This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json) Hash identifier: b0+ffFeRd0YYRckNYF+/GZrq9kPedJ2w7zszF3/ozEs= Subject key identifier: CC:34:A3:ED:37:A3:28:75:97:A6:0D:82:35:6C:2C:87:FA:17:FC:BF Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Certificate serial: 0564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft Manifest number: 0561 Signing time: Mon 22 Dec 2025 22:29:09 +0000 Manifest this update: Mon 22 Dec 2025 22:29:09 +0000 Manifest next update: Mon 29 Dec 2025 22:29:09 +0000 Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: EzT+yQett4xQ7q0Oen09qazFZw7Rrs9JjYS/06SmVnQ=) 2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: +BX7RaNNlsglW/BB60o8n67yb/21GqaNOP3+xpToWWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Validity Not Before: Dec 22 22:29:09 2025 GMT Not After : Dec 29 22:29:09 2025 GMT Subject: CN=6949c635-a22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:b5:a9:2b:a7:d2:81:db:3c:17:7a:ca:16: e5:04:ac:63:d8:a2:80:ce:07:1f:d1:83:09:89:89: 03:d3:bd:f3:cf:9a:1d:8b:61:1f:42:5c:3b:e3:79: d3:cd:47:6e:eb:74:cb:1f:9e:7b:41:62:b5:e4:de: 56:95:4b:55:cd:eb:8d:06:69:a2:53:21:92:bb:8c: e2:c3:2d:c1:ee:05:bc:cc:bf:52:f8:0f:5a:16:72: e1:7f:b6:97:e2:37:94:85:26:a3:c7:c1:32:1c:10: 65:34:5f:87:65:31:53:49:0f:85:d6:41:93:35:ce: bd:d1:e2:6c:aa:dc:09:e8:51:30:c2:e1:fa:8c:ee: 6d:33:b0:5e:b4:38:b1:47:5e:fc:8f:eb:d5:98:c7: e5:06:a8:52:e9:18:15:a0:e4:a7:48:20:8b:9c:ab: 02:be:67:8f:03:7d:42:51:8a:b8:84:7b:27:86:2f: 81:c8:19:7a:ca:5c:d2:9b:f3:e0:4f:4c:d5:a5:32: bb:1d:a7:df:32:0e:8b:7e:8f:80:9f:77:a6:e9:54: 92:17:63:5d:43:6a:a8:f4:c3:8e:a0:2d:81:2a:0b: 51:f0:b2:70:cd:2c:b5:18:b9:d8:62:ff:6f:1c:66: d7:c8:fa:a8:e3:7b:67:90:aa:0f:d5:2d:2a:1d:a0: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:34:A3:ED:37:A3:28:75:97:A6:0D:82:35:6C:2C:87:FA:17:FC:BF X509v3 Authority Key Identifier: keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fd:5c:fd:48:6d:ba:04:a7:f8:f8:c9:82:bb:96:a3:45:28: f6:93:a5:67:2e:e7:43:6c:1a:56:19:cd:47:cb:83:87:47:13: 75:bf:0c:be:2a:91:66:cf:56:58:fc:5f:09:80:fb:65:5e:11: 61:f4:9a:ce:28:10:0b:d8:0e:df:1b:d4:7a:e0:72:fc:79:b8: 45:d9:37:e1:1b:38:23:a3:dd:eb:aa:1e:9b:a9:c6:ff:81:99: cc:d1:09:bc:1a:97:27:ea:bf:a5:34:e9:62:2c:1a:aa:b9:4e: b7:fc:49:ed:96:2b:a2:6d:24:97:6c:4e:eb:d2:04:1a:69:ac: b9:94:a7:25:b5:6b:3a:31:d1:26:6f:0c:39:bd:e2:3b:bf:cf: ae:5f:db:19:ac:62:c1:24:a9:de:25:83:48:f9:e2:54:e3:68: 08:56:d4:66:98:42:2d:de:7a:1e:81:9b:97:32:0f:dc:5f:e2: ee:4c:76:42:28:af:44:7c:51:b1:91:f7:03:4d:e7:ee:9c:47: 99:16:e6:81:20:0a:f6:c1:29:b1:9f:cd:07:88:9c:a3:e1:72: 11:8b:cb:7f:b3:65:49:7d:ef:a9:c7:b7:3a:0b:91:bd:7d:c5: 6f:c2:f6:31:48:5d:ba:f1:15:cf:23:32:d9:1c:a9:42:ec:e5: aa:81:67:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxREExMTAvBgNVBAUTKEUyNEQwOTU0MTA2MkM2MDhCRTM2M0ZGNjE5Q0NCODQ0 NEREQzNDMkYwHhcNMjUxMjIyMjIyOTA5WhcNMjUxMjI5MjIyOTA5WjAYMRYwFAYD VQQDDA02OTQ5YzYzNS1hMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+W1qSun0oHbPBd6yhblBKxj2KKAzgcf0YMJiYkD073zz5odi2EfQlw743nT zUdu63TLH557QWK15N5WlUtVzeuNBmmiUyGSu4ziwy3B7gW8zL9S+A9aFnLhf7aX 4jeUhSajx8EyHBBlNF+HZTFTSQ+F1kGTNc690eJsqtwJ6FEwwuH6jO5tM7BetDix R178j+vVmMflBqhS6RgVoOSnSCCLnKsCvmePA31CUYq4hHsnhi+ByBl6ylzSm/Pg T0zVpTK7HaffMg6Lfo+An3em6VSSF2NdQ2qo9MOOoC2BKgtR8LJwzSy1GLnYYv9v HGbXyPqo43tnkKoP1S0qHaDPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw0o+03 oyh1l6YNgjVsLIf6F/y/MB8GA1UdIwQYMBaAFOJNCVQQYsYIvjY/9hnMuERN3Dwv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFEQS81MUQ1Nzk0ODBG RTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhnaS1Oal8yR2N5NFJFM2NQ QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrMEpWQkJpeGdpLU5qXzJHY3k0UkUzY1BDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFEQS81MUQ1Nzk0ODBGRTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhn aS1Oal8yR2N5NFJFM2NQQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4/Vz9SG26BKf4+MmCu5ajRSj2k6VnLudDbBpWGc1Hy4OHRxN1vwy+ KpFmz1ZY/F8JgPtlXhFh9JrOKBAL2A7fG9R64HL8ebhF2TfhGzgjo93rqh6bqcb/ gZnM0Qm8Gpcn6r+lNOliLBqquU63/EntliuibSSXbE7r0gQaaay5lKcltWs6MdEm bww5veI7v8+uX9sZrGLBJKneJYNI+eJU42gIVtRmmEIt3noegZuXMg/cX+LuTHZC KK9EfFGxkfcDTefunEeZFuaBIAr2wSmxn80HiJyj4XIRi8t/s2VJfe+px7c6C5G9 fcVvwvYxSF268RXPIzLZHKlC7OWqgWep -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:44 2025 by rpki-client