This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json) Hash identifier: 5M2Wn3d+mTCPAjMf1SUrQDcLKTG6EmPgSFPFS+PBjZw= Subject key identifier: 8F:69:36:4C:0E:A9:51:3B:BC:FF:D0:71:C7:40:49:55:4E:BB:D9:13 Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft Manifest number: 13 Signing time: Tue 23 Dec 2025 06:46:33 +0000 Manifest this update: Tue 23 Dec 2025 06:46:33 +0000 Manifest next update: Tue 30 Dec 2025 06:46:33 +0000 Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: d6liVvqwqjSd3Jz7GXlAwnXiPyM5HAxI6z5VSVDkCYM=) 2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: fOXOHVjQ9RI3kOSpNULXLjaNneDbA6Y3Pouw4CS3E00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Validity Not Before: Dec 23 06:46:33 2025 GMT Not After : Dec 30 06:46:33 2025 GMT Subject: CN=694a3ac9-d036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:4f:fe:dc:1b:32:5a:6b:77:f5:47:da:dd: 7b:da:cd:af:c0:f2:b9:3b:e7:30:1d:42:94:3a:2e: 7b:dd:19:e8:4a:25:1d:e9:97:6c:c9:cb:8d:07:43: 38:d7:4a:d5:ec:5e:fb:8b:63:e4:00:11:db:d6:c1: 03:de:a1:30:02:0c:29:1e:bc:d6:d7:e9:93:f0:03: a6:5f:43:a9:28:4e:94:17:19:07:8c:25:68:af:58: b0:dd:55:b6:7b:29:34:bc:f3:37:67:34:57:db:23: ad:c1:9f:e2:08:10:f4:7e:0f:27:ac:f3:10:ee:fc: 30:74:29:90:0d:11:69:6b:a1:e9:e3:39:29:0c:a1: 0d:4a:b3:d6:0f:75:c2:0e:2a:05:a0:fb:ac:0d:68: 4d:47:0b:65:31:a3:b8:b1:5d:62:56:30:e8:da:90: 77:3d:cd:d1:a9:56:dd:f7:dd:25:61:51:28:7e:bc: de:da:8a:8c:fc:f0:6e:e4:07:0d:ad:2a:37:94:4b: d4:d9:25:ce:fe:d8:c5:2d:7c:23:71:89:a1:f6:56: 95:c2:d4:ae:44:91:12:9d:0c:e1:5a:54:91:54:78: cb:73:c0:14:a4:85:e5:b8:59:9c:61:ab:c2:75:18: ff:99:ac:6b:da:a7:cb:10:16:2d:98:eb:5d:d7:ae: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:69:36:4C:0E:A9:51:3B:BC:FF:D0:71:C7:40:49:55:4E:BB:D9:13 X509v3 Authority Key Identifier: keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1e:64:23:02:f6:a5:e4:1c:a3:cb:8f:17:35:89:9f:30:b1: 3b:c5:0f:f5:b4:29:a1:8e:b0:4d:34:32:fb:c8:e7:73:01:93: 17:dd:89:16:27:97:24:20:c0:fe:28:7f:d2:28:cd:bd:6f:33: 53:f5:4c:e0:53:62:5a:58:75:24:76:41:e5:66:4d:73:3f:77: 74:b4:03:60:a3:65:76:73:9a:e7:ec:bc:08:1c:65:a0:57:80: cd:6c:c7:cd:b4:07:f3:52:09:09:61:6f:96:f5:94:02:d1:d8: 1b:5a:0d:25:90:7a:53:31:23:c2:ed:75:01:0b:53:46:9e:ae: 7c:43:09:75:9d:29:64:d5:68:c1:a0:7d:7c:ca:93:95:fe:5b: b8:21:25:4f:7e:06:0e:76:b4:1c:ed:8b:37:83:6f:99:79:53: 74:1f:be:be:33:6e:68:75:2d:65:ef:00:f8:5e:10:0b:61:42: 46:13:f5:8c:78:72:c2:fa:cc:63:08:38:90:63:0c:0b:1e:ac: ff:0e:b3:c9:39:fc:ee:19:ff:55:1e:a0:69:8a:6c:80:09:bb: be:8e:2c:9a:15:02:d6:30:2e:ae:b4:95:fe:aa:a5:7f:1a:7a: c6:d7:83:d6:35:3f:2d:f7:ec:f5:af:2e:71:58:01:e1:45:74: 68:1b:3d:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OThCMTExMC8GA1UEBRMoRTMyNjVGNDExRENCQjBGMTE3NDg1MjM4NkU4MTdGRTI3 OEQyRjkwRTAeFw0yNTEyMjMwNjQ2MzNaFw0yNTEyMzAwNjQ2MzNaMBgxFjAUBgNV BAMMDTY5NGEzYWM5LWQwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClG0/+3BsyWmt39Ufa3Xvaza/A8rk75zAdQpQ6LnvdGehKJR3pl2zJy40HQzjX StXsXvuLY+QAEdvWwQPeoTACDCkevNbX6ZPwA6ZfQ6koTpQXGQeMJWivWLDdVbZ7 KTS88zdnNFfbI63Bn+IIEPR+Dyes8xDu/DB0KZANEWlroenjOSkMoQ1Ks9YPdcIO KgWg+6wNaE1HC2Uxo7ixXWJWMOjakHc9zdGpVt333SVhUSh+vN7aioz88G7kBw2t KjeUS9TZJc7+2MUtfCNxiaH2VpXC1K5EkRKdDOFaVJFUeMtzwBSkheW4WZxhq8J1 GP+ZrGvap8sQFi2Y613Xrrf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj2k2TA6p UTu8/9Bxx0BJVU672RMwHwYDVR0jBBgwFoAU4yZfQR3LsPEXSFI4boF/4njS+Q4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OEIxLzcyMDI3NkIwQzY2 NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BFWFNGSTRib0ZfNG5qUy1R NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHlaZlFSM0xzUEVYU0ZJNGJvRl80bmpTLVE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OEIxLzcyMDI3NkIwQzY2NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BF WFNGSTRib0ZfNG5qUy1RNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8eZCMC9qXkHKPLjxc1iZ8wsTvFD/W0KaGOsE00MvvI53MBkxfdiRYn lyQgwP4of9Iozb1vM1P1TOBTYlpYdSR2QeVmTXM/d3S0A2CjZXZzmufsvAgcZaBX gM1sx820B/NSCQlhb5b1lALR2BtaDSWQelMxI8LtdQELU0aernxDCXWdKWTVaMGg fXzKk5X+W7ghJU9+Bg52tBztizeDb5l5U3Qfvr4zbmh1LWXvAPheEAthQkYT9Yx4 csL6zGMIOJBjDAserP8Os8k5/O4Z/1UeoGmKbIAJu76OLJoVAtYwLq60lf6qpX8a esbXg9Y1Py337PWvLnFYAeFFdGgbPcQ= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:04 2025 by rpki-client