This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: jaYyD46GMb34T8n5E1jtjr/GVW7oPd9DANnxJBTIqCA= Subject key identifier: 4B:BC:51:02:26:01:E0:E4:14:E6:4B:6D:4D:AD:34:D2:32:E7:41:AA Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05D5 Signing time: Wed 10 Dec 2025 21:40:40 +0000 Manifest this update: Wed 10 Dec 2025 21:40:40 +0000 Manifest next update: Wed 17 Dec 2025 21:40:40 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: eRnswtb1d29ETV8ilG7kGy+ovTAoKrQR8DjMScLiosc=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 21:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Dec 10 21:40:40 2025 GMT Not After : Dec 17 21:40:40 2025 GMT Subject: CN=6939e8d8-b405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:6b:5a:3c:8b:21:ff:84:5e:da:33:7d:43: 62:37:a2:ae:62:53:a3:60:b0:9f:cc:e2:7f:08:e3: cb:1c:05:01:4d:17:d7:40:c3:f7:05:f0:e4:ea:6d: 3f:27:a5:6e:27:be:4a:5d:d5:1d:bb:03:87:7b:a1: 97:fe:0c:f5:43:58:61:75:13:09:f3:be:9f:52:6c: ff:49:2c:86:e6:01:5f:11:e9:23:70:b3:97:03:3d: 92:41:ca:5f:3c:5f:cb:ea:ae:25:85:1c:c9:59:5e: a4:fb:24:8e:8a:0a:d2:13:4e:2a:b6:08:3d:06:9f: 34:e4:ad:fe:89:26:0e:8b:c1:14:50:d5:c8:89:35: ac:b4:1f:24:b7:fb:c5:1c:b9:e2:b5:39:ae:bd:42: 7b:e4:1a:5a:51:3e:85:e7:fd:9e:37:8d:0a:48:92: cb:6f:b4:c6:5c:dd:98:16:df:88:23:cb:05:e3:cf: 67:40:6a:e4:db:13:14:30:31:7e:2c:ca:77:ad:59: d4:bd:df:dc:70:29:90:fb:1d:40:c8:ea:4e:71:1b: 93:17:53:36:23:6f:d7:0a:97:8d:c1:ba:94:f8:da: de:88:9c:e1:40:31:f0:30:c7:f2:e3:29:fa:48:29: 6a:7d:d5:14:2c:3b:7d:20:01:f8:99:ed:de:1e:39: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:51:02:26:01:E0:E4:14:E6:4B:6D:4D:AD:34:D2:32:E7:41:AA X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:de:e4:4f:70:8e:62:0d:14:65:cc:33:79:5c:55:d8:d9:b4: 53:28:73:51:47:44:b9:c7:fc:b5:52:27:f2:96:96:be:e1:c9: 8f:62:35:e5:e9:8a:60:c0:c2:46:6e:13:29:c4:57:69:fb:a3: 3a:67:3f:f7:e5:8f:73:1d:3f:d1:77:f7:30:dc:75:82:3f:6f: d8:05:91:4f:1b:69:b8:4f:1f:26:90:b6:fa:5a:96:dd:21:4c: 48:86:5b:f9:43:fc:ff:1e:ed:50:1f:8f:fe:0a:d1:82:50:73: 0f:16:8f:01:35:ea:ab:02:58:ce:1f:d0:a9:7f:4a:9e:ef:8f: b1:9c:89:10:63:7d:7f:10:79:89:2b:a6:09:98:04:6d:14:02: 51:21:ab:f5:77:85:50:c2:a9:6a:f4:6c:95:72:ba:33:35:c6: fa:51:22:42:74:b9:eb:ce:20:ad:a3:fb:af:0e:cf:fc:67:c1: e3:7b:56:44:d4:ef:f5:de:16:45:10:20:60:33:47:c1:83:c1: 49:49:01:01:79:22:0b:b7:b4:07:74:21:6f:0f:b9:a4:db:a9: 05:d2:c6:2d:7e:fe:03:fa:6c:2d:d8:35:86:b0:5f:a9:bc:2c: 6e:21:2d:58:e5:16:dc:b2:39:8f:76:ee:0a:14:c8:f7:7f:88: 26:6e:37:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUxMjEwMjE0MDQwWhcNMjUxMjE3MjE0MDQwWjAYMRYwFAYD VQQDEw02OTM5ZThkOC1iNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WZrWjyLIf+EXtozfUNiN6KuYlOjYLCfzOJ/COPLHAUBTRfXQMP3BfDk6m0/ J6VuJ75KXdUduwOHe6GX/gz1Q1hhdRMJ876fUmz/SSyG5gFfEekjcLOXAz2SQcpf PF/L6q4lhRzJWV6k+ySOigrSE04qtgg9Bp805K3+iSYOi8EUUNXIiTWstB8kt/vF HLnitTmuvUJ75BpaUT6F5/2eN40KSJLLb7TGXN2YFt+II8sF489nQGrk2xMUMDF+ LMp3rVnUvd/ccCmQ+x1AyOpOcRuTF1M2I2/XCpeNwbqU+NreiJzhQDHwMMfy4yn6 SClqfdUULDt9IAH4me3eHjmzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu8UQIm AeDkFOZLbU2tNNIy50GqMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA43uRPcI5iDRRlzDN5XFXY2bRTKHNRR0S5x/y1Uifylpa+4cmPYjXl 6YpgwMJGbhMpxFdp+6M6Zz/35Y9zHT/Rd/cw3HWCP2/YBZFPG2m4Tx8mkLb6Wpbd IUxIhlv5Q/z/Hu1QH4/+CtGCUHMPFo8BNeqrAljOH9Cpf0qe74+xnIkQY31/EHmJ K6YJmARtFAJRIav1d4VQwqlq9GyVcrozNcb6USJCdLnrziCto/uvDs/8Z8Hje1ZE 1O/13hZFECBgM0fBg8FJSQEBeSILt7QHdCFvD7mk26kF0sYtfv4D+mwt2DWGsF+p vCxuIS1Y5RbcsjmPdu4KFMj3f4gmbjcm -----END CERTIFICATE-----Generated at Thu Dec 11 19:33:32 2025 by rpki-client