This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: dS/hr/yU74eOKY3Rx0CXzGRKw0RyPgEiRKoEYs8DMSk= Subject key identifier: A7:9E:A8:C8:4C:EE:48:82:75:98:58:4D:89:67:D9:8B:82:EA:F0:1F Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 08DC Signing time: Wed 10 Dec 2025 19:23:18 +0000 Manifest this update: Wed 10 Dec 2025 19:23:18 +0000 Manifest next update: Wed 17 Dec 2025 19:23:18 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: +XIJBi9F9ypAhL3VwhQ82Tmzn9G5PT6xa9X/oj9EO8Y=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: CVJgpgajxXp0nfuwvvTtpQWL1YkwrnLOPz0dX0Da2i8=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: 0NHrksBzZ1sw6KKMUlk4z1DIMariid2PsdJfHN0oQM8=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: GmMG2dURnElUOnQiq0F5h7Z6METNWOktXhEJ+2ZzA/g=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: XkWTXb6PHytvZUY7EAUhHe4Q0yrK6oVBVW0wC1ENUcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 19:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Dec 10 19:23:18 2025 GMT Not After : Dec 17 19:23:18 2025 GMT Subject: CN=6939c8a6-161c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:fe:1a:5d:61:bc:44:65:0b:cb:ca:f6:78: 5c:ae:82:c8:07:5b:08:c7:d8:93:41:00:cd:7d:f7: a0:ca:93:d1:95:73:f1:a8:a9:82:17:ed:c1:dc:9d: fe:a4:75:7d:16:d2:ca:68:29:b0:44:17:75:59:6c: c0:e1:e8:f2:de:f7:24:8a:09:33:f8:7a:05:11:9d: c1:81:d0:83:ab:80:39:22:d9:5f:96:c8:c1:1f:8d: e6:4f:9c:93:2c:fd:ea:35:ef:5c:f8:ae:87:42:1a: e4:24:49:9e:35:52:78:c5:a2:cb:c6:8f:bc:82:2a: 44:eb:92:3a:26:50:90:ec:24:be:d9:10:53:fd:e7: a7:1c:a0:21:41:a9:8f:30:43:3d:f4:a1:bb:d6:a5: 95:76:9f:26:aa:60:fa:4f:2c:10:f3:58:0d:e2:e2: c5:a5:4e:af:a9:e2:44:bc:eb:bd:7c:d2:b2:96:fd: 02:58:51:d6:db:0f:78:bf:a4:90:ae:9e:2e:35:cb: 39:df:43:71:b7:ec:c9:a6:e6:2f:d1:b7:ba:fa:24: ca:8c:70:f1:7f:45:74:5a:27:21:2d:71:59:93:cf: 7d:7f:52:ea:e9:dc:cb:fe:6d:d5:32:a1:95:5f:9a: a3:2b:9c:da:d4:a5:d7:c2:61:d5:82:6d:2c:66:67: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9E:A8:C8:4C:EE:48:82:75:98:58:4D:89:67:D9:8B:82:EA:F0:1F X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:60:72:d8:ea:71:89:63:0d:aa:57:81:07:88:a4:8a:c0:58: ce:f1:29:66:6a:ba:54:42:49:b3:f7:e4:5a:1b:5f:fd:c3:7f: 42:ee:61:c9:ac:ef:7c:b7:47:a9:80:1f:b6:7f:45:72:60:3e: 62:0a:1e:d1:d9:98:e8:4a:51:81:39:5d:96:ab:27:a9:25:93: 81:8a:f1:98:de:63:e4:32:6d:d6:ed:47:be:ba:56:10:d3:63: 5a:f5:3d:3b:f0:bb:bd:eb:e1:bb:57:98:b8:e0:40:97:65:16: 6f:b3:5e:1a:7c:f9:b8:00:fc:48:37:0a:7f:3c:ea:8b:30:9f: 38:4b:fc:17:d4:a0:bc:49:e5:33:11:c6:a6:d4:bf:80:f2:d9: 04:67:01:cc:82:2b:31:58:32:18:a2:94:e9:88:57:8e:7d:65: 80:17:3e:1f:82:fe:db:6b:f6:ad:80:72:7d:2a:24:be:97:8f: 4f:33:8a:cc:d3:8a:10:e4:87:a0:70:d4:2a:d6:24:36:63:7e: e6:48:09:4e:b6:2f:89:aa:2a:ca:04:f0:2b:6e:f5:22:0e:d7: 77:6f:49:8b:90:2a:9d:0a:74:cc:3a:b9:7c:da:a4:89:4a:14: a2:f0:8d:db:b3:9b:91:75:3b:63:bb:1f:19:f1:ef:d0:49:dc: 9e:b8:2d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUxMjEwMTkyMzE4WhcNMjUxMjE3MTkyMzE4WjAYMRYwFAYD VQQDEw02OTM5YzhhNi0xNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr3+Gl1hvERlC8vK9nhcroLIB1sIx9iTQQDNffegypPRlXPxqKmCF+3B3J3+ pHV9FtLKaCmwRBd1WWzA4ejy3vckigkz+HoFEZ3BgdCDq4A5ItlflsjBH43mT5yT LP3qNe9c+K6HQhrkJEmeNVJ4xaLLxo+8gipE65I6JlCQ7CS+2RBT/eenHKAhQamP MEM99KG71qWVdp8mqmD6TywQ81gN4uLFpU6vqeJEvOu9fNKylv0CWFHW2w94v6SQ rp4uNcs530Nxt+zJpuYv0be6+iTKjHDxf0V0WichLXFZk899f1Lq6dzL/m3VMqGV X5qjK5za1KXXwmHVgm0sZmf2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeeqMhM 7kiCdZhYTYln2YuC6vAfMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdYHLY6nGJYw2qV4EHiKSKwFjO8SlmarpUQkmz9+RaG1/9w39C7mHJ rO98t0epgB+2f0VyYD5iCh7R2ZjoSlGBOV2WqyepJZOBivGY3mPkMm3W7Ue+ulYQ 02Na9T078Lu96+G7V5i44ECXZRZvs14afPm4APxINwp/POqLMJ84S/wX1KC8SeUz Ecam1L+A8tkEZwHMgisxWDIYopTpiFeOfWWAFz4fgv7ba/atgHJ9KiS+l49PM4rM 04oQ5IegcNQq1iQ2Y37mSAlOti+JqirKBPArbvUiDtd3b0mLkCqdCnTMOrl82qSJ ShSi8I3bs5uRdTtjux8Z8e/QSdyeuC3n -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:39 2025 by rpki-client