This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: kKWHVCkvPinNg4DI1VMOjuL/4ALQtteXoWhedYqoTBQ= Subject key identifier: C9:33:C7:59:52:83:73:F6:C3:22:AB:F4:9D:D6:83:33:02:F5:C8:D9 Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 55 Signing time: Tue 23 Dec 2025 06:05:44 +0000 Manifest this update: Tue 23 Dec 2025 06:05:44 +0000 Manifest next update: Tue 30 Dec 2025 06:05:44 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: ajRCcmuhTGnKe8/pkjteaFHLTmC6CM2zSav2bE+UJpw=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Dec 23 06:05:44 2025 GMT Not After : Dec 30 06:05:44 2025 GMT Subject: CN=694a3138-b690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:d6:22:81:48:2a:b2:09:0f:5b:f5:56:2b: f9:e3:eb:da:8e:c8:bc:f7:35:08:92:8e:e9:71:b3: 52:ef:e5:43:3a:3b:3b:0d:21:3d:1f:a3:f5:6d:fc: 9b:fb:55:75:05:fc:8d:e9:5a:ef:08:73:bf:c3:2b: e2:31:a0:a9:5e:9d:52:67:60:af:43:ae:0d:71:7f: 3e:88:c1:7c:2e:06:69:ba:1d:0d:e2:ca:a3:16:89: ed:62:7b:22:7b:7c:1e:b2:25:81:06:df:d3:23:24: 22:7a:67:2d:4b:7d:d8:ea:63:82:d1:1f:e3:a7:77: 86:69:2a:8f:af:2a:8e:d5:a4:49:ac:c8:3c:f1:65: 0d:68:e3:98:9e:91:a7:00:9d:78:d3:24:95:08:2a: f8:80:9e:51:6e:51:b8:f2:34:c4:ac:68:2d:b7:b7: bf:5d:e2:3b:7a:74:40:c4:1f:9a:98:42:27:9c:e4: a6:4c:43:f5:fa:c3:c8:ec:8e:6d:25:cf:9c:60:d7: d4:20:f4:39:2f:2b:29:98:1b:31:7e:13:43:1a:06: 68:f7:33:a8:c8:cd:fa:d4:72:38:e2:14:6c:af:46: 47:18:d0:49:49:ce:a0:a5:89:74:89:2c:a0:7d:a1: 3f:5a:d1:5d:e9:c3:bf:7b:fd:93:41:a5:5b:d6:06: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:C7:59:52:83:73:F6:C3:22:AB:F4:9D:D6:83:33:02:F5:C8:D9 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:89:8b:fd:23:08:1c:4c:14:89:ae:36:fb:01:fb:df:6c:17: ad:aa:27:a5:8a:a1:00:9d:c7:34:3e:24:0f:d0:db:24:9a:0e: 59:04:00:3c:42:19:07:e4:0c:5c:83:2d:b7:50:ba:78:a2:8e: 1d:a3:1d:a6:d6:47:c1:79:fc:2f:f0:ca:8f:bd:1b:19:5a:c3: c8:4f:09:bc:64:4d:07:27:96:7d:42:fa:5a:88:d7:af:44:09: 22:ee:68:72:5a:b3:e6:e1:7e:36:40:ba:78:9d:be:07:56:72: c6:2f:1d:d7:36:ae:39:3e:bb:a0:15:6e:c8:26:5a:34:ea:66: 95:0b:44:54:50:b0:75:49:8b:37:1f:50:10:e4:39:6b:76:88: ba:1a:c5:f9:08:24:18:1a:52:d8:8c:94:b7:c2:54:79:cd:a7: 0e:cf:e0:b7:5a:2a:5b:00:fc:85:18:f6:6b:79:9a:6a:fc:b3: 32:2f:b0:62:b9:74:66:9f:db:cf:e4:5b:92:50:09:63:ac:15: 72:81:03:d9:4c:28:78:5a:1b:87:c2:2f:8f:56:76:38:46:7d: 64:1e:2a:b5:dc:8d:77:7a:62:89:8f:e7:b2:0a:5e:cf:24:bd: bc:0e:a6:84:74:91:96:6f:da:07:e5:ef:0e:2b:e1:49:6f:5e: 91:4a:ac:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTEyMjMwNjA1NDRaFw0yNTEyMzAwNjA1NDRaMBgxFjAUBgNV BAMMDTY5NGEzMTM4LWI2OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrn9YigUgqsgkPW/VWK/nj69qOyLz3NQiSjulxs1Lv5UM6OzsNIT0fo/Vt/Jv7 VXUF/I3pWu8Ic7/DK+IxoKlenVJnYK9Drg1xfz6IwXwuBmm6HQ3iyqMWie1ieyJ7 fB6yJYEG39MjJCJ6Zy1LfdjqY4LRH+Ond4ZpKo+vKo7VpEmsyDzxZQ1o45iekacA nXjTJJUIKviAnlFuUbjyNMSsaC23t79d4jt6dEDEH5qYQiec5KZMQ/X6w8jsjm0l z5xg19Qg9DkvKymYGzF+E0MaBmj3M6jIzfrUcjjiFGyvRkcY0ElJzqCliXSJLKB9 oT9a0V3pw797/ZNBpVvWBi31AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyTPHWVKD c/bDIqv0ndaDMwL1yNkwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmJi/0jCBxMFImuNvsB+99sF62qJ6WKoQCdxzQ+JA/Q2ySaDlkEADxC GQfkDFyDLbdQuniijh2jHabWR8F5/C/wyo+9Gxlaw8hPCbxkTQcnln1C+lqI169E CSLuaHJas+bhfjZAunidvgdWcsYvHdc2rjk+u6AVbsgmWjTqZpULRFRQsHVJizcf UBDkOWt2iLoaxfkIJBgaUtiMlLfCVHnNpw7P4LdaKlsA/IUY9mt5mmr8szIvsGK5 dGaf28/kW5JQCWOsFXKBA9lMKHhaG4fCL49WdjhGfWQeKrXcjXd6YomP57IKXs8k vbwOpoR0kZZv2gfl7w4r4UlvXpFKrF0= -----END CERTIFICATE-----Generated at Wed Dec 24 21:32:56 2025 by rpki-client