This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json) Hash identifier: +KcVP8XVAk8n12Ff4pslMwgiOQcKBazJsuPDe0cYqOY= Subject key identifier: B0:B1:4E:B6:A0:8B:10:4E:5A:18:01:AE:A9:16:7D:F7:F6:00:F5:F8 Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft Manifest number: 0B1A Signing time: Tue 16 Dec 2025 19:03:17 +0000 Manifest this update: Tue 16 Dec 2025 19:03:17 +0000 Manifest next update: Tue 23 Dec 2025 19:03:17 +0000 Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: yxrP8fdGvwblH4LrRCdQxzIFoJQtyXzVEvyctAITimA=) 2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 0ivrrhOuD8rnlDAlVKRxt/gAlv7oVMt+OxJAV2VhnEQ=) 3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: Qz146VM4QvlDNRuGBcUC54NXkp571EsnSbuspPg45Lo=) 4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: eJEKTYYjPmJgzHgGsGpnpxLPRqE5UDEGdtp3iWb4OV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 19:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Validity Not Before: Dec 16 19:03:17 2025 GMT Not After : Dec 23 19:03:17 2025 GMT Subject: CN=6941acf5-e1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:8d:fc:58:33:a4:2d:91:aa:b9:71:a4:1e: 1d:1f:f4:20:bb:0a:dc:2b:c2:42:9a:e3:5a:4a:62: 29:4c:fc:ba:b1:cf:ec:bf:f4:ac:04:b6:61:16:11: d9:d0:8e:7b:90:d0:0a:a6:81:09:9f:95:e5:16:7a: 50:9e:6d:4a:2b:c0:90:bb:f6:a3:2b:29:15:9d:5e: e8:50:86:dc:01:47:8c:bd:3e:1c:e7:ed:04:73:34: 70:86:83:4c:75:09:b3:80:a4:8f:23:4e:3c:a4:86: 2b:47:88:bf:de:20:53:b5:66:28:88:0f:89:14:8e: 1a:5d:7d:dd:9b:7d:61:43:b7:8c:70:dd:d7:35:7d: b5:e7:84:61:a1:c0:25:0b:83:21:73:05:f0:1d:ee: bf:60:a8:03:10:f8:df:54:c3:5f:1a:36:f0:96:6a: b9:e7:45:ab:26:a2:dd:39:eb:26:e7:1e:b0:ae:ad: 12:06:d4:3b:c9:98:63:f9:3d:05:70:4a:17:c2:8f: 44:b1:61:c2:80:6d:50:90:ca:18:cc:e3:96:c6:73: 79:f4:4e:90:5d:95:2d:e2:27:0b:13:d3:9e:13:b2: 6a:6a:5a:f7:71:9d:35:3f:bc:7a:81:be:55:24:3f: 12:64:3d:42:10:a1:f2:e5:20:35:b5:ff:58:36:37: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B1:4E:B6:A0:8B:10:4E:5A:18:01:AE:A9:16:7D:F7:F6:00:F5:F8 X509v3 Authority Key Identifier: keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6d:a4:71:e7:aa:52:7e:cf:3b:9b:65:f8:d0:d3:65:ed:69: ea:e1:f5:c8:c5:ea:c6:f9:cd:37:19:f6:ed:8a:ae:3f:e0:29: 84:79:9e:ed:c1:71:9b:d7:4a:2a:94:6f:4c:da:2c:2a:80:b5: 81:19:65:d0:41:83:4d:e1:2a:7a:36:a2:ca:27:14:f8:51:dc: 97:05:98:ec:b6:91:9b:ee:84:19:7c:b0:57:6a:59:bf:9c:78: 21:23:89:db:dd:6d:79:b6:7c:b3:83:37:f5:31:09:1a:46:8d: aa:17:95:5b:44:1f:1f:8a:0c:79:5e:08:c5:72:07:0e:ca:b1: 1d:bf:a2:a5:cc:77:5a:76:43:d8:a6:7c:f0:d3:17:bf:d6:7a: 3f:4d:3e:7c:0e:57:0c:7d:35:24:13:37:2f:2e:a7:b4:27:db: 1f:7f:70:b5:1b:65:c5:d7:55:39:5e:48:d0:88:16:24:ae:ac: 22:a2:52:cc:a0:78:1f:d6:32:1f:92:7f:3e:3b:eb:1b:f6:37: 6b:70:99:bc:07:a6:3e:5f:46:3b:98:f7:d6:0a:7a:e4:22:b9: 48:9f:c8:6c:13:b3:fe:a8:a0:70:08:0b:bf:af:27:39:ab:dd: 86:b2:24:3e:5a:8a:06:86:5a:ba:0f:17:4e:86:1d:9c:82:c8: 91:c9:9c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz OTBGQjEzMzEwHhcNMjUxMjE2MTkwMzE3WhcNMjUxMjIzMTkwMzE3WjAYMRYwFAYD VQQDDA02OTQxYWNmNS1lMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhON/FgzpC2RqrlxpB4dH/QguwrcK8JCmuNaSmIpTPy6sc/sv/SsBLZhFhHZ 0I57kNAKpoEJn5XlFnpQnm1KK8CQu/ajKykVnV7oUIbcAUeMvT4c5+0EczRwhoNM dQmzgKSPI048pIYrR4i/3iBTtWYoiA+JFI4aXX3dm31hQ7eMcN3XNX2154RhocAl C4MhcwXwHe6/YKgDEPjfVMNfGjbwlmq550WrJqLdOesm5x6wrq0SBtQ7yZhj+T0F cEoXwo9EsWHCgG1QkMoYzOOWxnN59E6QXZUt4icLE9OeE7Jqalr3cZ01P7x6gb5V JD8SZD1CEKHy5SA1tf9YNjf+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCxTrag ixBOWhgBrqkWfff2APX4MB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2 QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw X1ZDRnZrUm1CU0U1RDdFekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwbaRx56pSfs87m2X40NNl7Wnq4fXIxerG+c03Gfbtiq4/4CmEeZ7t wXGb10oqlG9M2iwqgLWBGWXQQYNN4Sp6NqLKJxT4UdyXBZjstpGb7oQZfLBXalm/ nHghI4nb3W15tnyzgzf1MQkaRo2qF5VbRB8figx5XgjFcgcOyrEdv6KlzHdadkPY pnzw0xe/1no/TT58DlcMfTUkEzcvLqe0J9sff3C1G2XF11U5XkjQiBYkrqwiolLM oHgf1jIfkn8+O+sb9jdrcJm8B6Y+X0Y7mPfWCnrkIrlIn8hsE7P+qKBwCAu/ryc5 q92GsiQ+WooGhlq6DxdOhh2cgsiRyZw3 -----END CERTIFICATE-----Generated at Wed Dec 17 00:31:30 2025 by rpki-client