This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: adZzB+gLT5TkhiSy/vvuYJilybuIn/rsgRRNpyoeJyo= Subject key identifier: EE:55:07:D3:C7:1F:BE:3C:08:72:25:70:E7:FF:C1:25:FC:68:DF:E2 Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 0242 Signing time: Tue 23 Dec 2025 00:51:13 +0000 Manifest this update: Tue 23 Dec 2025 00:51:13 +0000 Manifest next update: Tue 30 Dec 2025 00:51:13 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: 7pZQPdHbHp2O9sq+9nHtbA4UCdWWDo0bOjje/jOt8g8=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: uMgAAlcYJQ+sdnOnE1dyzqDnSreVvRuteObbE8brNz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: Dec 23 00:51:13 2025 GMT Not After : Dec 30 00:51:13 2025 GMT Subject: CN=6949e781-f20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:73:ce:7f:db:42:31:61:ad:4f:51:00:40: 7d:ab:67:b0:cd:64:f2:89:e0:43:44:ca:31:77:32: 30:ee:08:d6:3d:5e:19:bf:f0:0b:92:46:7c:3b:29: 42:3b:77:2f:87:e6:1d:e7:be:bf:82:b9:eb:4d:98: ae:27:3c:09:88:0f:81:06:d8:c5:87:2f:47:05:bd: 7d:f8:a7:d4:4b:b3:88:32:21:0e:41:12:33:b9:f1: 95:95:e1:34:e1:b2:86:26:3a:a5:5c:28:b2:d2:9a: e8:c3:a7:95:15:d6:cf:dd:62:64:8b:a9:2d:03:d1: cc:28:24:df:af:c2:87:fb:44:63:40:dc:77:3f:39: 32:ce:07:b5:8b:5a:11:72:9a:6f:26:f1:d9:46:5c: 83:82:64:09:dd:2d:e3:6c:0e:ee:ae:72:74:1c:de: 5e:b8:d5:a0:6c:20:51:37:25:ae:84:5f:a1:58:1f: b8:e2:c1:65:11:f3:35:e4:96:c9:a2:c8:ba:0c:c0: a5:9c:eb:37:b6:dd:b9:b3:c9:d8:9a:11:ad:74:63: 9f:9b:18:22:f9:82:a0:bb:28:0d:4e:3b:02:e3:92: 0e:d7:e3:42:7c:d6:95:46:c2:ad:c8:30:0d:69:26: 9b:21:3a:2c:20:ee:71:d8:41:f7:b5:07:22:a9:09: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:55:07:D3:C7:1F:BE:3C:08:72:25:70:E7:FF:C1:25:FC:68:DF:E2 X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:05:45:60:5e:68:7b:c4:f4:34:1c:1f:fa:31:1c:2f:4f:e1: 41:5b:8a:86:a4:bd:1d:fc:a4:c8:87:12:1a:30:27:5a:a0:54: 45:95:ec:67:90:45:67:ad:f9:65:2d:83:f4:b7:20:14:12:66: 6b:89:db:57:2d:78:23:2e:aa:8e:9b:51:06:14:e0:0f:6d:a0: 0e:18:8b:4d:24:ce:6c:d6:d1:fc:62:67:ad:8b:a0:4b:f8:54: ad:eb:83:c2:16:e0:56:d4:79:b5:df:b9:37:9d:c5:9f:3c:d8: dd:d1:d6:96:e7:82:79:21:30:0a:4c:d0:74:1f:a0:77:46:78: 2a:46:59:8f:ae:7b:a4:b6:3d:06:0e:67:d9:db:86:50:ca:3f: 31:c9:1e:d7:1c:d1:8d:95:67:8f:60:1a:10:80:19:29:8a:38: da:c5:e0:0d:f2:5f:95:eb:e3:b5:10:ac:31:60:68:47:b9:9a: 39:ef:66:6b:df:cc:f4:92:23:37:e2:e9:ac:80:13:5d:3a:0c: 0e:69:a6:09:d6:a4:22:31:5b:37:fe:5f:4b:24:ed:63:74:59: d0:d5:0d:ca:20:27:fb:4c:9c:fa:76:fd:d6:66:e7:c0:2e:78: 5f:d7:6f:21:65:6f:c7:a4:31:34:99:5b:09:9b:a2:09:03:34: 86:37:07:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUxMjIzMDA1MTEzWhcNMjUxMjMwMDA1MTEzWjAYMRYwFAYD VQQDDA02OTQ5ZTc4MS1mMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8tzzn/bQjFhrU9RAEB9q2ewzWTyieBDRMoxdzIw7gjWPV4Zv/ALkkZ8OylC O3cvh+Yd576/grnrTZiuJzwJiA+BBtjFhy9HBb19+KfUS7OIMiEOQRIzufGVleE0 4bKGJjqlXCiy0prow6eVFdbP3WJki6ktA9HMKCTfr8KH+0RjQNx3Pzkyzge1i1oR cppvJvHZRlyDgmQJ3S3jbA7urnJ0HN5euNWgbCBRNyWuhF+hWB+44sFlEfM15JbJ osi6DMClnOs3tt25s8nYmhGtdGOfmxgi+YKguygNTjsC45IO1+NCfNaVRsKtyDAN aSabITosIO5x2EH3tQciqQnqGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5VB9PH H748CHIlcOf/wSX8aN/iMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjBUVgXmh7xPQ0HB/6MRwvT+FBW4qGpL0d/KTIhxIaMCdaoFRFlexn kEVnrfllLYP0tyAUEmZridtXLXgjLqqOm1EGFOAPbaAOGItNJM5s1tH8Ymeti6BL +FSt64PCFuBW1Hm137k3ncWfPNjd0daW54J5ITAKTNB0H6B3RngqRlmPrnuktj0G DmfZ24ZQyj8xyR7XHNGNlWePYBoQgBkpijjaxeAN8l+V6+O1EKwxYGhHuZo572Zr 38z0kiM34umsgBNdOgwOaaYJ1qQiMVs3/l9LJO1jdFnQ1Q3KICf7TJz6dv3WZufA Lnhf128hZW/HpDE0mVsJm6IJAzSGNwdy -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:05 2025 by rpki-client