This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: PadFwG5BIVxd5wz5V9ttrxyVsXyh3oVZIrpI8Jpe8Cw= Subject key identifier: 1E:6A:32:66:26:C9:64:1F:3C:90:11:B5:C6:C1:41:CE:6F:63:DE:DC Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: 0142 Signing time: Tue 09 Dec 2025 02:49:10 +0000 Manifest this update: Tue 09 Dec 2025 02:49:10 +0000 Manifest next update: Tue 16 Dec 2025 02:49:10 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: eBammBFfZ/MFScIRGh34QW3KG5Un5Us6OOg/faVK0Mk=) 2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=) 3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=) 4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=) 5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 02:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Dec 9 02:49:10 2025 GMT Not After : Dec 16 02:49:10 2025 GMT Subject: CN=69378e26-11d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:9b:10:3e:0e:15:13:7d:24:7b:f2:3a:b6: 38:d3:37:2a:d1:8f:cb:ab:5f:98:20:e3:e4:aa:85: 80:c1:9e:3e:af:07:d3:b6:39:77:88:6d:22:e7:f1: c7:48:f7:70:cf:07:b0:b0:4a:ff:06:09:2d:b1:a9: d6:05:80:6e:7a:99:ee:46:99:39:04:10:94:8b:86: 23:b2:85:50:35:59:7a:2a:5e:e9:da:3b:5a:19:37: 17:ee:be:1f:c8:ba:ac:65:0b:eb:df:d9:8e:e2:85: b9:d4:f7:60:87:c6:17:63:56:5f:d6:38:be:82:8a: 24:8b:aa:45:a2:22:3d:55:d3:97:4e:ff:75:67:62: ea:cc:2f:ae:a4:d5:a2:f6:f3:b9:2c:6b:87:e8:44: 51:f7:db:97:05:6a:05:e7:f0:16:cf:74:9b:13:4b: a9:23:03:69:ff:74:53:9a:45:0c:f1:91:50:6d:32: 90:9c:c9:b8:80:8c:9c:8f:f4:61:6a:aa:0e:57:65: be:77:98:39:75:a5:87:b6:a9:9c:b8:9d:d1:05:3f: 55:31:0a:6e:d8:75:b0:3e:07:0d:c8:1a:5a:0d:5a: f4:49:d2:51:82:7b:ab:94:65:14:ac:db:7f:5f:08: 3c:5f:cf:ee:e0:5c:6c:09:34:0b:a5:a5:26:6e:97: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6A:32:66:26:C9:64:1F:3C:90:11:B5:C6:C1:41:CE:6F:63:DE:DC X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ee:e4:d7:15:f2:2f:f5:c8:c9:49:0d:fe:38:c9:0d:68:c2: 06:23:04:ce:e5:81:e5:82:24:9e:e4:11:77:d9:d4:be:d9:60: ec:f5:5d:1e:a4:a0:2e:d1:61:54:28:45:82:99:f1:05:ed:9a: 85:1c:1d:c5:69:fd:17:2c:8d:32:9a:31:ba:ec:82:d7:e1:3c: 6b:dc:a1:36:d0:a3:f0:cc:c4:58:80:f1:e4:7b:47:96:8b:2a: 83:33:ac:18:26:4a:e7:8d:64:79:4b:30:f5:48:dd:73:85:7d: 4d:17:15:5a:46:7a:6a:ca:4b:ff:80:02:c2:ae:1e:03:7e:8d: cd:ba:cc:49:18:41:38:5d:64:4e:8f:3a:1b:b6:31:38:35:22: 3b:fa:f0:4e:10:c1:97:b2:a3:01:ee:fa:cf:9c:77:fd:5e:19: b9:2f:02:12:42:72:6b:15:74:df:46:5a:b1:9b:2a:12:29:74: 32:46:f4:31:7d:bb:37:cf:73:6e:61:63:ad:92:e3:30:db:13: 16:b4:df:f2:9e:9b:0b:98:08:78:0f:c1:44:7a:c6:46:bb:e4: e9:90:d3:cc:33:9b:8c:21:3b:8c:3e:44:da:6f:c2:cd:e1:6e: af:6c:b7:69:a2:f7:42:9a:2c:ba:bb:e2:7f:2b:f7:36:ed:b8: 1c:d4:ea:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjUxMjA5MDI0OTEwWhcNMjUxMjE2MDI0OTEwWjAYMRYwFAYD VQQDEw02OTM3OGUyNi0xMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzybED4OFRN9JHvyOrY40zcq0Y/Lq1+YIOPkqoWAwZ4+rwfTtjl3iG0i5/HH SPdwzwewsEr/BgktsanWBYBuepnuRpk5BBCUi4YjsoVQNVl6Kl7p2jtaGTcX7r4f yLqsZQvr39mO4oW51Pdgh8YXY1Zf1ji+gooki6pFoiI9VdOXTv91Z2LqzC+upNWi 9vO5LGuH6ERR99uXBWoF5/AWz3SbE0upIwNp/3RTmkUM8ZFQbTKQnMm4gIycj/Rh aqoOV2W+d5g5daWHtqmcuJ3RBT9VMQpu2HWwPgcNyBpaDVr0SdJRgnurlGUUrNt/ Xwg8X8/u4FxsCTQLpaUmbpeRKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5qMmYm yWQfPJARtcbBQc5vY97cMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM7uTXFfIv9cjJSQ3+OMkNaMIGIwTO5YHlgiSe5BF32dS+2WDs9V0e pKAu0WFUKEWCmfEF7ZqFHB3Faf0XLI0ymjG67ILX4Txr3KE20KPwzMRYgPHke0eW iyqDM6wYJkrnjWR5SzD1SN1zhX1NFxVaRnpqykv/gALCrh4Dfo3NusxJGEE4XWRO jzobtjE4NSI7+vBOEMGXsqMB7vrPnHf9Xhm5LwISQnJrFXTfRlqxmyoSKXQyRvQx fbs3z3NuYWOtkuMw2xMWtN/ynpsLmAh4D8FEesZGu+TpkNPMM5uMITuMPkTab8LN 4W6vbLdpovdCmiy6u+J/K/c27bgc1Oqo -----END CERTIFICATE-----Generated at Fri Dec 12 02:31:41 2025 by rpki-client