This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft File: E5kSHmqxW_iSv4n71dqfNIaDl_g.mft (raw, json) Hash identifier: ltPVSyYCR7JX7bjsAXCas9BIJG4WuU7Njk+b6APqCgM= Subject key identifier: 3F:5E:BD:F9:F2:32:34:0A:B3:9D:A4:AB:D4:6C:DE:D3:76:D8:EC:26 Authority key identifier: 13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8 Certificate issuer: /CN=A91DA736/serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft Manifest number: 48 Signing time: Tue 23 Dec 2025 06:13:38 +0000 Manifest this update: Tue 23 Dec 2025 06:13:38 +0000 Manifest next update: Tue 30 Dec 2025 06:13:38 +0000 Files and hashes: 1: E5kSHmqxW_iSv4n71dqfNIaDl_g.crl (hash: VXPNJxiIOKzHZrWSJt5bDNgPJO4aw8ojFamOqf3W19E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8 Validity Not Before: Dec 23 06:13:38 2025 GMT Not After : Dec 30 06:13:38 2025 GMT Subject: CN=694a3312-a5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:70:fc:ec:a9:a9:f2:d3:28:2b:79:4c:4c: 2b:c4:3e:e0:ab:d2:0e:cd:9f:6d:5c:1d:8f:ee:38: a1:d8:30:92:28:d9:21:81:81:d3:71:f2:54:c9:5a: 4d:a9:01:1f:dc:b2:dd:ea:68:14:a1:6b:45:c2:06: 9e:5d:32:b4:c8:76:52:02:56:8f:bb:03:6d:d6:55: 8b:55:03:91:d2:fa:67:92:35:ab:92:0f:8c:36:c3: cf:aa:0a:3f:b6:7c:08:8d:10:3d:0c:0c:83:19:36: 44:c9:b7:18:96:4f:27:ef:e0:ba:5d:54:ba:6b:a4: 17:5a:00:68:26:e0:6d:de:71:40:6c:6e:c8:1c:5f: f9:d9:f7:be:a5:67:f1:d8:b7:0a:22:99:a9:30:aa: eb:52:95:62:94:b0:3e:d6:fb:52:ff:3f:f3:18:77: 8f:fe:f5:ec:0a:b2:09:18:ac:62:53:cf:37:a7:e6: c0:dc:14:92:27:7c:6b:0a:c6:28:e8:b7:80:3a:dd: be:7f:21:93:b4:a0:cd:e3:e2:23:f9:bd:91:8f:ad: d0:d2:0c:0d:e0:49:1a:ad:62:1e:ea:c2:33:37:f1: 33:1f:2d:15:8b:be:0b:23:40:d6:68:a2:b6:22:53: 03:0e:8b:1c:21:04:7f:80:2e:f1:e9:f1:75:36:55: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5E:BD:F9:F2:32:34:0A:B3:9D:A4:AB:D4:6C:DE:D3:76:D8:EC:26 X509v3 Authority Key Identifier: keyid:13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2a:0b:7a:fc:bd:af:c0:20:99:90:c9:14:a1:01:fa:4d:8a: 83:d6:3b:3e:b8:26:70:b4:99:c0:49:bc:53:f6:af:20:0c:35: 7b:06:65:36:38:e2:a2:e6:5d:6c:ff:07:c4:fc:86:bc:04:ae: 46:9d:46:0a:47:73:dc:4b:37:0c:de:57:c3:73:84:d4:17:0a: 76:a5:ed:85:d5:ec:b5:aa:e7:c8:5a:99:d1:bb:8a:1f:6c:4e: 4d:81:96:7e:bb:48:2f:b0:c9:90:ff:bf:81:15:d9:58:82:36: 46:9a:85:00:88:e4:90:4d:04:1b:7d:72:14:d8:f2:c1:8e:36: c2:5a:f3:c4:12:c5:2e:6a:9e:d6:cf:25:f5:8e:fb:9c:1f:b0: 23:70:fc:bb:c5:ab:77:95:e1:c7:d3:cb:1d:cf:be:16:41:fe: 20:7e:53:d4:42:6b:e8:b2:4e:f4:ec:f9:82:53:a5:22:30:6a: a4:b9:7b:eb:98:2c:cb:e4:6a:42:bc:1a:f3:a0:33:df:1a:63: 36:0c:01:6d:d0:d3:21:71:15:72:0d:07:23:6c:2b:90:dd:88: 23:18:df:8f:f8:6f:d1:60:55:9c:0c:43:43:49:2b:b3:eb:4b: 17:9b:66:4c:67:e7:ea:f3:a0:40:db:22:46:28:e2:a0:12:eb: e7:3d:59:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoMTM5OTEyMUU2QUIxNUJGODkyQkY4OUZCRDVEQTlGMzQ4 NjgzOTdGODAeFw0yNTEyMjMwNjEzMzhaFw0yNTEyMzAwNjEzMzhaMBgxFjAUBgNV BAMMDTY5NGEzMzEyLWE1YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC20nD87Kmp8tMoK3lMTCvEPuCr0g7Nn21cHY/uOKHYMJIo2SGBgdNx8lTJWk2p AR/cst3qaBSha0XCBp5dMrTIdlICVo+7A23WVYtVA5HS+meSNauSD4w2w8+qCj+2 fAiNED0MDIMZNkTJtxiWTyfv4LpdVLprpBdaAGgm4G3ecUBsbsgcX/nZ976lZ/HY twoimakwqutSlWKUsD7W+1L/P/MYd4/+9ewKsgkYrGJTzzen5sDcFJInfGsKxijo t4A63b5/IZO0oM3j4iP5vZGPrdDSDA3gSRqtYh7qwjM38TMfLRWLvgsjQNZoorYi UwMOixwhBH+ALvHp8XU2VdTfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP169+fIy NAqznaSr1Gze03bY7CYwHwYDVR0jBBgwFoAUE5kSHmqxW/iSv4n71dqfNIaDl/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzlDODdGMzg0NzMy MTExRjA4MUQ4QkUwQ0M0RjlBRTAyL0U1a1NIbXF4V19pU3Y0bjcxZHFmTklhRGxf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTVrU0htcXhXX2lTdjRuNzFkcWZOSWFEbF9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzlDODdGMzg0NzMyMTExRjA4MUQ4QkUwQ0M0RjlBRTAyL0U1a1NIbXF4V19p U3Y0bjcxZHFmTklhRGxfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAAqC3r8va/AIJmQyRShAfpNioPWOz64JnC0mcBJvFP2ryAMNXsGZTY4 4qLmXWz/B8T8hrwErkadRgpHc9xLNwzeV8NzhNQXCnal7YXV7LWq58hamdG7ih9s Tk2Bln67SC+wyZD/v4EV2ViCNkaahQCI5JBNBBt9chTY8sGONsJa88QSxS5qntbP JfWO+5wfsCNw/LvFq3eV4cfTyx3PvhZB/iB+U9RCa+iyTvTs+YJTpSIwaqS5e+uY LMvkakK8GvOgM98aYzYMAW3Q0yFxFXINByNsK5DdiCMY34/4b9FgVZwMQ0NJK7Pr SxebZkxn5+rzoEDbIkYo4qAS6+c9WWA= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:18 2025 by rpki-client