This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: bVtpK7H+xtnh7FyiESS7c71rzlKG+FVzB8/5x4fBl04= Subject key identifier: 6D:47:FC:26:AD:27:63:78:31:F3:A3:56:FF:09:36:FF:F7:06:B4:26 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 1236 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 1221 Signing time: Sat 20 Dec 2025 16:53:08 +0000 Manifest this update: Sat 20 Dec 2025 16:53:07 +0000 Manifest next update: Sat 27 Dec 2025 16:53:07 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: s5Fn+oVHEqs/M1OCIhic8c2P7lcFLmSGQYGPk2eV06Q=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4662 (0x1236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Dec 20 16:53:07 2025 GMT Not After : Dec 27 16:53:07 2025 GMT Subject: CN=6946d473-f3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:ea:30:a1:90:c8:e8:f4:18:75:17:a5:22: e9:08:4f:14:5a:7e:f7:b2:81:87:d1:51:a3:e3:f7: 30:4a:ac:60:55:f1:42:8b:22:b2:19:2d:ec:b5:81: 6a:2c:e8:c1:a2:47:eb:1f:bd:51:b4:f8:cc:e9:5a: 86:86:0b:27:5a:92:29:e7:e0:e3:37:06:5b:66:e2: 44:64:2f:d4:9d:4c:16:39:22:06:fc:51:83:a7:83: db:8f:4b:e1:08:32:58:8a:42:13:a0:6a:27:34:51: 27:c9:df:13:21:ec:3b:75:79:31:55:da:79:d9:c7: a6:9a:64:43:c8:c4:17:f4:ee:ca:e2:10:9f:ee:b8: 1d:0f:86:99:78:45:f1:da:9b:e0:3e:91:92:64:68: c8:e9:8e:54:2f:20:e2:bc:b1:d3:b2:90:ce:f7:60: d8:6f:d5:29:d9:0f:6f:36:d1:a8:e3:07:07:05:37: a7:1f:95:08:f8:7a:69:d6:d8:49:bd:c5:fc:40:69: db:fe:de:61:e4:1b:66:6f:c9:91:8d:c4:b7:8e:7f: 24:f7:07:2a:79:77:84:da:f9:b9:d5:58:15:95:09: c4:37:96:82:09:9e:c6:b9:02:3e:22:c7:d0:7e:7a: a0:f8:8b:08:5b:2a:d8:7d:3c:eb:38:fe:72:bb:f8: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:FC:26:AD:27:63:78:31:F3:A3:56:FF:09:36:FF:F7:06:B4:26 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e7:89:06:c5:89:97:31:98:9e:3c:7f:59:81:25:69:a4:0c: 47:5f:ee:75:f7:a4:84:7a:59:71:d5:5d:e7:8c:d6:8f:4f:40: 7f:57:a0:b0:ca:8d:1d:29:81:75:cf:be:ea:ce:31:73:d8:32: 2d:e2:a1:dc:02:20:43:b0:c4:e5:e1:c6:31:f4:0e:69:b1:59: 34:c6:f8:09:e0:58:bb:ec:b6:17:20:e0:28:5b:cb:c0:78:9c: 0b:6d:9d:94:35:e6:ce:a1:d3:95:9b:3b:2e:5e:cb:70:35:a1: 91:1d:9b:0e:4b:4a:be:1a:b4:9a:25:4e:d0:02:32:45:f9:eb: ea:5f:ff:b1:79:18:3b:90:5a:7a:c1:2b:ba:81:64:26:f1:11: 18:ee:c4:0b:26:89:5d:c9:2a:6c:2f:cc:4f:a0:e1:76:d7:b8: dc:b8:1b:6c:d0:c5:8c:c7:47:44:1a:96:8c:54:b5:6f:80:9a: 32:85:ec:f6:e5:b6:bc:d1:8b:0b:39:97:17:1c:52:eb:e2:c7: 36:9e:41:09:dc:5a:3f:0d:c4:2c:63:a7:d2:81:e8:f4:07:de: 91:ba:bb:27:c5:31:a5:64:53:38:7b:d7:c9:19:de:d6:30:a8: 14:ce:b4:1b:aa:f2:c5:a4:97:b7:64:23:21:73:ed:5a:c0:42: df:1f:42:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUxMjIwMTY1MzA3WhcNMjUxMjI3MTY1MzA3WjAYMRYwFAYD VQQDDA02OTQ2ZDQ3My1mM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z/qMKGQyOj0GHUXpSLpCE8UWn73soGH0VGj4/cwSqxgVfFCiyKyGS3stYFq LOjBokfrH71RtPjM6VqGhgsnWpIp5+DjNwZbZuJEZC/UnUwWOSIG/FGDp4Pbj0vh CDJYikIToGonNFEnyd8TIew7dXkxVdp52cemmmRDyMQX9O7K4hCf7rgdD4aZeEXx 2pvgPpGSZGjI6Y5ULyDivLHTspDO92DYb9Up2Q9vNtGo4wcHBTenH5UI+Hpp1thJ vcX8QGnb/t5h5Btmb8mRjcS3jn8k9wcqeXeE2vm51VgVlQnEN5aCCZ7GuQI+IsfQ fnqg+IsIWyrYfTzrOP5yu/hXUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1H/Cat J2N4MfOjVv8JNv/3BrQmMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC54kGxYmXMZiePH9ZgSVppAxHX+5196SEellx1V3njNaPT0B/V6Cw yo0dKYF1z77qzjFz2DIt4qHcAiBDsMTl4cYx9A5psVk0xvgJ4Fi77LYXIOAoW8vA eJwLbZ2UNebOodOVmzsuXstwNaGRHZsOS0q+GrSaJU7QAjJF+evqX/+xeRg7kFp6 wSu6gWQm8REY7sQLJoldySpsL8xPoOF217jcuBts0MWMx0dEGpaMVLVvgJoyhez2 5ba80YsLOZcXHFLr4sc2nkEJ3Fo/DcQsY6fSgej0B96RursnxTGlZFM4e9fJGd7W MKgUzrQbqvLFpJe3ZCMhc+1awELfH0Lf -----END CERTIFICATE-----Generated at Mon Dec 22 17:52:19 2025 by rpki-client