f5:24:2e:7a:6a:8d:7a:a0:24:d5:d8:78:71:c1:40: 48:c4:a2:ac:ad:e7:fc:bd:89:ce:37:b7:49:3f:9f: f1:12:4e:53:b1:5b:ad:ec:84:03:3f:27:83:4e:4b: e5:75:12:7a:51:5d:a2:cf:42:a3:18:60:eb:66:89: ba:38:2b:9f:40:75:16:da:fd:dc:6b:79:dd:60:93: 78:70:fb:77:94:16:44:ab:3e:42:28:90:62:67:55: f3:64:62:6a:71:0b:2b:c8:76:f2:3e:b3:c9:a2:46: 7a:ed:3f:a6:87:2f:ef:c0:4d:55:d3:a3:98:88:e5: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:4E:75:1F:27:15:0C:B2:D4:82:88:B4:6C:FB:07:7A:08:4C:93 X509v3 Authority Key Identifier: keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d0:b5:55:10:26:90:fb:7d:86:78:53:00:eb:dd:67:c0:22: 81:d7:04:22:c2:e2:cd:ec:b2:8e:31:7d:44:54:c9:6f:1c:2e: c9:47:09:64:87:9a:a8:ab:70:05:b7:2e:39:bb:7d:a2:c2:0c: 72:9c:c9:4b:52:c7:94:96:17:e1:80:66:00:aa:70:35:2b:16: 95:75:32:31:50:25:14:86:95:28:ff:df:8b:71:94:44:a9:bc: f6:fe:67:5d:0b:e4:bf:7a:04:9a:b9:d9:6d:dc:f0:ae:96:e3: 6e:dc:0d:de:ec:f0:0a:c3:6a:8c:bb:db:18:f9:b5:32:f7:72: fb:a1:21:d4:59:6c:3e:af:2a:53:50:98:d1:35:7d:49:4b:f9: 87:e3:8f:b9:df:70:bd:42:ec:9a:56:57:01:9c:f1:b7:5d:99: 63:bb:ff:5c:41:f8:e6:a2:d8:74:51:8b:22:2a:ea:47:c1:7d: ca:9a:3a:c0:b0:ba:c5:88:31:f1:5b:0a:36:df:f1:8d:43:20: 1b:98:e9:d8:93:e8:a5:e6:1f:12:2a:79:59:bd:99:a1:06:f6: 36:db:7d:3f:fe:0d:d5:05:84:22:b5:a1:57:f1:59:77:1c:fd: c4:09:fc:89:24:2f:87:f4:77:a4:c6:ec:8f:2a:03:41:16:92: fb:a7:8b:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB MDk1NTJCN0UwHhcNMjUxMjIxMDIxNDM1WhcNMjUxMjI4MDIxNDM1WjAYMRYwFAYD VQQDDA02OTQ3NTgwYi1hNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqQMcwZVxVYK6e66xHAsO6+cpcCQRAbmBzsH1sbk1fWwKAXnVDHYYWxUboWb jqT+OGl5w9bcK873VT2gnziMHv98VypaMuGuAZMeKwPysQNJtHgO/138L7g5QNgO JkVi9sq4ysPdC6+gu510tZvII0BtMdfOi2fPiSq3B1I8odG4D6aH/1n1JC56ao16 oCTV2HhxwUBIxKKsref8vYnON7dJP5/xEk5TsVut7IQDPyeDTkvldRJ6UV2iz0Kj GGDrZom6OCufQHUW2v3ca3ndYJN4cPt3lBZEqz5CKJBiZ1XzZGJqcQsryHbyPrPJ okZ67T+mhy/vwE1V06OYiOVVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaQTnUf JxUMstSCiLRs+wd6CEyTMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI5Qy8wRjE3MkREMjMwMjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0 Wl9HX241bktIQ2FnbFZLMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL0LVVECaQ+32GeFMA691nwCKB1wQiwuLN7LKOMX1EVMlvHC7JRwlk h5qoq3AFty45u32iwgxynMlLUseUlhfhgGYAqnA1KxaVdTIxUCUUhpUo/9+LcZRE qbz2/mddC+S/egSaudlt3PCuluNu3A3e7PAKw2qMu9sY+bUy93L7oSHUWWw+rypT UJjRNX1JS/mH44+533C9QuyaVlcBnPG3XZlju/9cQfjmoth0UYsiKupHwX3KmjrA sLrFiDHxWwo23/GNQyAbmOnYk+il5h8SKnlZvZmhBvY2230//g3VBYQitaFX8Vl3 HP3ECfyJJC+H9HekxuyPKgNBFpL7p4sU -----END CERTIFICATE-----Generated at Mon Dec 22 20:24:45 2025 by rpki-client