This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: iI7uUrYD2QNA+c2rj7T6+cNevL+5uTfiFcD0qpB1gBQ= Subject key identifier: 6D:27:20:EE:8C:E0:29:2D:A6:F9:31:98:48:89:3A:15:CA:86:5D:39 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: DD Signing time: Tue 23 Dec 2025 04:36:14 +0000 Manifest this update: Tue 23 Dec 2025 04:36:14 +0000 Manifest next update: Tue 30 Dec 2025 04:36:14 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: VUfed8kfTwLVKneArIRu4x92/EiVqTPWctuAet6bQ4s=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Dec 23 04:36:14 2025 GMT Not After : Dec 30 04:36:14 2025 GMT Subject: CN=694a1c3e-7836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:5a:55:70:bb:88:3e:8a:6f:ed:94:86:9e: 9e:29:78:04:19:db:9d:04:ac:41:83:c1:ca:66:09: 89:4f:df:5a:fe:ff:13:f0:5d:73:32:a2:53:d9:3d: 0c:46:79:a8:61:7a:88:b0:15:67:e2:3c:b1:70:02: 4f:43:09:98:d1:97:ca:f4:db:d0:14:9d:53:84:1c: c6:28:c9:60:6c:61:6e:bf:83:f4:71:c1:c8:25:d3: 9b:aa:df:ad:d2:53:96:63:1e:bc:fb:0e:91:10:c3: c0:7b:47:b2:13:5c:23:a2:86:44:9a:85:a7:fa:47: b8:7c:4d:a3:8e:48:db:e4:f6:94:0e:2c:8f:9f:a4: 06:32:d9:c8:0d:0b:8a:07:cc:30:13:4c:04:ca:22: 0a:17:8f:4b:9b:b4:e2:c5:51:6d:f4:5f:52:1b:b8: f5:22:23:de:87:b8:be:f5:62:e7:0d:e2:22:36:89: 15:65:49:22:f6:2a:7e:a7:5f:c8:e7:30:eb:d1:bb: d9:2e:fa:08:bf:5b:d0:ba:f8:46:35:c4:e7:8a:36: 62:58:7b:60:b6:43:51:93:b9:5f:b4:91:a2:5d:4a: da:97:3e:59:6e:21:25:bb:f3:6d:aa:d9:ec:0a:3e: d2:ae:33:bf:87:c0:5d:e2:83:b2:66:09:4b:12:c0: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:27:20:EE:8C:E0:29:2D:A6:F9:31:98:48:89:3A:15:CA:86:5D:39 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7c:8b:f9:41:51:10:46:da:4b:a4:7e:ef:7a:6b:74:49:c7: a8:52:59:3d:c2:9f:a1:81:22:62:55:58:7d:cf:4d:dd:2c:9c: 19:c9:0c:ac:54:80:9d:ac:aa:ef:e4:35:f1:db:5d:2b:9c:07: 19:d1:51:68:04:cd:67:19:2b:ab:86:e6:03:b8:53:8b:62:cc: 37:47:a0:b4:cb:18:8a:1e:e0:60:57:74:6a:73:90:47:7e:2e: f3:01:6d:fe:0d:dd:70:40:23:89:c8:09:16:83:49:74:c3:6e: be:0f:c7:7c:79:94:fb:24:fb:ae:55:6b:72:9e:e9:4c:b5:c1: 4a:b4:84:f9:51:48:ef:20:56:70:44:29:04:2b:17:b3:cf:be: dd:38:c1:9e:1d:5e:4f:93:36:3f:8d:f1:6d:18:d8:2a:81:b3: 26:98:e4:b4:17:c7:d8:2f:9e:5f:d5:ab:d7:7d:81:d8:14:3e: d2:d5:9b:71:4b:85:3c:c2:9b:05:28:13:ea:2d:2b:f0:48:f1: 24:5d:18:49:31:7c:a1:d2:e1:97:03:c2:80:e0:ed:c6:dc:85: cd:f4:f5:79:a4:0e:d7:34:33:52:88:bc:59:d5:f5:5c:37:fb: 51:c4:cd:03:40:38:88:6c:ef:6e:eb:48:33:78:7b:29:44:00: 7c:fc:1d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUxMjIzMDQzNjE0WhcNMjUxMjMwMDQzNjE0WjAYMRYwFAYD VQQDDA02OTRhMWMzZS03ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIlaVXC7iD6Kb+2Uhp6eKXgEGdudBKxBg8HKZgmJT99a/v8T8F1zMqJT2T0M RnmoYXqIsBVn4jyxcAJPQwmY0ZfK9NvQFJ1ThBzGKMlgbGFuv4P0ccHIJdObqt+t 0lOWYx68+w6REMPAe0eyE1wjooZEmoWn+ke4fE2jjkjb5PaUDiyPn6QGMtnIDQuK B8wwE0wEyiIKF49Lm7TixVFt9F9SG7j1IiPeh7i+9WLnDeIiNokVZUki9ip+p1/I 5zDr0bvZLvoIv1vQuvhGNcTnijZiWHtgtkNRk7lftJGiXUralz5ZbiElu/Ntqtns Cj7SrjO/h8Bd4oOyZglLEsCF8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0nIO6M 4CktpvkxmEiJOhXKhl05MB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKfIv5QVEQRtpLpH7vemt0SceoUlk9wp+hgSJiVVh9z03dLJwZyQys VICdrKrv5DXx210rnAcZ0VFoBM1nGSurhuYDuFOLYsw3R6C0yxiKHuBgV3Rqc5BH fi7zAW3+Dd1wQCOJyAkWg0l0w26+D8d8eZT7JPuuVWtynulMtcFKtIT5UUjvIFZw RCkEKxezz77dOMGeHV5PkzY/jfFtGNgqgbMmmOS0F8fYL55f1avXfYHYFD7S1Ztx S4U8wpsFKBPqLSvwSPEkXRhJMXyh0uGXA8KA4O3G3IXN9PV5pA7XNDNSiLxZ1fVc N/tRxM0DQDiIbO9u60gzeHspRAB8/B1x -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:30 2025 by rpki-client