This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json) Hash identifier: elZFZShhBR7q5LfxyhQRDm2AyBobVD92ZF5gH/5oxVM= Subject key identifier: 99:D5:22:D4:AD:A0:6D:DD:42:BB:7E:20:8B:71:EE:08:F1:2C:93:71 Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft Manifest number: 0563 Signing time: Mon 22 Dec 2025 22:30:11 +0000 Manifest this update: Mon 22 Dec 2025 22:30:10 +0000 Manifest next update: Mon 29 Dec 2025 22:30:10 +0000 Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: D+BExURd9ufyLX7ckQZyDIGhLl6oVuDaUPfikfhtfa8=) 2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=) 3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Validity Not Before: Dec 22 22:30:10 2025 GMT Not After : Dec 29 22:30:10 2025 GMT Subject: CN=6949c672-3880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1d:a3:50:59:f5:61:cd:41:e8:7d:cf:44:a0: 84:df:0e:57:b9:0f:d1:12:e4:42:1e:95:f5:16:60: 17:ac:13:cd:bd:cb:02:35:2e:15:2c:9d:a7:d3:2b: bb:f2:ee:3a:f2:5c:03:d4:8b:82:27:e9:2b:f1:d4: dc:4f:40:be:2c:da:30:4b:18:fb:7f:99:b8:aa:7a: b3:5a:cc:d2:92:87:64:9e:fa:d2:53:f8:b3:11:21: 54:52:20:91:4e:fd:61:85:c9:29:03:13:db:9b:7c: c9:c1:82:e1:08:ed:be:65:64:50:f7:2b:1c:aa:57: 76:ba:9d:e7:a1:a2:14:90:72:5d:63:9f:f8:65:0b: fa:ee:eb:ef:72:96:7e:ff:57:72:af:1c:ac:08:29: 13:8d:a4:11:1b:4a:1d:82:c1:90:b8:eb:0b:ea:48: 4e:b1:4d:e8:25:85:e2:53:94:c8:55:08:96:64:07: 8e:04:f6:91:02:b1:5b:5c:ac:47:21:1b:e4:80:7c: f7:9b:37:47:f6:fb:82:a7:39:a8:9d:52:17:99:ae: 90:36:c7:be:b9:aa:27:ab:96:44:04:e1:51:ef:1e: ad:68:b9:b4:65:fb:f8:67:bc:bd:ca:89:c1:30:e4: 7d:12:51:81:d6:49:5d:26:0f:48:88:cb:68:ba:ab: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:22:D4:AD:A0:6D:DD:42:BB:7E:20:8B:71:EE:08:F1:2C:93:71 X509v3 Authority Key Identifier: keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ee:b1:d9:46:da:b9:16:f4:95:aa:15:2c:a7:bb:2b:93:f3: aa:9d:c8:04:a1:e5:52:87:ad:f8:4a:73:0b:f5:18:17:85:51: 04:be:d5:53:09:40:cd:1c:74:b5:26:84:f7:73:59:be:12:b6: a1:4d:47:0b:58:9d:ec:04:44:e6:24:36:c1:f5:cd:4d:c1:3d: 18:54:5d:94:3b:4e:ac:05:5d:31:f6:88:99:9b:a1:13:8c:38: de:44:7f:68:f2:b1:43:c2:cf:5a:92:93:49:5d:f8:04:f4:6c: 20:c7:cb:a5:f3:f7:5b:8b:f0:56:91:ea:2f:bf:db:6a:51:e5: 50:de:7d:7a:35:fc:3c:25:68:30:94:ed:fc:16:64:ed:0e:21: 6c:62:5a:d3:0f:78:ad:f3:db:d2:20:03:10:df:5b:0e:ba:07: 76:18:cc:59:0d:2f:be:c6:61:4a:e5:29:2f:7a:41:09:88:bd: e3:63:56:70:74:46:03:c2:2d:3d:d0:4a:09:08:92:72:59:2c: 04:a4:1b:31:d6:ce:22:3b:29:60:d0:83:06:71:c2:77:c1:72: 60:a0:74:cf:31:46:e9:c4:fd:cb:f5:03:c1:69:5d:73:76:0b: ce:9c:f9:7d:e9:32:3e:4a:6a:52:d6:a7:a8:f8:a8:5a:0b:57: ca:f3:f0:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE QzFBQTc3NjIwHhcNMjUxMjIyMjIzMDEwWhcNMjUxMjI5MjIzMDEwWjAYMRYwFAYD VQQDDA02OTQ5YzY3Mi0zODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5R2jUFn1Yc1B6H3PRKCE3w5XuQ/REuRCHpX1FmAXrBPNvcsCNS4VLJ2n0yu7 8u468lwD1IuCJ+kr8dTcT0C+LNowSxj7f5m4qnqzWszSkodknvrSU/izESFUUiCR Tv1hhckpAxPbm3zJwYLhCO2+ZWRQ9yscqld2up3noaIUkHJdY5/4ZQv67uvvcpZ+ /1dyrxysCCkTjaQRG0odgsGQuOsL6khOsU3oJYXiU5TIVQiWZAeOBPaRArFbXKxH IRvkgHz3mzdH9vuCpzmonVIXma6QNse+uaonq5ZEBOFR7x6taLm0Zfv4Z7y9yonB MOR9ElGB1kldJg9IiMtouqvJ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnVItSt oG3dQrt+IItx7gjxLJNxMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0 VjBZVlg4UWhzWDNjR3FkMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq7rHZRtq5FvSVqhUsp7srk/OqncgEoeVSh634SnML9RgXhVEEvtVT CUDNHHS1JoT3c1m+ErahTUcLWJ3sBETmJDbB9c1NwT0YVF2UO06sBV0x9oiZm6ET jDjeRH9o8rFDws9akpNJXfgE9Gwgx8ul8/dbi/BWkeovv9tqUeVQ3n16Nfw8JWgw lO38FmTtDiFsYlrTD3it89vSIAMQ31sOugd2GMxZDS++xmFK5SkvekEJiL3jY1Zw dEYDwi090EoJCJJyWSwEpBsx1s4iOylg0IMGccJ3wXJgoHTPMUbpxP3L9QPBaV1z dgvOnPl96TI+SmpS1qeo+KhaC1fK8/A/ -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:52 2025 by rpki-client