This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft File: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft (raw, json) Hash identifier: Rz2ZB0P3j/qsjb+3jQqAtvmBixwRYOVJhb0aYpLZWg4= Subject key identifier: A3:1D:CB:C1:5B:92:2F:FC:6F:78:7E:F1:80:46:22:A2:F4:BE:05:4E Authority key identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE Certificate issuer: /CN=A91B40B2/serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft Manifest number: 05 Signing time: Tue 23 Dec 2025 06:57:31 +0000 Manifest this update: Tue 23 Dec 2025 06:57:31 +0000 Manifest next update: Tue 30 Dec 2025 06:57:31 +0000 Files and hashes: 1: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl (hash: 7ZI2bpB63Ad6YeosQSgxPuMgsS9Hazl6NokZ3f+gp7c=) 2: 78A0CEEADA3811F080F82F148DD3641D.roa (hash: bk4EeRva85W97+CiKewXLYDpwnyH7MjBoZhPwCfegxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Validity Not Before: Dec 23 06:57:31 2025 GMT Not After : Dec 30 06:57:31 2025 GMT Subject: CN=694a3d5b-c1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:88:d8:9f:6b:85:fa:0e:21:21:fe:95:66: 86:79:de:bb:08:e0:b3:b7:32:b2:17:9e:54:48:58: 92:38:f2:40:e8:19:25:ff:1a:ca:ce:ce:84:17:29: 93:f6:10:20:69:2a:b5:49:0d:16:4c:81:a4:3d:a1: aa:64:30:71:b5:83:9d:97:ff:d3:13:74:7b:a4:9b: 26:69:54:ee:74:0f:85:c5:f0:ec:ec:d8:74:72:8c: 6b:b5:d3:1f:79:b8:b2:c3:13:c4:62:d2:33:e3:b6: df:c0:33:bc:1b:4e:e7:ca:d7:35:4a:15:49:a6:a1: b2:d8:4a:ea:84:6e:32:e2:25:c9:31:63:7b:03:b7: 4c:6d:1d:18:7a:af:91:5d:51:9b:6a:c0:e9:58:d8: be:67:7f:8f:1c:55:d3:c3:b0:83:0e:e7:ed:77:f8: 15:3b:7a:3f:b0:97:07:ed:f8:ce:94:9e:1d:07:4e: c9:48:87:15:13:d1:df:6c:09:86:7a:83:7d:ab:89: 4e:c4:e4:04:3a:bd:89:c1:d7:d2:e1:f8:bf:af:d6: ad:af:62:6f:de:ef:a1:67:ac:c2:fb:b1:1f:18:0f: 49:cf:d8:5d:83:ea:e5:aa:2a:f1:41:43:07:51:95: a6:46:cf:ad:ed:44:c6:db:12:f9:99:28:45:f8:36: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:CB:C1:5B:92:2F:FC:6F:78:7E:F1:80:46:22:A2:F4:BE:05:4E X509v3 Authority Key Identifier: keyid:03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bd:b7:a9:ad:d8:78:97:e4:a3:ac:01:d3:24:f9:37:ee:7a: c7:67:91:04:c9:c3:90:78:a2:21:b1:bf:c1:82:ca:a3:4a:f2: 85:e6:4d:0c:99:d6:b0:73:6b:71:f0:a1:0a:1f:92:eb:9b:6b: b0:97:ae:05:88:23:41:d5:2c:61:cf:49:02:de:c7:5a:19:4b: af:72:73:11:aa:88:4d:56:91:64:a4:d8:8e:9d:3d:08:a7:38: 27:45:b8:d9:ad:33:78:67:57:46:37:e7:aa:e7:6f:25:1a:bf: a8:40:43:d7:41:e8:25:a4:b3:ab:97:9b:f8:68:eb:61:f3:ab: d9:83:72:08:5e:9a:49:b8:96:bd:de:ff:b9:23:53:40:ba:c7: ae:32:8a:cc:90:15:e3:3f:af:07:dc:ee:d3:60:1a:3e:ec:ce: a6:fc:07:39:6a:75:c8:23:12:ab:2b:12:d2:8f:9c:5a:a9:45: 2f:ee:2c:c1:0c:9b:e7:db:dc:59:29:36:fb:8b:25:3b:4c:15: 87:81:67:d9:07:41:17:f9:35:5f:32:7d:a1:61:e8:b0:bf:0a: 8e:8e:c9:a7:8e:2d:13:99:a4:ec:ea:81:1a:39:55:3e:67:72: 35:6b:2c:49:25:d2:e8:06:bb:81:f3:7d:98:62:a5:6d:f8:f7: d6:9b:9a:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDBCMjExMC8GA1UEBRMoMDM5Mjg0MjdEMkY1M0M4RkJBOTdGQ0ZFM0ZDNjUzQTUw RjE2NTlGRTAeFw0yNTEyMjMwNjU3MzFaFw0yNTEyMzAwNjU3MzFaMBgxFjAUBgNV BAMMDTY5NGEzZDViLWMxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwlojYn2uF+g4hIf6VZoZ53rsI4LO3MrIXnlRIWJI48kDoGSX/GsrOzoQXKZP2 ECBpKrVJDRZMgaQ9oapkMHG1g52X/9MTdHukmyZpVO50D4XF8Ozs2HRyjGu10x95 uLLDE8Ri0jPjtt/AM7wbTufK1zVKFUmmobLYSuqEbjLiJckxY3sDt0xtHRh6r5Fd UZtqwOlY2L5nf48cVdPDsIMO5+13+BU7ej+wlwft+M6Unh0HTslIhxUT0d9sCYZ6 g32riU7E5AQ6vYnB19Lh+L+v1q2vYm/e76FnrML7sR8YD0nP2F2D6uWqKvFBQwdR laZGz63tRMbbEvmZKEX4NjtXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUox3LwVuS L/xveH7xgEYiovS+BU4wHwYDVR0jBBgwFoAUA5KEJ9L1PI+6l/z+P8ZTpQ8WWf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0MEIyL0RBRDAxRDM0REEz NjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEktNmxfei1QOFpUcFE4V1dm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVLRUo5TDFQSS02bF96LVA4WlRwUThXV2Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 MEIyL0RBRDAxRDM0REEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEkt Nmxfei1QOFpUcFE4V1dmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu9t6mt2HiX5KOsAdMk+TfuesdnkQTJw5B4oiGxv8GCyqNK8oXmTQyZ 1rBza3HwoQofkuuba7CXrgWII0HVLGHPSQLex1oZS69ycxGqiE1WkWSk2I6dPQin OCdFuNmtM3hnV0Y356rnbyUav6hAQ9dB6CWks6uXm/ho62Hzq9mDcghemkm4lr3e /7kjU0C6x64yisyQFeM/rwfc7tNgGj7szqb8BzlqdcgjEqsrEtKPnFqpRS/uLMEM m+fb3FkpNvuLJTtMFYeBZ9kHQRf5NV8yfaFh6LC/Co6OyaeOLROZpOzqgRo5VT5n cjVrLEkl0ugGu4HzfZhipW3499abmhc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:27 2025 by rpki-client