This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: vzDt50rcsmoQqaAAQWMOC0cJFsIuwozLqbX5ImoHs1I= Subject key identifier: 33:D1:B1:AE:1A:9B:22:6F:CB:B4:2F:DB:E5:81:C8:D8:0C:70:B0:AC Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 0656 Signing time: Sat 20 Dec 2025 21:58:43 +0000 Manifest this update: Sat 20 Dec 2025 21:58:43 +0000 Manifest next update: Sat 27 Dec 2025 21:58:43 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: jSovZSDWUXGVZ2jPsUIRso2OxCQttoexBIm0WNKkBe4=) 2: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=) 3: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: HsxGKT/AjI8jr4OZJvk0BqTrzYCNl3TOedPqlsVo7ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: Dec 20 21:58:43 2025 GMT Not After : Dec 27 21:58:43 2025 GMT Subject: CN=69471c13-d510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:ab:f3:55:66:b2:46:a5:8c:bd:ff:6e:f9: ca:8e:ba:87:41:84:36:99:95:69:b6:ff:36:81:37: 07:b7:1d:57:9a:30:5e:74:b0:8c:29:61:7f:0b:b3: 43:37:f3:8c:d2:a9:7e:34:bb:6f:ca:e6:d2:5e:13: 5d:dc:27:6d:1f:58:5e:f1:ab:cf:86:db:bc:a8:6b: ad:05:aa:07:bc:35:e9:5a:51:c0:1c:a4:2b:60:d4: c3:b4:5c:55:29:f9:f0:96:ac:6d:7d:6d:3b:2b:51: 51:d1:25:b3:a0:8a:7a:e5:68:ad:91:a3:1d:93:2e: e1:60:ad:1b:e2:a2:d7:a1:5a:73:8e:cb:51:98:8a: fe:5a:c0:d2:3f:ff:59:c6:d3:e0:d7:38:75:90:88: 52:cc:61:f8:72:39:92:4d:7f:2f:47:19:d4:7a:4e: fa:47:c9:8a:e7:f1:d2:d9:b2:10:32:63:e7:c1:7d: a5:2d:e1:6c:c1:5d:e4:9b:e9:7a:cf:ac:65:65:fa: a0:cf:72:0f:29:c2:58:0b:ec:c1:1b:6f:66:11:15: 34:6a:9e:da:25:97:e1:ec:e6:80:92:cd:41:0a:e7: d8:72:55:37:3e:f8:d2:ba:9e:ef:05:7b:08:19:91: 5f:7d:83:d0:71:30:bb:e1:64:78:ff:fb:c1:9e:dc: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:B1:AE:1A:9B:22:6F:CB:B4:2F:DB:E5:81:C8:D8:0C:70:B0:AC X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c5:75:02:82:70:e6:68:51:28:6d:41:d9:05:d7:77:ed:de: cf:7e:81:e9:88:2d:be:20:79:ea:26:0a:1a:07:2f:e0:d2:2f: 98:56:69:c8:f9:4b:58:52:3d:33:7f:c2:ba:7d:33:15:87:5c: fd:96:a8:b3:23:8e:73:ae:a2:a2:54:8e:f0:e1:74:25:f4:e1: f0:9e:26:e4:3d:a4:35:7d:70:01:5b:7d:da:a2:89:c8:78:44: df:c2:4a:b1:df:da:34:7d:65:71:74:a7:ef:46:f9:44:03:da: ad:f0:af:8c:31:e1:0e:f8:d9:5d:c8:91:b4:ab:b3:48:2d:a2: bd:46:75:75:78:52:ee:8a:57:34:f5:1e:17:52:6a:5f:e0:92: 66:54:71:e9:32:f0:63:08:9f:d4:b3:31:f5:f9:55:0c:6d:82: 2e:07:94:41:11:d9:b0:d8:61:7d:e9:2c:74:19:43:0f:a4:75: 70:5d:5d:2b:17:aa:1c:b2:8f:05:c9:ab:d7:5c:fe:a2:f0:de: 4d:12:50:ee:f2:ee:c3:78:94:3f:13:29:db:52:98:c9:d1:77: b4:b2:10:28:48:c1:24:1e:9c:35:33:f0:c7:18:38:c5:3e:97: 39:8f:1c:00:db:e4:c0:d2:3c:76:9e:f5:5a:43:15:23:49:46: 45:8b:cc:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjUxMjIwMjE1ODQzWhcNMjUxMjI3MjE1ODQzWjAYMRYwFAYD VQQDDA02OTQ3MWMxMy1kNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy2r81VmskaljL3/bvnKjrqHQYQ2mZVptv82gTcHtx1XmjBedLCMKWF/C7ND N/OM0ql+NLtvyubSXhNd3CdtH1he8avPhtu8qGutBaoHvDXpWlHAHKQrYNTDtFxV KfnwlqxtfW07K1FR0SWzoIp65WitkaMdky7hYK0b4qLXoVpzjstRmIr+WsDSP/9Z xtPg1zh1kIhSzGH4cjmSTX8vRxnUek76R8mK5/HS2bIQMmPnwX2lLeFswV3km+l6 z6xlZfqgz3IPKcJYC+zBG29mERU0ap7aJZfh7OaAks1BCufYclU3PvjSup7vBXsI GZFffYPQcTC74WR4//vBntzSzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPRsa4a myJvy7Qv2+WByNgMcLCsMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSxXUCgnDmaFEobUHZBdd37d7PfoHpiC2+IHnqJgoaBy/g0i+YVmnI +UtYUj0zf8K6fTMVh1z9lqizI45zrqKiVI7w4XQl9OHwnibkPaQ1fXABW33aoonI eETfwkqx39o0fWVxdKfvRvlEA9qt8K+MMeEO+NldyJG0q7NILaK9RnV1eFLuilc0 9R4XUmpf4JJmVHHpMvBjCJ/UszH1+VUMbYIuB5RBEdmw2GF96Sx0GUMPpHVwXV0r F6ocso8FyavXXP6i8N5NElDu8u7DeJQ/EynbUpjJ0Xe0shAoSMEkHpw1M/DHGDjF Ppc5jxwA2+TA0jx2nvVaQxUjSUZFi8xR -----END CERTIFICATE-----Generated at Mon Dec 22 11:15:36 2025 by rpki-client