This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: 5lodXLMeFqIQS1JhPFd8oaQlJR1igvVfKeToadhOzWQ= Subject key identifier: A5:D2:76:B4:43:B0:B5:89:E9:FF:8F:CC:09:35:1E:AD:83:0E:15:C4 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 5974081EAED53F52C7BC5E4BB6460175A94EC493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 01E7 Signing time: Tue 09 Dec 2025 23:05:23 +0000 Manifest this update: Tue 09 Dec 2025 23:00:23 +0000 Manifest next update: Thu 11 Dec 2025 00:02:23 +0000 Files and hashes: 1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: LfF8fU+QkX6d5K08nkQmulF4/9qGZmobs40531E0EuE=) 2: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=) 3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: lh0a38K8JAllhrAcZvOqWh+3NCJyyj25skARvaE+EWo=) 4: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=) 5: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: DfepRXcwqAJe2OI4l1k/X/sAxVZIgVXIClhYMcFE63U=) 6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: baGBWXcDrtK+cAVKGJBMAmZee53ol0gPCj9NO0O551w=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 00:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:74:08:1e:ae:d5:3f:52:c7:bc:5e:4b:b6:46:01:75:a9:4e:c4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Dec 9 23:00:23 2025 GMT Not After : Dec 11 00:02:23 2025 GMT Subject: CN=A5D276B443B0B589E9FF8FCC09351EAD830E15C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:51:af:f5:f4:98:12:88:2f:e5:dd:c6:b0: 0b:0d:75:7c:aa:1e:df:86:1c:88:89:f1:1e:74:57: c2:02:91:52:a2:da:20:ad:47:3c:09:c4:6e:a8:05: 47:20:8f:5e:7d:7f:62:6b:d8:68:49:9e:67:16:4c: 5d:88:65:64:24:96:fa:61:a9:f9:fe:e7:26:77:fc: a5:2a:39:fb:ca:57:9b:e9:d1:3e:c5:8a:ba:9a:4e: ad:e1:b4:bd:2b:e7:6a:4b:e4:bf:ad:60:8c:46:02: da:a7:a0:d9:71:b9:b4:75:80:b8:64:01:9a:f7:0b: 44:23:d9:99:c3:56:51:23:dc:69:d7:3c:bc:b5:ff: 53:d8:1c:07:48:c0:b2:85:3a:b7:0a:47:23:e1:0e: ce:5c:bc:ce:65:35:6d:f8:07:68:ff:3e:34:c5:28: 94:53:7d:09:b7:f6:6c:ca:94:9a:ab:97:22:2a:40: f5:8d:db:4b:70:0a:3b:70:26:11:3f:c5:60:af:28: 00:75:22:7c:2a:f4:59:13:b4:ee:6d:fd:f6:17:5d: 64:01:50:8a:1d:20:9e:6b:fd:34:6c:52:ac:b1:d5: da:af:94:23:74:f8:4b:cc:03:b4:af:c5:88:a6:db: eb:89:26:fb:ca:1b:ab:db:da:75:54:3e:c4:5a:09: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D2:76:B4:43:B0:B5:89:E9:FF:8F:CC:09:35:1E:AD:83:0E:15:C4 X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f0:5f:77:1a:11:eb:5b:18:07:68:6a:cc:91:07:de:06:b2: bb:a0:87:f7:84:9d:09:07:4b:81:39:56:07:41:47:fd:b2:c7: 82:9a:75:3e:71:c6:96:cc:76:b1:c8:bf:99:4b:0f:84:4f:6b: 44:f6:d9:3c:09:92:f1:87:5b:a6:6e:bd:da:90:4e:dd:52:cd: 11:ce:47:6c:17:29:c2:58:84:16:cf:98:39:73:fd:e1:58:6e: c0:91:2e:dd:84:5e:48:43:7e:8c:a0:7d:eb:a0:e4:2b:61:ed: 28:f5:ad:ff:f6:e4:c8:e4:c9:52:db:21:45:36:e7:d0:a7:37: 5b:f1:94:69:8a:19:c8:0b:1b:79:3d:3f:02:89:3f:e5:6f:41: 53:4f:97:00:b0:12:fe:9b:7a:1c:5e:c3:da:bd:c8:3f:76:81: 4e:b4:6a:64:f7:d7:02:0f:98:f0:df:9f:bc:b2:8e:68:8d:a8: 91:18:4b:ba:0a:54:57:38:f9:ed:ad:8b:b8:d9:3e:db:15:ad: 53:c3:f3:a5:d4:c8:c9:eb:33:9c:4c:13:cc:ea:d3:22:76:b0: df:44:c4:51:d9:94:37:c7:f3:c3:3b:eb:a2:c3:d6:92:3e:4e: 93:ec:ee:91:64:32:ef:a9:6c:57:3d:91:e6:3d:77:65:14:34: f4:f4:bb:20 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWXQIHq7VP1LHvF5LtkYBdalOxJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MTIwOTIzMDAyM1oX DTI1MTIxMTAwMDIyM1owMzExMC8GA1UEAxMoQTVEMjc2QjQ0M0IwQjU4OUU5RkY4 RkNDMDkzNTFFQUQ4MzBFMTVDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKITUa/19JgSiC/l3cawCw11fKoe34YciInxHnRXwgKRUqLaIK1HPAnEbqgF RyCPXn1/YmvYaEmeZxZMXYhlZCSW+mGp+f7nJnf8pSo5+8pXm+nRPsWKuppOreG0 vSvnakvkv61gjEYC2qeg2XG5tHWAuGQBmvcLRCPZmcNWUSPcadc8vLX/U9gcB0jA soU6twpHI+EOzly8zmU1bfgHaP8+NMUolFN9Cbf2bMqUmquXIipA9Y3bS3AKO3Am ET/FYK8oAHUifCr0WRO07m399hddZAFQih0gnmv9NGxSrLHV2q+UI3T4S8wDtK/F iKbb64km+8obq9vadVQ+xFoJfp0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSl0na0 Q7C1ien/j8wJNR6tgw4VxDAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAZ/BfdxoR61sYB2hqzJEH3gayu6CH94SdCQdLgTlWB0FH/bLH gpp1PnHGlsx2sci/mUsPhE9rRPbZPAmS8Ydbpm692pBO3VLNEc5HbBcpwliEFs+Y OXP94VhuwJEu3YReSEN+jKB966DkK2HtKPWt//bkyOTJUtshRTbn0Kc3W/GUaYoZ yAsbeT0/Aok/5W9BU0+XALAS/pt6HF7D2r3IP3aBTrRqZPfXAg+Y8N+fvLKOaI2o kRhLugpUVzj57a2LuNk+2xWtU8PzpdTIyesznEwTzOrTInaw30TEUdmUN8fzwzvr osPWkj5Ok+zukWQy76lsVz2R5j13ZRQ09PS7IA== -----END CERTIFICATE-----Generated at Wed Dec 10 13:48:33 2025 by rpki-client