This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json) Hash identifier: i08Y777I6VdwB0RmH1HlFKIgo7fN4T24PQsgd/HH36o= Subject key identifier: 49:39:64:7F:3F:52:E8:0B:66:70:9B:73:87:24:9E:E7:26:A8:19:5D Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft Manifest number: 0663 Signing time: Mon 22 Dec 2025 21:47:21 +0000 Manifest this update: Mon 22 Dec 2025 21:47:21 +0000 Manifest next update: Mon 29 Dec 2025 21:47:21 +0000 Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: H1yIkd4cOY2otWjjYL8rl79JqD2krUXDC/efYOsWiKY=) 2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: Njg0pVJ4I7URnxza7bv42AK9X5Mt3J26B9EOz9eASoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Dec 22 21:47:21 2025 GMT Not After : Dec 29 21:47:21 2025 GMT Subject: CN=6949bc69-4466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:8b:99:72:b6:b3:1f:1e:06:b9:83:69:5f: 52:e0:6b:7d:2e:2e:e7:ac:6f:3a:45:d4:f6:11:20: f5:cb:88:d3:ef:4b:7d:3e:bf:5e:ba:5a:39:10:ed: ea:57:9d:1a:e2:6b:db:0e:85:61:57:2d:ae:fe:d2: 38:6a:1a:33:d9:8c:37:85:7b:41:6c:72:3b:8d:64: d4:33:8f:29:8f:a8:a3:76:41:68:c4:a2:39:b1:b6: 89:9a:e9:c1:d9:9a:b4:01:42:4e:2b:99:20:45:cc: ad:2a:a9:7f:94:74:52:90:b2:60:48:ce:d6:81:bf: 0e:68:1d:92:4b:12:05:a5:e4:f4:30:80:e6:3a:e3: 57:0a:1c:97:dd:71:1f:66:7e:d6:eb:d8:ca:f8:af: 59:d1:3e:00:04:0f:7c:a8:14:3a:65:af:ad:7b:a2: 35:ba:99:9e:3b:c1:d9:4b:75:c5:5a:9f:cc:62:d8: 03:37:7a:41:e9:2d:9d:8a:12:d6:12:14:f0:f1:5d: 02:43:10:e4:b4:da:a2:18:db:d6:81:96:6b:44:b4: 65:8e:a1:ae:b1:bb:8f:d9:2b:fa:48:5d:78:f6:64: 17:fa:e8:ab:29:97:0c:a7:42:10:3f:e9:09:15:13: 63:74:62:4e:e0:50:91:f4:3b:91:1e:68:59:28:39: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:39:64:7F:3F:52:E8:0B:66:70:9B:73:87:24:9E:E7:26:A8:19:5D X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:72:63:0d:d8:0c:e7:a4:4d:c7:b3:dd:64:a8:ee:1e:8a:c5: a3:a9:e5:10:96:8b:68:f6:4c:8c:31:c3:2b:b8:22:44:94:38: b4:50:e6:ee:42:23:7f:8a:a5:5a:ef:b6:af:86:f1:7b:a1:cf: 5b:4d:b2:a1:47:89:bd:d2:1b:b3:dd:0d:be:92:5c:94:8d:b6: 23:cf:88:14:c7:ca:a8:3c:70:a5:58:99:3c:0a:fb:33:ba:9d: 79:83:7b:b4:d5:fc:3c:c8:50:2f:15:40:b3:95:79:aa:aa:9e: c1:4a:33:23:c3:7f:3e:e4:a2:3c:11:07:b8:0a:56:73:cf:a5: cc:9e:91:ab:da:65:82:6e:3d:6c:b9:33:70:a8:16:02:e8:1c: 29:e6:1d:d5:a0:5c:8c:a5:b7:f0:62:91:44:cf:8c:df:60:f0: 1f:1e:a2:51:0a:d2:1e:1a:76:39:96:76:0b:5f:ce:cc:7b:ac: c5:d2:06:99:84:55:21:4a:06:a6:7b:46:a7:ec:6f:43:24:95: 68:06:79:3d:b5:fc:dc:46:07:c6:4b:88:4d:0b:58:e2:5a:ed: 32:3a:21:af:10:aa:10:02:7f:08:e7:4e:49:4a:63:da:ed:6a: 9e:7d:83:dc:f6:2b:94:0f:83:93:2b:74:4a:33:83:70:f3:9b: 4f:38:7e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjUxMjIyMjE0NzIxWhcNMjUxMjI5MjE0NzIxWjAYMRYwFAYD VQQDDA02OTQ5YmM2OS00NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hSLmXK2sx8eBrmDaV9S4Gt9Li7nrG86RdT2ESD1y4jT70t9Pr9eulo5EO3q V50a4mvbDoVhVy2u/tI4ahoz2Yw3hXtBbHI7jWTUM48pj6ijdkFoxKI5sbaJmunB 2Zq0AUJOK5kgRcytKql/lHRSkLJgSM7Wgb8OaB2SSxIFpeT0MIDmOuNXChyX3XEf Zn7W69jK+K9Z0T4ABA98qBQ6Za+te6I1upmeO8HZS3XFWp/MYtgDN3pB6S2dihLW EhTw8V0CQxDktNqiGNvWgZZrRLRljqGusbuP2Sv6SF149mQX+uirKZcMp0IQP+kJ FRNjdGJO4FCR9DuRHmhZKDkdGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk5ZH8/ UugLZnCbc4cknucmqBldMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxcmMN2AznpE3Hs91kqO4eisWjqeUQloto9kyMMcMruCJElDi0UObu QiN/iqVa77avhvF7oc9bTbKhR4m90huz3Q2+klyUjbYjz4gUx8qoPHClWJk8Cvsz up15g3u01fw8yFAvFUCzlXmqqp7BSjMjw38+5KI8EQe4ClZzz6XMnpGr2mWCbj1s uTNwqBYC6Bwp5h3VoFyMpbfwYpFEz4zfYPAfHqJRCtIeGnY5lnYLX87Me6zF0gaZ hFUhSgame0an7G9DJJVoBnk9tfzcRgfGS4hNC1jiWu0yOiGvEKoQAn8I505JSmPa 7WqefYPc9iuUD4OTK3RKM4Nw85tPOH6R -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:16 2025 by rpki-client