This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: k2S3yJ5KXxG2T23Ja+c8hJ/kEVlKEtKH9vwbMZdrpn4= Subject key identifier: 7C:44:DA:34:99:A3:D5:AE:EE:83:2F:B0:4A:4C:FD:D5:32:8E:6B:9F Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: 0127 Signing time: Tue 23 Dec 2025 03:39:10 +0000 Manifest this update: Tue 23 Dec 2025 03:39:10 +0000 Manifest next update: Tue 30 Dec 2025 03:39:10 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: DLp/WJf1ZQnl5uiju+qmmtVMzLl8HGRa4H/MVC/HYBQ=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Dec 23 03:39:10 2025 GMT Not After : Dec 30 03:39:10 2025 GMT Subject: CN=694a0ede-1bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:35:48:ab:12:01:52:1c:f1:19:0a:0e:79:24: 5f:c8:10:83:1e:e6:aa:7a:71:91:8b:b0:cc:81:76: 8a:46:44:d2:e5:1f:4f:05:a9:94:07:c7:bf:0c:3c: 2f:4a:e5:6c:ea:bc:db:a4:f0:85:92:68:64:d1:b4: e4:cc:d0:13:17:1c:9d:53:c5:d3:42:56:ae:83:f2: cf:f6:f4:bc:70:7e:f4:07:c9:b2:ea:ff:42:ed:b8: 46:49:27:f7:39:36:fc:00:d2:ba:72:6d:9e:c8:d4: ae:be:44:d6:0d:27:d6:66:0e:ed:9b:d4:d4:3c:42: 02:cd:ca:80:4c:58:29:a3:e7:e1:bb:cf:be:74:d1: d2:55:a5:89:47:09:e7:8d:ce:40:a6:4a:d0:e9:b8: 08:a5:8f:a0:61:52:4a:9a:3d:e4:47:df:5a:db:c1: 29:6c:22:15:e6:62:9f:64:c8:05:fd:0f:90:dc:8f: 4c:c9:ee:ca:72:71:0e:21:c7:50:15:0e:83:7a:2f: 5c:17:15:c9:33:5f:85:f4:3a:e9:2f:77:60:91:5e: ec:39:c7:47:b8:55:b5:e0:0d:a7:6c:5b:23:0c:e6: 8e:2e:8e:be:8c:62:63:70:d3:f2:7b:68:5b:33:c0: 4b:b4:40:b9:06:35:60:02:2b:b6:31:0f:29:c0:e4: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:44:DA:34:99:A3:D5:AE:EE:83:2F:B0:4A:4C:FD:D5:32:8E:6B:9F X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:1c:a1:e5:49:72:b2:82:d9:f2:bb:a3:5a:cb:c7:5d:ff: ff:2b:40:94:51:2f:79:7b:10:23:fc:29:47:18:a5:15:47:43: 30:96:71:21:55:15:71:ca:ab:c5:cb:79:bc:41:fd:01:e7:88: 5e:2e:4e:fc:20:2a:c8:11:de:e7:04:7b:08:ec:dc:c3:07:be: a6:df:96:26:95:21:a3:f1:13:9c:88:3c:8a:26:3c:48:9f:12: 4c:67:68:60:cf:7a:b6:c6:85:36:32:57:2b:5b:7b:af:9b:2a: f4:eb:80:79:5f:29:d2:5c:23:63:0c:50:99:54:7b:66:ed:8d: af:61:a3:f4:19:c0:46:51:f1:5c:99:d3:46:fe:f3:61:fc:3f: bb:99:28:f3:c8:d6:b4:a0:31:17:15:10:ae:ce:ee:6a:c5:58: bf:0b:42:19:54:7a:b4:71:b3:f1:bf:e5:ad:22:39:f5:e2:a2: aa:1a:85:46:f6:7e:b7:cb:f2:80:6a:38:6e:dd:12:84:c3:ff: b3:1e:1c:b9:93:96:35:08:b1:88:30:8e:16:b4:5f:87:89:d5: 4f:b3:26:57:72:21:aa:5b:be:f9:01:6b:eb:c7:74:da:e6:3f: f2:74:cc:2f:65:1d:7d:79:d8:16:ed:7b:7c:d5:28:fa:1a:47: cc:51:de:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMTExMTAvBgNVBAUTKEI3OTRGOTk3MzNFRUZDM0ZBMDAwM0Y2ODhGNjRDOUMz NTM5MjY2QjUwHhcNMjUxMjIzMDMzOTEwWhcNMjUxMjMwMDMzOTEwWjAYMRYwFAYD VQQDDA02OTRhMGVkZS0xYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9DVIqxIBUhzxGQoOeSRfyBCDHuaqenGRi7DMgXaKRkTS5R9PBamUB8e/DDwv SuVs6rzbpPCFkmhk0bTkzNATFxydU8XTQlaug/LP9vS8cH70B8my6v9C7bhGSSf3 OTb8ANK6cm2eyNSuvkTWDSfWZg7tm9TUPEICzcqATFgpo+fhu8++dNHSVaWJRwnn jc5ApkrQ6bgIpY+gYVJKmj3kR99a28EpbCIV5mKfZMgF/Q+Q3I9Mye7KcnEOIcdQ FQ6Dei9cFxXJM1+F9DrpL3dgkV7sOcdHuFW14A2nbFsjDOaOLo6+jGJjcNPye2hb M8BLtEC5BjVgAiu2MQ8pwOQ7AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxE2jSZ o9Wu7oMvsEpM/dUyjmufMB8GA1UdIwQYMBaAFLeU+Zcz7vw/oAA/aI9kycNTkma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUxMS83QkNGODEyODFD QTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9ELWdBRDlvajJUSncxT1Na clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUxMS83QkNGODEyODFDQTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9E LWdBRDlvajJUSncxT1NaclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfVByh5UlysoLZ8rujWsvHXf//K0CUUS95exAj/ClHGKUVR0MwlnEh VRVxyqvFy3m8Qf0B54heLk78ICrIEd7nBHsI7NzDB76m35YmlSGj8ROciDyKJjxI nxJMZ2hgz3q2xoU2MlcrW3uvmyr064B5XynSXCNjDFCZVHtm7Y2vYaP0GcBGUfFc mdNG/vNh/D+7mSjzyNa0oDEXFRCuzu5qxVi/C0IZVHq0cbPxv+WtIjn14qKqGoVG 9n63y/KAajhu3RKEw/+zHhy5k5Y1CLGIMI4WtF+HidVPsyZXciGqW775AWvrx3Ta 5j/ydMwvZR19edgW7Xt81Sj6GkfMUd4Q -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:46 2025 by rpki-client