This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: 5Ve5MglGFF9t90QlyXAMEESGO2Y0owu5Z3CGHDIYHVE= Subject key identifier: C2:37:1A:96:90:68:7C:0D:7B:5F:EC:63:1C:05:2A:95:96:6F:95:AB Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 02DB Signing time: Tue 02 Dec 2025 23:59:57 +0000 Manifest this update: Tue 02 Dec 2025 23:59:56 +0000 Manifest next update: Tue 09 Dec 2025 23:59:56 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: sT60PtW/pmfu/GUHnbyTTCh/fKxwTMRptyTKNMpadjY=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: F2S0rE1Y9B4FArTQsvdfbYCQLr8rncdJXIVpg1O66R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 23:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Dec 2 23:59:56 2025 GMT Not After : Dec 9 23:59:56 2025 GMT Subject: CN=692f7d7d-911e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:9e:03:b2:6d:5f:ea:71:70:40:77:ca:c5: 42:e5:49:10:50:7d:09:f0:c5:64:7c:ce:1b:b6:c2: eb:23:68:0b:d4:bd:5f:89:d6:b1:4a:c0:3a:4e:bc: ae:2c:3e:f9:7f:cf:54:66:7b:95:a8:24:3b:67:62: fc:72:91:a5:49:99:77:98:74:90:d2:13:fd:2c:dd: 7c:6f:ed:09:f8:c2:db:3a:00:0c:24:c7:df:46:62: d1:ec:54:06:90:2f:11:b8:87:e4:47:e4:ba:27:56: 78:26:20:68:96:58:e4:f3:85:e7:93:86:b4:ed:a3: d5:64:2d:d0:b7:7a:88:f6:e8:03:e9:15:5c:b1:32: d5:ea:6a:04:be:57:2b:65:61:f5:6d:97:ba:ae:92: 7d:1d:6a:a2:b6:70:71:cf:de:69:76:3a:2c:96:01: 25:a5:01:23:6a:bb:ff:ae:8d:25:b8:95:a9:8f:ac: fa:ea:5e:08:0a:a7:d1:e9:df:d0:1d:82:cb:82:54: 9d:9f:19:43:3d:f5:22:6c:67:84:3c:ee:e4:17:3d: 0a:74:62:dd:0e:42:e0:7d:cd:e9:fe:cd:43:b9:64: 13:3b:42:98:1c:a2:db:21:c5:ab:a6:60:c9:37:d3: 25:84:66:36:9f:32:3a:18:3c:8d:e7:c0:82:f6:08: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:37:1A:96:90:68:7C:0D:7B:5F:EC:63:1C:05:2A:95:96:6F:95:AB X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f9:4f:41:87:e4:b9:ef:26:14:a5:6d:cc:04:56:78:c7:e7: c6:ef:da:f4:ca:0a:a4:ec:39:48:dc:7a:4c:1f:d3:c4:b6:91: 72:3d:98:65:b3:62:ee:30:ec:1e:9a:54:ee:a1:4f:01:d7:ff: 07:c5:d1:3f:62:a3:ad:7e:e7:38:34:55:b9:e6:d9:c6:56:9e: 7a:a9:ce:1e:d4:d1:f6:5d:a0:ef:72:7b:85:56:c5:1f:9d:09: 26:d7:c5:4e:e3:30:48:80:dd:89:26:6a:89:d2:56:64:61:aa: 4c:a0:aa:46:62:20:1a:48:60:5d:31:77:b3:12:31:38:64:fb: 7a:7b:a0:3b:00:2b:99:eb:a6:0e:45:d6:09:51:47:3f:36:a3: b8:bb:53:5e:00:80:27:64:16:a8:da:13:13:07:b6:aa:45:a2: 7e:9b:96:e7:f7:c8:6f:a9:85:fd:fd:15:38:51:14:57:ca:1c: 80:f9:55:a2:11:04:5b:ab:5c:ff:40:27:1d:f3:fe:65:cb:4e: 27:dc:48:9e:8c:71:85:a1:45:38:30:f7:e3:a0:67:c2:a3:fe: 54:e1:34:27:b3:c3:49:44:89:05:51:da:7b:16:e1:8f:2f:61: 60:cd:63:df:d6:79:d9:4d:6b:6f:77:5f:3d:5a:78:71:67:80: 5e:3a:fc:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUxMjAyMjM1OTU2WhcNMjUxMjA5MjM1OTU2WjAYMRYwFAYD VQQDEw02OTJmN2Q3ZC05MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQeeA7JtX+pxcEB3ysVC5UkQUH0J8MVkfM4btsLrI2gL1L1fidaxSsA6Tryu LD75f89UZnuVqCQ7Z2L8cpGlSZl3mHSQ0hP9LN18b+0J+MLbOgAMJMffRmLR7FQG kC8RuIfkR+S6J1Z4JiBolljk84Xnk4a07aPVZC3Qt3qI9ugD6RVcsTLV6moEvlcr ZWH1bZe6rpJ9HWqitnBxz95pdjoslgElpQEjarv/ro0luJWpj6z66l4ICqfR6d/Q HYLLglSdnxlDPfUibGeEPO7kFz0KdGLdDkLgfc3p/s1DuWQTO0KYHKLbIcWrpmDJ N9MlhGY2nzI6GDyN58CC9giV3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI3GpaQ aHwNe1/sYxwFKpWWb5WrMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv+U9Bh+S57yYUpW3MBFZ4x+fG79r0ygqk7DlI3HpMH9PEtpFyPZhl s2LuMOwemlTuoU8B1/8HxdE/YqOtfuc4NFW55tnGVp56qc4e1NH2XaDvcnuFVsUf nQkm18VO4zBIgN2JJmqJ0lZkYapMoKpGYiAaSGBdMXezEjE4ZPt6e6A7ACuZ66YO RdYJUUc/NqO4u1NeAIAnZBao2hMTB7aqRaJ+m5bn98hvqYX9/RU4URRXyhyA+VWi EQRbq1z/QCcd8/5ly04n3EiejHGFoUU4MPfjoGfCo/5U4TQns8NJRIkFUdp7FuGP L2FgzWPf1nnZTWtvd189WnhxZ4BeOvx2 -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:05 2025 by rpki-client