This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json) Hash identifier: yBAJfS8A7zHY6g93tX2banMItET+SdetoyVJmE/X/Uw= Subject key identifier: FA:6D:F9:96:C0:63:43:C4:CF:94:0E:BF:5D:5B:A7:25:D5:6C:8A:B0 Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft Manifest number: 42 Signing time: Wed 03 Dec 2025 05:39:55 +0000 Manifest this update: Wed 03 Dec 2025 05:39:54 +0000 Manifest next update: Wed 10 Dec 2025 05:39:54 +0000 Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: VRPEOVYbb77wqhDwGJ+FDgSOO9JeWkFqZ2rJr2RpXV8=) 2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: aeXdNNQNabgrgBCmkQacK1+L1cNE5fkHv7C0sQiLMEA=) 3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: gsI9bZIEgenwvA+Pmylv8BqkOrAikmMP6MwW5zxivFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Validity Not Before: Dec 3 05:39:54 2025 GMT Not After : Dec 10 05:39:54 2025 GMT Subject: CN=692fcd2b-2af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:10:6c:c3:ff:9a:d7:af:69:d1:ff:b9:b0: 5d:52:79:7a:4c:38:77:8b:18:39:bf:ae:dc:ee:ef: 13:b6:3a:04:bd:92:0e:ff:b2:ba:51:f3:95:f3:0d: cb:b4:d2:61:8b:30:6a:d3:2e:e5:39:77:36:ce:b5: 63:19:f5:48:57:af:66:e1:78:8c:72:91:31:3e:b6: ff:2d:41:f1:75:04:2c:c5:ae:9d:93:61:78:f3:64: 77:d1:47:6a:67:86:21:53:b9:0f:67:7a:72:28:aa: 03:f7:ca:90:c6:94:aa:ed:d4:34:87:4f:ff:ee:34: b8:78:3c:c3:b8:71:1a:a9:ef:b4:1b:f4:06:54:04: 13:2c:01:a8:b8:b5:4c:84:7e:f6:f0:26:73:ed:fc: b6:45:e5:1b:cf:c9:71:0a:ac:23:74:44:19:88:11: 59:2f:52:83:5a:be:59:ec:fe:68:72:cc:ad:03:f7: f8:7b:f4:cd:79:a9:ce:14:42:74:ad:fb:5b:c4:3a: c6:dd:74:51:c9:93:f7:97:b7:7e:21:a8:6f:07:38: 26:75:40:50:3e:2c:a3:75:21:e7:8c:94:39:83:2f: 76:bb:e8:0f:db:f7:54:01:b2:73:dc:f9:fb:56:0b: a7:a6:8c:43:1c:b3:d5:6c:d6:16:6c:55:f2:97:47: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6D:F9:96:C0:63:43:C4:CF:94:0E:BF:5D:5B:A7:25:D5:6C:8A:B0 X509v3 Authority Key Identifier: keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:58:11:94:92:53:7d:9c:02:fc:18:c4:9e:d4:ea:61:c0:d0: 20:96:e8:de:41:23:12:40:a2:98:6c:f6:90:78:e4:43:76:76: eb:10:58:ce:75:c0:8d:fb:86:74:70:9e:92:29:b0:5a:d7:ac: 7a:71:e0:f6:f8:62:11:2b:2f:e4:9a:ca:a2:bb:fa:34:1e:47: b5:d3:6a:39:ed:7c:7c:5f:86:ef:07:fa:8a:16:34:3b:21:79: 0f:5b:3c:b1:ac:48:a6:2a:9f:f9:b3:af:f2:55:7d:60:ae:50: 74:00:b2:17:2d:ac:b5:86:52:27:c8:5e:2b:7b:84:0a:5c:26: f2:05:76:a0:5a:5c:c7:9e:2c:2e:35:e7:09:25:5a:f8:16:3e: 29:98:c8:1d:55:2c:67:0e:d9:c3:d0:ee:bf:c6:b8:89:fa:21: a9:27:0e:ef:02:bd:bf:6b:5c:e3:d2:3f:fc:8f:78:80:5e:75: 80:26:04:c3:98:9a:98:38:12:f8:fa:6b:9d:b4:0c:a5:07:67: a4:0a:bf:42:09:5a:75:5f:c3:20:87:76:65:52:47:b2:3a:d4: a7:2a:9b:56:93:cd:f1:37:5b:9d:0c:d5:e5:6e:ee:e4:8e:8e: 09:03:10:cf:bc:49:97:3f:4a:0a:1a:05:9c:69:8c:dc:e0:66: fe:4c:4a:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3 MzE2QUExRDAeFw0yNTEyMDMwNTM5NTRaFw0yNTEyMTAwNTM5NTRaMBgxFjAUBgNV BAMTDTY5MmZjZDJiLTJhZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH0BBsw/+a169p0f+5sF1SeXpMOHeLGDm/rtzu7xO2OgS9kg7/srpR85XzDcu0 0mGLMGrTLuU5dzbOtWMZ9UhXr2bheIxykTE+tv8tQfF1BCzFrp2TYXjzZHfRR2pn hiFTuQ9nenIoqgP3ypDGlKrt1DSHT//uNLh4PMO4cRqp77Qb9AZUBBMsAai4tUyE fvbwJnPt/LZF5RvPyXEKrCN0RBmIEVkvUoNavlns/mhyzK0D9/h79M15qc4UQnSt +1vEOsbddFHJk/eXt34hqG8HOCZ1QFA+LKN1IeeMlDmDL3a76A/b91QBsnPc+ftW C6emjEMcs9Vs1hZsVfKXRzptAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+m35lsBj Q8TPlA6/XVunJdVsirAwHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtV LXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN5YEZSSU32cAvwYxJ7U6mHA0CCW6N5BIxJAophs9pB45EN2dusQWM51 wI37hnRwnpIpsFrXrHpx4Pb4YhErL+SayqK7+jQeR7XTajntfHxfhu8H+ooWNDsh eQ9bPLGsSKYqn/mzr/JVfWCuUHQAshctrLWGUifIXit7hApcJvIFdqBaXMeeLC41 5wklWvgWPimYyB1VLGcO2cPQ7r/GuIn6IaknDu8Cvb9rXOPSP/yPeIBedYAmBMOY mpg4Evj6a520DKUHZ6QKv0IJWnVfwyCHdmVSR7I61Kcqm1aTzfE3W50M1eVu7uSO jgkDEM+8SZc/SgoaBZxpjNzgZv5MSkE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:53 2025 by rpki-client