This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: c9CClCYl+jny8krokaLxLItw4A88UZrzV3c72AysYKI= Subject key identifier: 43:3A:6D:AD:BA:E9:0D:C9:D0:7E:F3:C2:B3:39:69:59:9C:63:C9:87 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 02 Signing time: Sun 14 Dec 2025 16:57:32 +0000 Manifest this update: Sun 14 Dec 2025 16:57:32 +0000 Manifest next update: Sun 21 Dec 2025 16:57:32 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: f5UIRuSiJh+DwAL+euYII2CezrOzJceua0NOWl5hycs=) 2: F8846850D90D11F0AF9B1D207DD3641D.roa (hash: C8bVTV94pOOCxrg4kh5f59qcGeBnKrcTHRFtNag76kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Dec 14 16:57:32 2025 GMT Not After : Dec 21 16:57:32 2025 GMT Subject: CN=693eec7c-eb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:27:ca:f6:7f:71:d7:da:c0:2c:b6:18:72: c8:1e:45:df:08:67:70:56:ba:f6:b2:57:c9:cd:1a: f8:a8:b3:35:00:82:ad:3a:eb:e4:b5:72:14:47:53: 00:14:24:50:ad:77:40:e9:fb:c7:a2:dc:39:04:46: c6:79:3f:6f:57:c2:27:c6:b4:6e:d0:97:4f:76:5a: c5:72:34:ff:4a:a8:cc:6b:cc:99:c0:77:89:6d:93: d5:dd:4d:f6:f2:88:0d:8e:32:b7:03:28:47:01:24: 4a:16:8a:b6:98:d6:0f:b1:99:ce:46:06:1d:3e:36: ce:f3:ca:14:77:f4:3a:5e:da:41:05:3d:e8:07:5f: aa:4e:96:17:fc:23:7b:4b:fe:f8:ac:d2:2f:c2:cf: 04:41:24:75:0e:57:19:d3:a4:23:89:93:7a:ba:e2: c6:46:b1:39:6d:5b:6e:f0:e3:19:55:e5:85:49:20: 87:08:48:63:75:e5:44:5a:08:74:5e:86:d4:ee:5b: 88:8e:f8:79:66:7b:62:09:d3:53:98:fe:f1:1c:68: 7d:e4:2f:6d:d0:94:de:32:2c:0b:2c:ca:86:c3:c2: 14:05:50:8f:76:a8:93:72:3b:3c:14:a1:cd:10:5b: 3e:1c:20:4f:c7:89:22:89:00:56:71:25:52:b8:9c: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:6D:AD:BA:E9:0D:C9:D0:7E:F3:C2:B3:39:69:59:9C:63:C9:87 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:e9:63:82:60:67:53:b2:5a:23:d7:8f:58:e1:25:c3:25:b2: 47:50:5d:61:1a:3e:5c:95:5e:4b:28:d0:df:1f:68:f7:3b:d1: 0b:8b:39:da:84:2f:55:9d:02:ff:1f:b2:c7:b4:4d:54:4a:9b: cf:92:fc:2b:11:30:6e:3d:30:5a:8d:4c:e8:6b:6e:e0:2b:b3: e6:81:d2:8b:2c:28:9a:66:ed:b8:df:a6:dc:a0:bf:e6:b0:1e: c2:dc:95:ea:68:05:44:c2:eb:ca:b0:34:40:3c:4f:ca:2a:e1: d1:00:54:97:c7:86:98:df:b0:9d:73:bb:3a:bf:b8:57:55:70: 56:e4:b1:f6:89:88:45:6c:b7:38:94:6b:e9:e0:48:17:b1:e6: a8:4a:69:e0:e6:ed:7c:ca:c2:b7:7e:ff:77:d6:06:87:b4:60: 36:47:9b:83:1b:18:26:1a:71:e2:57:e5:2b:ed:36:ce:b6:a1: 71:36:e7:dc:82:46:06:a5:71:78:70:84:09:ce:e9:45:95:d0: cd:77:4d:fd:23:0c:be:a2:f3:7a:7c:2f:4a:9b:ea:4b:8d:a9: 29:93:33:c6:00:cd:07:ab:71:f6:dd:f4:95:a0:af:19:49:b7: db:22:92:99:eb:93:f2:19:2e:eb:cc:51:c8:9c:0a:8c:c1:ce: 46:b4:49:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNTEyMTQxNjU3MzJaFw0yNTEyMjExNjU3MzJaMBgxFjAUBgNV BAMMDTY5M2VlYzdjLWViNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUVifK9n9x19rALLYYcsgeRd8IZ3BWuvayV8nNGvioszUAgq066+S1chRHUwAU JFCtd0Dp+8ei3DkERsZ5P29XwifGtG7Ql092WsVyNP9KqMxrzJnAd4ltk9XdTfby iA2OMrcDKEcBJEoWiraY1g+xmc5GBh0+Ns7zyhR39Dpe2kEFPegHX6pOlhf8I3tL /vis0i/CzwRBJHUOVxnTpCOJk3q64sZGsTltW27w4xlV5YVJIIcISGN15URaCHRe htTuW4iO+Hlme2IJ01OY/vEcaH3kL23QlN4yLAssyobDwhQFUI92qJNyOzwUoc0Q Wz4cIE/HiSKJAFZxJVK4nDKrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQzptrbrp DcnQfvPCszlpWZxjyYcwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALvpY4JgZ1OyWiPXj1jhJcMlskdQXWEaPlyVXkso0N8faPc70QuLOdqE L1WdAv8fsse0TVRKm8+S/CsRMG49MFqNTOhrbuArs+aB0ossKJpm7bjfptygv+aw HsLclepoBUTC68qwNEA8T8oq4dEAVJfHhpjfsJ1zuzq/uFdVcFbksfaJiEVstziU a+ngSBex5qhKaeDm7XzKwrd+/3fWBoe0YDZHm4MbGCYaceJX5SvtNs62oXE259yC RgalcXhwhAnO6UWV0M13Tf0jDL6i83p8L0qb6kuNqSmTM8YAzQercfbd9JWgrxlJ t9sikpnrk/IZLuvMUcicCozBzka0Sak= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:35 2025 by rpki-client