This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: zTnZVH0x4jmm2cWQ4IZnjIXCmxmXOP77NGtXUh6TfXU= Subject key identifier: DF:77:8F:A1:BD:82:A2:AC:3F:23:B4:31:42:A3:78:BB:C4:19:DE:EB Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 021D Signing time: Fri 19 Dec 2025 01:22:52 +0000 Manifest this update: Fri 19 Dec 2025 01:22:51 +0000 Manifest next update: Fri 26 Dec 2025 01:22:51 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: Y7jcFzYLkq4QcpTj0dYmX/20LeWNxvgPJTatFuwBToU=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: Dec 19 01:22:51 2025 GMT Not After : Dec 26 01:22:51 2025 GMT Subject: CN=6944a8ec-9a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:14:82:71:74:52:7a:80:4d:57:b1:62:fd: 47:d2:77:ad:a6:91:68:fe:3d:c3:7b:4d:5b:61:48: 7a:77:40:bd:ef:28:4b:a0:5d:c3:87:a9:4d:02:c6: 39:21:73:9b:ca:ad:a3:20:3d:dc:27:16:1b:52:a1: 62:15:07:bf:b9:cf:e3:9b:e8:7d:ac:8c:c9:5e:a0: 7a:43:d9:ba:6b:23:c0:7a:f9:c9:d8:72:06:ac:d2: 27:70:f5:00:04:ec:47:41:e5:f0:9e:6f:0b:ef:39: a5:8b:c6:5b:22:94:1e:9d:5b:01:3a:df:d3:9a:21: b9:c4:94:42:37:61:f2:40:f5:f7:18:a1:90:93:0e: b6:3b:15:a5:71:48:ac:51:5f:9d:ca:3f:74:2c:1b: c0:67:74:b3:10:d8:c9:32:72:90:12:30:4e:d7:8b: 54:27:8e:75:b0:22:7d:18:20:da:31:7f:37:1d:db: 44:c8:9d:a9:2e:dd:dc:b6:94:ff:45:11:34:3f:5b: 71:de:45:51:2c:27:0e:6c:af:26:2a:f1:96:69:d9: 1a:f8:73:c6:ee:40:79:1c:c4:4b:e7:41:5c:7d:9e: 0d:15:e0:20:f2:e1:ee:c3:f8:6a:9a:e1:3b:0a:d1: e3:12:aa:c0:e4:49:69:e6:ce:10:88:79:7f:3e:fe: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:77:8F:A1:BD:82:A2:AC:3F:23:B4:31:42:A3:78:BB:C4:19:DE:EB X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c7:48:35:1b:d9:f8:1b:6a:35:2a:73:61:66:e7:e5:91:cd: 19:8b:da:f2:3b:52:02:d8:13:3a:37:b4:a3:70:c0:07:83:4f: 0c:ae:0d:55:89:e8:9b:3a:3d:7d:31:e0:30:5f:08:b9:cf:83: f0:16:e9:ab:de:25:b9:e4:6b:d0:99:52:6d:f7:1f:bc:95:25: 92:43:0d:20:d4:2c:71:e2:6f:05:73:c9:f4:a1:d3:0c:3e:04: 45:bb:1d:c4:cc:e0:b7:ce:ed:05:ed:33:cf:64:8a:3d:85:aa: fb:ec:30:ef:6d:f8:fa:79:f4:e2:67:bc:cf:c8:2e:7b:ef:8d: 55:05:ce:7b:a8:cf:83:10:70:e6:b3:61:91:0b:15:51:ce:62: 2b:66:da:1d:b9:62:dd:97:7f:04:fc:18:d3:91:89:fb:2d:2a: 16:9c:e8:d2:85:bc:d7:88:45:42:17:5f:81:98:e3:88:60:d6: 62:7a:71:c3:3d:8c:45:ad:62:d9:c8:8a:c4:82:0a:f1:47:c7: c6:6d:83:a8:1e:29:a9:4c:70:b0:6c:6b:82:bd:a1:c9:bd:75: c9:92:18:89:fc:68:e1:45:1c:4a:b9:c1:d3:7c:09:a2:47:26: 5e:f7:de:f6:ee:96:7f:7b:f9:a9:c1:83:0b:bd:b5:cf:ae:b4: 00:27:22:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjUxMjE5MDEyMjUxWhcNMjUxMjI2MDEyMjUxWjAYMRYwFAYD VQQDDA02OTQ0YThlYy05YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWsUgnF0UnqATVexYv1H0netppFo/j3De01bYUh6d0C97yhLoF3Dh6lNAsY5 IXObyq2jID3cJxYbUqFiFQe/uc/jm+h9rIzJXqB6Q9m6ayPAevnJ2HIGrNIncPUA BOxHQeXwnm8L7zmli8ZbIpQenVsBOt/TmiG5xJRCN2HyQPX3GKGQkw62OxWlcUis UV+dyj90LBvAZ3SzENjJMnKQEjBO14tUJ451sCJ9GCDaMX83HdtEyJ2pLt3ctpT/ RRE0P1tx3kVRLCcObK8mKvGWadka+HPG7kB5HMRL50FcfZ4NFeAg8uHuw/hqmuE7 CtHjEqrA5Elp5s4QiHl/Pv4d5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN93j6G9 gqKsPyO0MUKjeLvEGd7rMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWx0g1G9n4G2o1KnNhZuflkc0Zi9ryO1IC2BM6N7SjcMAHg08Mrg1V ieibOj19MeAwXwi5z4PwFumr3iW55GvQmVJt9x+8lSWSQw0g1Cxx4m8Fc8n0odMM PgRFux3EzOC3zu0F7TPPZIo9har77DDvbfj6efTiZ7zPyC57741VBc57qM+DEHDm s2GRCxVRzmIrZtoduWLdl38E/BjTkYn7LSoWnOjShbzXiEVCF1+BmOOIYNZienHD PYxFrWLZyIrEggrxR8fGbYOoHimpTHCwbGuCvaHJvXXJkhiJ/GjhRRxKucHTfAmi RyZe99727pZ/e/mpwYMLvbXPrrQAJyKu -----END CERTIFICATE-----Generated at Fri Dec 19 16:25:18 2025 by rpki-client