This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: FQzh0ReHY8MDlbkWCQnSOxuWTpjlt3luopX9j+S+Ja0= Subject key identifier: AD:F4:5E:55:1A:89:28:29:46:FD:84:F4:34:1B:6C:AC:B6:09:A3:F5 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B9A Signing time: Mon 22 Dec 2025 18:31:12 +0000 Manifest this update: Mon 22 Dec 2025 18:31:11 +0000 Manifest next update: Mon 29 Dec 2025 18:31:11 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: 3l+QQhgr947f341AxtZRmrinKr/9kQ+BpEYQCkiSA1Y=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2980 (0xba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Dec 22 18:31:11 2025 GMT Not After : Dec 29 18:31:11 2025 GMT Subject: CN=69498e70-d7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:53:ef:5a:4c:55:f8:2b:f0:8f:dd:19:b8: 7c:9c:22:8d:ac:3c:9f:bc:cb:c9:ab:c9:24:9a:16: 75:c5:a4:ca:73:ff:e1:94:4f:36:d1:c9:17:fb:db: c9:05:2c:1f:b2:53:6d:62:fa:a2:a3:5e:18:fc:c0: 41:2d:13:f2:b1:97:82:9b:20:12:97:73:05:47:05: 75:d2:bf:76:09:0e:47:6a:eb:60:e3:b6:b2:0b:f8: 2f:4c:96:41:4a:10:b2:ff:cd:f3:3a:79:55:52:ae: bc:4d:c1:3d:f1:aa:c9:43:dd:02:54:be:30:9d:e2: bb:cf:4d:bb:94:88:81:aa:90:53:92:82:a8:4b:a8: 81:a3:be:f9:cf:af:e1:a9:a4:e9:86:f5:fb:c9:44: d9:5d:73:8d:ea:c5:5a:ca:2a:15:61:86:66:d8:16: ce:14:a9:a3:6f:57:e7:2a:ce:80:49:c9:9c:84:d4: 1f:99:f7:81:7d:1d:ee:5b:ef:71:aa:91:3e:b4:8f: e6:61:7b:05:96:61:ab:8c:63:eb:c7:b6:20:16:7d: 79:f4:f9:c3:d7:50:19:24:5d:50:d7:63:e7:bd:3e: 06:5d:5e:e0:7d:3d:7d:cb:62:f2:3b:c3:a0:58:d8: 63:ec:2c:77:12:f1:c3:8b:27:fc:b4:d4:8e:4a:98: 86:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:5E:55:1A:89:28:29:46:FD:84:F4:34:1B:6C:AC:B6:09:A3:F5 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:70:70:91:15:ea:62:d1:5e:4d:67:50:e3:ae:0c:79:10:12: 15:99:27:fa:86:1b:33:ed:68:60:15:61:01:f0:ad:c2:38:bd: 2f:33:20:fa:5a:a7:5a:fe:da:92:b5:fb:8c:32:ca:1a:03:9f: 7c:e9:6c:43:8d:6c:e6:6a:a4:95:bf:f3:16:57:de:d5:28:56: 81:fb:73:fe:bd:02:85:f0:25:a6:ae:26:da:43:b7:56:1b:b5: f3:88:6a:6c:a7:3a:d6:9d:53:9e:3d:6c:e3:cb:52:00:ac:dc: 9f:eb:34:bc:b5:6c:46:24:3f:ab:36:46:e9:a7:fc:9f:ea:62: ae:74:34:8f:00:7f:75:fb:0e:7a:5b:bb:c7:74:03:63:ec:9f: 9d:80:32:9b:15:78:b4:6b:fe:a5:50:3f:2d:7c:69:77:fa:6e: 3a:83:67:24:97:4d:fb:83:8b:b4:6c:4f:a9:db:a9:8e:7f:74: 7f:c5:67:4e:47:c2:e1:e4:aa:6a:67:93:a9:75:ec:75:2e:72: 4c:14:f5:aa:0a:0e:64:76:a9:5d:76:21:bd:41:bc:a0:75:42: c3:06:ed:b4:7d:b3:c4:13:a1:1e:d4:33:79:0d:0a:f7:10:e0: 48:dd:e2:da:a3:6c:dd:ed:c3:ed:99:30:35:09:10:69:ed:48: 9e:29:28:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUxMjIyMTgzMTExWhcNMjUxMjI5MTgzMTExWjAYMRYwFAYD VQQDDA02OTQ5OGU3MC1kN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vFT71pMVfgr8I/dGbh8nCKNrDyfvMvJq8kkmhZ1xaTKc//hlE820ckX+9vJ BSwfslNtYvqio14Y/MBBLRPysZeCmyASl3MFRwV10r92CQ5Hautg47ayC/gvTJZB ShCy/83zOnlVUq68TcE98arJQ90CVL4wneK7z027lIiBqpBTkoKoS6iBo775z6/h qaTphvX7yUTZXXON6sVayioVYYZm2BbOFKmjb1fnKs6AScmchNQfmfeBfR3uW+9x qpE+tI/mYXsFlmGrjGPrx7YgFn159PnD11AZJF1Q12PnvT4GXV7gfT19y2LyO8Og WNhj7Cx3EvHDiyf8tNSOSpiGawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK30XlUa iSgpRv2E9DQbbKy2CaP1MB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6cHCRFepi0V5NZ1Djrgx5EBIVmSf6hhsz7WhgFWEB8K3COL0vMyD6 Wqda/tqStfuMMsoaA5986WxDjWzmaqSVv/MWV97VKFaB+3P+vQKF8CWmribaQ7dW G7XziGpspzrWnVOePWzjy1IArNyf6zS8tWxGJD+rNkbpp/yf6mKudDSPAH91+w56 W7vHdANj7J+dgDKbFXi0a/6lUD8tfGl3+m46g2ckl037g4u0bE+p26mOf3R/xWdO R8Lh5KpqZ5Opdex1LnJMFPWqCg5kdqlddiG9QbygdULDBu20fbPEE6Ee1DN5DQr3 EOBI3eLao2zd7cPtmTA1CRBp7UieKSha -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:27 2025 by rpki-client