This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json) Hash identifier: ooY4EwLxEYv2NC5Z4M4ChlaMHOu+j9WUuDchuUBpsLk= Subject key identifier: 08:BA:E0:E6:CC:47:3B:A2:1D:C4:6F:37:17:C6:58:A1:1B:BA:E9:46 Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 27A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft Manifest number: 2753 Signing time: Mon 08 Dec 2025 15:32:48 +0000 Manifest this update: Mon 08 Dec 2025 15:32:48 +0000 Manifest next update: Mon 15 Dec 2025 15:32:48 +0000 Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: TEsu1JmDIKzTpdqFallOffx1YB49CA3LKNxVB5m2XY0=) 2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: YRyAIa+9kqjeJON/+m339DSD36eJAdvbC6dlw8cArb0=) 3: 79393030926D11F0B792FC45C4F9AE02.roa (hash: LAJwoHFi1knzvwPobu0BMg/1M9+So7vYWniJ7ToNNUE=) 4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=) 5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 5DmpgkEHXaDkkR9mgpZabmssGePTrFoLLGp9YTKRdHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 15:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10149 (0x27a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: Dec 8 15:32:48 2025 GMT Not After : Dec 15 15:32:48 2025 GMT Subject: CN=6936efa0-99cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:6b:95:0b:de:67:c8:e8:be:15:50:b9:5e: 95:cb:d7:9f:a4:a0:fd:47:13:12:ce:70:33:61:19: 73:03:79:6a:2b:17:54:7a:11:d8:f9:5b:65:d0:f3: 9d:12:94:d1:15:61:63:0e:48:66:3d:5f:91:2e:b0: ea:fd:9c:e8:c4:7c:57:e5:a0:1e:25:48:21:a5:56: 63:f7:c4:a3:8f:cf:02:05:c4:bb:cd:bd:c0:fe:78: 0c:84:6b:fc:00:30:56:da:30:cc:20:3f:28:67:30: b4:5a:46:9e:5f:c9:eb:06:08:76:2d:16:2b:8e:4e: e6:a1:1d:ff:dc:d8:2f:c4:10:f7:cf:28:c9:c4:22: 29:54:07:a4:b9:de:8c:ee:7a:d3:e2:d1:67:3f:6c: bb:72:2e:17:ca:90:b7:36:13:a9:3d:4b:d7:81:a2: 29:6c:7d:7e:c2:60:8b:a6:4c:ce:c3:1c:42:37:64: 64:8c:bb:fc:75:de:b1:c5:5b:c6:f4:19:ad:d2:e1: 80:4f:87:6c:35:88:94:2a:56:57:cd:b3:b1:80:ad: 85:4a:3a:d1:de:26:cd:17:14:e7:78:ad:8e:a5:95: c8:6d:1d:63:25:76:d9:ec:ed:d4:38:f5:01:53:94: 08:ec:4f:c2:4d:cf:8c:5f:0b:b2:bd:51:cc:02:85: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:E0:E6:CC:47:3B:A2:1D:C4:6F:37:17:C6:58:A1:1B:BA:E9:46 X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:39:dd:ce:56:f4:49:6d:11:74:c4:ae:aa:05:d9:f5:d1:e1: e5:20:bb:05:77:78:16:7c:5f:ce:ff:89:c7:92:3a:59:df:24: 4d:64:9b:0d:12:79:6d:d1:60:a8:e8:bc:d6:5b:83:78:98:db: 76:1e:12:42:d1:6f:f0:d6:4e:1c:ab:6b:f4:f7:a0:00:6a:0e: 05:d3:1e:c1:8b:23:f5:da:ca:c6:3c:72:21:80:ef:4c:22:1c: e1:5e:1d:ae:b0:7d:a3:10:23:06:36:56:ae:04:74:d3:ff:8e: f1:db:1d:59:c2:5c:d9:d5:28:f2:d3:7a:47:21:99:43:45:d3: 02:ee:b6:f3:dc:c0:9d:34:d5:bb:cc:5c:a9:e4:91:d6:5b:9e: 9c:95:21:ce:e6:33:4d:a2:68:fc:e6:14:f3:13:ba:77:18:d1: 85:a9:14:1e:73:d1:04:8a:50:4c:f1:be:0f:27:40:1d:a2:10: f9:99:aa:97:ef:ee:05:b3:63:2b:13:ac:d2:99:b5:be:65:93: f4:a1:8f:fc:d4:0b:ca:6d:61:5a:8d:80:4b:e6:d4:6e:8d:a2: 2a:85:c7:1b:ea:2e:48:af:d2:33:ee:f5:a7:f7:6d:14:c8:e1: 45:f3:2a:5b:1f:c3:77:d5:78:e6:b3:a8:e8:b9:50:15:cb:fe: 99:b4:00:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjUxMjA4MTUzMjQ4WhcNMjUxMjE1MTUzMjQ4WjAYMRYwFAYD VQQDEw02OTM2ZWZhMC05OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4FrlQveZ8jovhVQuV6Vy9efpKD9RxMSznAzYRlzA3lqKxdUehHY+Vtl0POd EpTRFWFjDkhmPV+RLrDq/ZzoxHxX5aAeJUghpVZj98Sjj88CBcS7zb3A/ngMhGv8 ADBW2jDMID8oZzC0WkaeX8nrBgh2LRYrjk7moR3/3NgvxBD3zyjJxCIpVAekud6M 7nrT4tFnP2y7ci4XypC3NhOpPUvXgaIpbH1+wmCLpkzOwxxCN2RkjLv8dd6xxVvG 9Bmt0uGAT4dsNYiUKlZXzbOxgK2FSjrR3ibNFxTneK2OpZXIbR1jJXbZ7O3UOPUB U5QI7E/CTc+MXwuyvVHMAoVDBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi64ObM RzuiHcRvNxfGWKEbuulGMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Od3OVvRJbRF0xK6qBdn10eHlILsFd3gWfF/O/4nHkjpZ3yRNZJsN Enlt0WCo6LzWW4N4mNt2HhJC0W/w1k4cq2v096AAag4F0x7BiyP12srGPHIhgO9M IhzhXh2usH2jECMGNlauBHTT/47x2x1ZwlzZ1Sjy03pHIZlDRdMC7rbz3MCdNNW7 zFyp5JHWW56clSHO5jNNomj85hTzE7p3GNGFqRQec9EEilBM8b4PJ0AdohD5maqX 7+4Fs2MrE6zSmbW+ZZP0oY/81AvKbWFajYBL5tRujaIqhccb6i5Ir9Iz7vWn920U yOFF8ypbH8N31Xjms6jouVAVy/6ZtADI -----END CERTIFICATE-----Generated at Wed Dec 10 06:33:59 2025 by rpki-client