This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: nbyFG+2L6cSUnTKO8bRpvzRLMEZ9SU2RnChtWkYu/7U= Subject key identifier: 9B:F7:D0:24:52:E8:3F:00:A9:84:14:BA:FD:4E:46:F6:A1:3D:82:2F Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 097E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 0976 Signing time: Mon 22 Dec 2025 19:28:23 +0000 Manifest this update: Mon 22 Dec 2025 19:28:22 +0000 Manifest next update: Mon 29 Dec 2025 19:28:22 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: rrQXu5vjlmKsW8Q7Oy0lFp4MGAl7Em6NpTGxitsu6lo=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2430 (0x97e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Dec 22 19:28:22 2025 GMT Not After : Dec 29 19:28:22 2025 GMT Subject: CN=69499bd7-ef4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:4f:73:b1:d2:1e:53:b8:0f:61:60:95:04: 54:70:bd:fd:3b:14:f7:5f:29:33:06:89:e3:28:c2: ae:12:2a:69:e1:bf:42:67:0a:a7:45:33:28:5f:ed: 77:bf:43:df:84:4b:99:68:b1:63:aa:7e:13:00:ae: bc:d5:56:8a:08:f9:57:2c:04:fd:6a:9e:5b:d8:ae: 5c:a1:e4:a9:98:cb:74:7c:b0:49:19:00:01:47:cc: 10:fa:5c:10:5c:8e:33:82:d7:30:69:98:a0:45:f4: 01:a5:41:bd:b9:9e:57:0f:51:24:87:be:c0:b7:de: cf:51:99:70:8b:26:0e:4c:1b:e5:c0:89:3f:81:65: 20:42:c5:67:a8:ce:1e:e6:b3:92:14:ab:c9:87:7c: b5:0d:7b:c3:7c:a3:d4:1e:61:b5:7b:ad:e1:a1:b7: 0d:27:bb:09:b5:c8:e4:d1:d7:f1:4b:af:c0:72:a6: 37:eb:7f:44:ba:5f:01:49:20:22:c1:e4:e9:c7:db: c7:38:07:bc:42:16:12:c6:bb:9d:a7:06:0d:fc:68: f4:de:6a:f3:06:9e:d6:88:04:57:ef:cd:3d:d8:a2: 0d:f3:ae:2e:81:d2:86:77:df:8a:5f:28:99:bf:16: 2a:a5:7a:0d:89:80:d8:a0:84:3d:cc:ab:28:2c:5d: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F7:D0:24:52:E8:3F:00:A9:84:14:BA:FD:4E:46:F6:A1:3D:82:2F X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d5:d6:8d:49:37:6d:a1:22:01:0e:eb:5f:e5:86:f5:2b:f0: 5e:cc:16:e1:0b:12:df:31:3f:8c:5e:73:b7:9a:ff:11:00:2f: 1f:a0:70:36:05:92:11:b5:1d:63:22:81:78:a3:b4:91:e5:86: 0b:bc:fb:02:fa:99:fe:7d:ae:16:97:2a:b4:c3:58:22:5a:9c: 7b:0f:41:9f:2c:8a:f5:b2:23:17:8d:cf:ba:27:36:77:2c:3c: df:20:34:49:a0:a4:76:99:b9:4e:47:3d:92:21:9c:33:4c:8b: 51:f8:d3:a4:7e:69:6d:53:65:61:a1:c3:39:73:92:ff:e6:2b: 25:7f:c1:a2:e7:db:66:11:a5:ae:50:1d:af:ce:a4:91:b1:cd: 7a:6b:73:78:07:2c:69:d3:e4:23:a6:75:56:f0:7e:aa:77:eb: 78:86:a7:03:fd:7c:3f:27:d4:ec:b5:aa:a1:fd:8a:33:c9:27: ed:ca:b0:7e:37:b0:d0:0f:e0:90:ac:f1:fa:30:80:10:8a:35: ec:7d:cd:1c:aa:03:3b:83:ba:07:b7:10:26:0c:6d:ab:11:1d: 47:01:d9:87:fd:4f:33:ee:27:ba:2b:f6:46:0a:c5:11:f9:cf: 73:e9:ef:5c:9b:de:2c:54:a0:33:fc:cd:98:f0:b6:c8:e2:03: b9:52:74:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjUxMjIyMTkyODIyWhcNMjUxMjI5MTkyODIyWjAYMRYwFAYD VQQDDA02OTQ5OWJkNy1lZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsetPc7HSHlO4D2FglQRUcL39OxT3XykzBonjKMKuEipp4b9CZwqnRTMoX+13 v0PfhEuZaLFjqn4TAK681VaKCPlXLAT9ap5b2K5coeSpmMt0fLBJGQABR8wQ+lwQ XI4zgtcwaZigRfQBpUG9uZ5XD1Ekh77At97PUZlwiyYOTBvlwIk/gWUgQsVnqM4e 5rOSFKvJh3y1DXvDfKPUHmG1e63hobcNJ7sJtcjk0dfxS6/AcqY3639Eul8BSSAi weTpx9vHOAe8QhYSxrudpwYN/Gj03mrzBp7WiARX78092KIN864ugdKGd9+KXyiZ vxYqpXoNiYDYoIQ9zKsoLF28YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJv30CRS 6D8AqYQUuv1ORvahPYIvMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD1daNSTdtoSIBDutf5Yb1K/BezBbhCxLfMT+MXnO3mv8RAC8foHA2 BZIRtR1jIoF4o7SR5YYLvPsC+pn+fa4Wlyq0w1giWpx7D0GfLIr1siMXjc+6JzZ3 LDzfIDRJoKR2mblORz2SIZwzTItR+NOkfmltU2VhocM5c5L/5islf8Gi59tmEaWu UB2vzqSRsc16a3N4Byxp0+QjpnVW8H6qd+t4hqcD/Xw/J9Tstaqh/YozySftyrB+ N7DQD+CQrPH6MIAQijXsfc0cqgM7g7oHtxAmDG2rER1HAdmH/U8z7ie6K/ZGCsUR +c9z6e9cm94sVKAz/M2Y8LbI4gO5UnTX -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:43 2025 by rpki-client