This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: mObSNZRSF2LZ3MXqYPy2n2mrvg4X8yiqT4//qWm8U9c= Subject key identifier: A6:D1:8A:FC:64:0D:43:35:1E:17:C3:8C:D0:2A:E5:12:6F:50:AC:E5 Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 0873 Signing time: Sun 14 Dec 2025 20:01:28 +0000 Manifest this update: Sun 14 Dec 2025 20:01:28 +0000 Manifest next update: Sun 21 Dec 2025 20:01:28 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: 2FKNpaQ53X/zLx+DefIoT9pzAH7aTiNN1T5r+/Ig2rk=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Dec 14 20:01:28 2025 GMT Not After : Dec 21 20:01:28 2025 GMT Subject: CN=693f1798-1b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:1d:0c:7e:46:6c:1b:44:0a:04:7c:c3:42: 94:e8:7b:e9:87:01:f3:2a:ca:30:68:58:28:4d:8b: ba:4a:d4:c7:0f:9b:a6:b3:28:80:d0:8b:18:e9:9c: 2b:ee:ec:e4:3c:e3:a9:68:34:cd:02:df:16:d5:05: 1b:7e:dc:b4:e6:90:cd:46:39:11:0d:32:b2:22:ed: b2:2f:c5:66:92:05:27:78:80:03:56:8b:c9:dc:dd: 6c:85:17:40:ac:c4:d4:d4:56:61:48:12:41:b4:ba: 07:65:b8:80:8c:cf:88:7c:1b:80:e0:d6:6b:95:c1: 85:b0:54:0a:a1:a9:c7:5c:90:f0:c7:99:ba:04:12: e2:82:53:eb:a1:90:7b:ac:74:91:12:10:f8:2f:ad: 72:89:66:50:71:ff:78:26:e7:ae:10:3c:9f:08:3a: 84:af:71:cf:51:02:4c:13:95:86:8e:12:99:0c:dc: 2f:b6:72:12:ad:86:74:79:92:49:e1:86:f4:d0:b4: fd:d7:75:cc:42:3d:eb:e6:08:cb:02:06:47:22:75: ab:b2:a2:15:53:93:90:6d:1e:fa:00:1a:f5:6c:c1: 93:9e:18:b5:9e:75:49:53:6d:10:f2:34:d6:e9:68: 25:30:9c:65:39:e7:3b:07:fd:f3:73:5b:65:6b:2c: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D1:8A:FC:64:0D:43:35:1E:17:C3:8C:D0:2A:E5:12:6F:50:AC:E5 X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f3:74:29:f4:98:9e:42:77:c0:c1:fa:fe:1b:0e:25:c5:2a: 3e:3d:ab:91:04:1c:a3:7d:67:aa:d1:95:78:f5:b9:c6:fe:e8: 5d:18:dc:05:52:de:c4:19:40:9d:8c:f3:40:72:82:1f:2e:14: a3:8c:af:9b:22:65:83:03:eb:49:c9:f3:43:ca:bd:82:8f:c3: 64:b2:3a:ee:5d:ac:14:be:e0:0c:13:64:55:93:1d:05:4e:a8: a9:b2:b2:54:b0:3b:7c:eb:4d:5c:fa:80:0a:76:ff:81:fc:46: 43:c1:6f:87:2a:39:5c:a7:a5:ee:f3:7a:92:3d:32:f2:01:7b: 6e:9a:c8:a1:fb:dc:7c:fd:e0:4d:15:b7:18:98:83:7f:9f:e3: 40:bf:8e:b6:8a:e0:96:30:52:80:5f:d4:0d:2b:cb:1b:8c:26: 49:33:86:06:67:0e:dd:6d:25:44:09:44:2c:03:f7:aa:fd:21: f4:4a:b9:34:27:fc:0a:ad:f9:a9:30:cd:f5:f9:5c:c5:4f:a2: c6:07:39:5c:37:e7:24:2a:9c:86:dd:c8:d4:9f:00:bf:d6:f5: 8d:80:f4:a9:a0:3e:61:3f:86:8d:40:6a:00:99:ee:e5:20:94: 59:52:5e:62:1a:71:48:f9:61:39:1c:7b:10:89:98:ca:7d:a7: 75:5b:c4:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUxMjE0MjAwMTI4WhcNMjUxMjIxMjAwMTI4WjAYMRYwFAYD VQQDDA02OTNmMTc5OC0xYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhgdDH5GbBtECgR8w0KU6HvphwHzKsowaFgoTYu6StTHD5umsyiA0IsY6Zwr 7uzkPOOpaDTNAt8W1QUbfty05pDNRjkRDTKyIu2yL8VmkgUneIADVovJ3N1shRdA rMTU1FZhSBJBtLoHZbiAjM+IfBuA4NZrlcGFsFQKoanHXJDwx5m6BBLiglProZB7 rHSREhD4L61yiWZQcf94JueuEDyfCDqEr3HPUQJME5WGjhKZDNwvtnISrYZ0eZJJ 4Yb00LT913XMQj3r5gjLAgZHInWrsqIVU5OQbR76ABr1bMGTnhi1nnVJU20Q8jTW 6WglMJxlOec7B/3zc1tlayzLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbRivxk DUM1HhfDjNAq5RJvUKzlMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB83Qp9JieQnfAwfr+Gw4lxSo+PauRBByjfWeq0ZV49bnG/uhdGNwF Ut7EGUCdjPNAcoIfLhSjjK+bImWDA+tJyfNDyr2Cj8NksjruXawUvuAME2RVkx0F TqipsrJUsDt8601c+oAKdv+B/EZDwW+HKjlcp6Xu83qSPTLyAXtumsih+9x8/eBN FbcYmIN/n+NAv462iuCWMFKAX9QNK8sbjCZJM4YGZw7dbSVECUQsA/eq/SH0Srk0 J/wKrfmpMM31+VzFT6LGBzlcN+ckKpyG3cjUnwC/1vWNgPSpoD5hP4aNQGoAme7l IJRZUl5iGnFI+WE5HHsQiZjKfad1W8TD -----END CERTIFICATE-----Generated at Tue Dec 16 12:51:10 2025 by rpki-client