This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: 2GxpvKqMhhKH6gQcjzA4ClVGUcjYji3sJY5yeLyGjGc= Subject key identifier: BA:A9:A9:F7:C5:B6:0D:38:BA:8D:49:B1:66:D5:4B:EF:6F:81:6D:06 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 04C7 Signing time: Sat 20 Dec 2025 23:10:09 +0000 Manifest this update: Sat 20 Dec 2025 23:10:09 +0000 Manifest next update: Sat 27 Dec 2025 23:10:09 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: BGXvm+1GSSG0EPltBpAOwotemsuq1BWQtuzMnn/EP0Q=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: OKD6dIXNlufXP/2KtQACOYy/fSTRLoZuLrkJHHyBmPs=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: 03xQSZXfxDyCzRtWljLHUlOT109SCX3SLMxm27msFJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Dec 20 23:10:09 2025 GMT Not After : Dec 27 23:10:09 2025 GMT Subject: CN=69472cd1-9f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:16:a8:96:ae:d4:e3:b1:25:4e:13:7b:ed:a2: a3:b8:34:26:b0:ea:5b:87:d1:47:ae:c5:74:68:82: c8:bd:76:c7:42:95:21:41:0d:8f:3e:80:2e:5f:82: c8:7d:e2:64:b6:dd:43:23:ee:87:96:d1:54:98:64: f8:dd:51:3e:33:4e:df:59:0c:1c:cf:88:59:50:74: e4:f1:16:16:44:46:94:fa:90:75:e1:d9:84:c3:02: 2a:b4:ee:23:3a:20:e5:b3:10:db:a3:a9:e8:e6:e4: 43:96:20:c4:bb:5b:6d:a8:86:fc:f8:64:5b:30:1b: d2:48:ed:1e:7f:d6:33:85:ce:d0:5e:5f:35:51:66: 34:f2:fd:3b:4e:9b:fb:9f:7c:c9:7d:64:2d:c2:04: b6:40:32:49:8d:b0:06:12:ce:9b:68:58:29:9b:75: 33:97:52:4a:42:a0:91:87:fa:e1:99:de:b9:3e:84: 31:44:ce:45:46:bd:de:82:50:48:e8:fd:6e:bc:92: 48:20:8c:29:7c:66:fa:eb:49:ca:46:a7:a1:fb:36: 4c:e1:c8:91:36:f5:2a:e5:2e:73:e9:c2:2a:c5:ee: e2:fa:6d:a8:41:38:88:94:29:d9:9d:a7:7d:8d:8d: dd:5d:c6:19:ca:0e:9b:45:a0:f6:cd:1f:38:5c:0d: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A9:A9:F7:C5:B6:0D:38:BA:8D:49:B1:66:D5:4B:EF:6F:81:6D:06 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:69:41:dc:40:4e:22:b9:52:ef:49:03:f2:90:7f:25:5e:90: d7:dd:bd:de:ef:12:30:8c:71:3c:77:ed:4b:5d:64:27:32:b3: 77:8d:26:b5:36:66:5e:1c:a7:16:47:71:44:7f:da:c9:c6:05: 5e:f4:7b:47:96:41:52:52:46:f5:d1:2e:5e:40:fd:fe:ea:a8: 7e:67:5b:d6:5e:c7:6a:2e:26:44:26:cb:30:9e:6d:22:50:51: 55:78:09:6d:c0:5c:a4:d2:c7:5d:51:ec:22:76:55:66:ca:6e: c5:a4:39:58:79:f2:d4:a7:15:c3:29:86:a4:22:3c:e1:4b:98: 6f:09:b5:0d:08:e7:ba:e2:21:fc:a6:ba:24:fb:b5:11:bc:8c: f7:f6:78:6e:34:97:da:08:a2:5a:9d:2f:fb:9c:96:99:c9:3d: e1:35:52:10:63:b8:84:15:d4:42:67:66:31:ce:ca:09:66:1e: 49:5f:99:0e:35:ee:45:99:a1:a6:b8:bb:4c:00:d8:5e:f8:99: e4:8f:2a:bf:2e:63:b9:a3:a1:72:50:b5:5e:66:6e:23:06:70: 3c:6a:06:a5:c4:98:bd:f4:a7:63:7f:6a:02:76:41:3d:8e:fc: a9:e5:7d:e1:63:c7:bd:38:b0:27:cd:eb:97:06:80:d6:56:d9: 56:74:83:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUxMjIwMjMxMDA5WhcNMjUxMjI3MjMxMDA5WjAYMRYwFAYD VQQDDA02OTQ3MmNkMS05ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xaolq7U47ElThN77aKjuDQmsOpbh9FHrsV0aILIvXbHQpUhQQ2PPoAuX4LI feJktt1DI+6HltFUmGT43VE+M07fWQwcz4hZUHTk8RYWREaU+pB14dmEwwIqtO4j OiDlsxDbo6no5uRDliDEu1ttqIb8+GRbMBvSSO0ef9Yzhc7QXl81UWY08v07Tpv7 n3zJfWQtwgS2QDJJjbAGEs6baFgpm3Uzl1JKQqCRh/rhmd65PoQxRM5FRr3eglBI 6P1uvJJIIIwpfGb660nKRqeh+zZM4ciRNvUq5S5z6cIqxe7i+m2oQTiIlCnZnad9 jY3dXcYZyg6bRaD2zR84XA1skQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqpqffF tg04uo1JsWbVS+9vgW0GMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANaUHcQE4iuVLvSQPykH8lXpDX3b3e7xIwjHE8d+1LXWQnMrN3jSa1 NmZeHKcWR3FEf9rJxgVe9HtHlkFSUkb10S5eQP3+6qh+Z1vWXsdqLiZEJsswnm0i UFFVeAltwFyk0sddUewidlVmym7FpDlYefLUpxXDKYakIjzhS5hvCbUNCOe64iH8 prok+7URvIz39nhuNJfaCKJanS/7nJaZyT3hNVIQY7iEFdRCZ2YxzsoJZh5JX5kO Ne5FmaGmuLtMANhe+Jnkjyq/LmO5o6FyULVeZm4jBnA8agalxJi99Kdjf2oCdkE9 jvyp5X3hY8e9OLAnzeuXBoDWVtlWdIM3 -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:55 2025 by rpki-client