This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: 4aWh8XParGhNBuFRUUbZm6vMUl2ctYBp9Z5CmjF5N9w= Subject key identifier: F4:9F:3C:06:C8:C8:1F:1A:92:45:5C:F5:12:22:AA:EF:B5:12:F4:E9 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 352B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 3502 Signing time: Sat 06 Dec 2025 14:57:37 +0000 Manifest this update: Sat 06 Dec 2025 14:57:36 +0000 Manifest next update: Sat 13 Dec 2025 14:57:36 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: 2rwkXTvl1S40mZctMkzULdGvnpdbkv/W6jrcZPWMnKw=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: Vy0S41quK2iU71kwrTbOz/KoqscmH6wvDknm9n/QiBc=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: On/rjCt9+U6JtyKYuk47jkAjsn+YkzbVWBGb7O5oGfQ=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: Krev2+NvsTp5k57xzDaCtVpjuL2qov8uoa3n5krWGr0=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: SQf0F6/ovS4nuhxwCqP0bzz663+tFfshESdr8FqByA0=) 6: 70B22B22950D11F0ACB76B28C4F9AE02.roa (hash: rEXx1IeVQBnFO7DidP5CAzoHoXBLOcJ2lUWGfIOm15E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Dec 6 14:57:36 2025 GMT Not After : Dec 13 14:57:36 2025 GMT Subject: CN=69344461-5659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:2e:f3:f1:a9:3b:49:08:7c:db:cb:1a:b9: e8:a5:93:18:72:77:46:16:cb:29:56:c9:03:00:20: b3:2e:a6:d7:cf:c6:37:f4:1f:7f:56:69:aa:27:58: 9a:8c:ec:5a:95:ae:29:7a:93:5c:55:ba:7a:b0:f5: e9:d6:41:34:ee:e0:ca:77:bd:d7:eb:3d:91:08:89: 58:13:85:5f:dc:a8:76:d2:ed:92:7b:3a:b7:13:32: 49:da:50:d9:33:dd:62:6d:da:fa:ed:c2:13:8e:89: 61:3a:e5:9d:a0:30:c7:8d:29:a6:af:dc:e3:97:95: b7:6e:77:af:cf:c5:33:ba:9b:80:59:81:06:a2:87: e7:c2:6d:dc:35:5e:56:96:c5:e8:c1:a5:b1:44:d2: b5:b7:17:59:76:7a:50:83:e3:4a:29:1e:9a:4a:b0: 71:ca:19:a9:7f:e0:a1:2c:84:09:d0:da:48:b7:92: 9a:28:52:28:2c:ee:30:5b:04:71:7a:4d:da:fc:da: f6:16:c0:a5:69:2a:0e:5b:30:26:8f:44:f1:12:e6: 33:22:f6:64:64:61:d1:bc:d1:3b:44:31:ed:25:14: 04:7a:61:99:c3:42:89:e0:2d:70:be:2e:df:1f:61: 9b:9f:ef:bb:88:85:01:34:27:9a:8e:b0:87:d3:03: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:3C:06:C8:C8:1F:1A:92:45:5C:F5:12:22:AA:EF:B5:12:F4:E9 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:84:0c:50:95:8c:fd:82:02:0d:3c:89:ca:c9:50:b7:a5:1b: 8b:3e:cc:19:28:c9:b5:01:f0:c3:eb:1d:f8:74:80:a0:8e:81: 70:79:37:a1:96:2a:8c:07:eb:8c:5f:92:b4:4e:fe:52:37:ca: bf:6b:ef:2f:d6:d5:f3:2a:bd:47:03:7a:90:d3:13:3e:1c:29: ea:c2:31:55:35:dd:ff:a0:04:fb:39:58:5b:22:7d:b3:ae:5b: ca:01:b1:79:a6:b5:06:8a:55:4c:3c:b1:f1:7b:46:59:80:b1: ea:e3:5a:a4:11:91:72:3d:5f:ee:0e:4d:2a:a7:07:7d:4d:6d: 41:34:fe:e6:a1:d8:59:de:6e:3e:4a:73:a7:56:19:86:38:80: 41:98:73:6f:de:e0:96:6c:90:31:4c:81:03:74:04:86:de:32: ea:63:d7:a1:25:8c:a0:80:8d:d1:1d:9a:d1:d8:a8:9d:7e:83: 59:a8:5a:25:f2:16:f5:07:52:0a:e9:1a:db:99:c7:6e:21:3b: 9a:ac:9b:e9:d6:a9:3d:81:38:e7:2d:cb:e6:4f:64:6f:af:85: f1:16:dc:1b:01:19:d4:e8:d8:38:c3:06:b5:a8:4f:54:9e:72: be:d1:e4:33:3d:64:f3:7f:85:dd:7d:d8:6f:89:b6:94:d3:29: 8d:53:6f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUxMjA2MTQ1NzM2WhcNMjUxMjEzMTQ1NzM2WjAYMRYwFAYD VQQDEw02OTM0NDQ2MS01NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTMu8/GpO0kIfNvLGrnopZMYcndGFsspVskDACCzLqbXz8Y39B9/VmmqJ1ia jOxala4pepNcVbp6sPXp1kE07uDKd73X6z2RCIlYE4Vf3Kh20u2Sezq3EzJJ2lDZ M91ibdr67cITjolhOuWdoDDHjSmmr9zjl5W3bnevz8UzupuAWYEGoofnwm3cNV5W lsXowaWxRNK1txdZdnpQg+NKKR6aSrBxyhmpf+ChLIQJ0NpIt5KaKFIoLO4wWwRx ek3a/Nr2FsClaSoOWzAmj0TxEuYzIvZkZGHRvNE7RDHtJRQEemGZw0KJ4C1wvi7f H2Gbn++7iIUBNCeajrCH0wNICQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSfPAbI yB8akkVc9RIiqu+1EvTpMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALhAxQlYz9ggINPInKyVC3pRuLPswZKMm1AfDD6x34dICgjoFweTeh liqMB+uMX5K0Tv5SN8q/a+8v1tXzKr1HA3qQ0xM+HCnqwjFVNd3/oAT7OVhbIn2z rlvKAbF5prUGilVMPLHxe0ZZgLHq41qkEZFyPV/uDk0qpwd9TW1BNP7modhZ3m4+ SnOnVhmGOIBBmHNv3uCWbJAxTIEDdASG3jLqY9ehJYyggI3RHZrR2KidfoNZqFol 8hb1B1IK6RrbmcduITuarJvp1qk9gTjnLcvmT2Rvr4XxFtwbARnU6Ng4wwa1qE9U nnK+0eQzPWTzf4XdfdhvibaU0ymNU28s -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:39 2025 by rpki-client