This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json) Hash identifier: bXFq5h662s0Q+6c82WYwBcKy31vkKV/m/afsQ8mVuCk= Subject key identifier: 49:02:80:58:51:8B:AB:54:2E:7A:1B:7B:A8:64:5C:80:B8:A5:38:9A Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75 Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft Manifest number: 12 Signing time: Tue 23 Dec 2025 06:45:41 +0000 Manifest this update: Tue 23 Dec 2025 06:45:40 +0000 Manifest next update: Tue 30 Dec 2025 06:45:40 +0000 Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: EGEKnrAeF9TXJa/bEDtCWBdGqe7HxJv7X7yF1lPnK3M=) 2: 61955FD6C5A211F09E92B426C4F9AE02.roa (hash: 6r1w44qLv6tmb8QOg76Wi+rpkJfAknvdkQET/Ztoh7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575 Validity Not Before: Dec 23 06:45:40 2025 GMT Not After : Dec 30 06:45:40 2025 GMT Subject: CN=694a3a95-65fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:ab:cb:ed:e5:9b:fd:cb:f8:ab:3b:87:a0: 31:91:94:3d:15:23:16:02:8d:94:cf:48:77:f1:65: 99:2b:1c:8b:27:1f:50:88:92:76:ad:eb:dc:9f:9b: 3e:6a:a5:b7:2d:15:2e:1f:d8:e8:50:2a:6d:46:e6: 6b:fe:d3:c6:6b:e9:35:ae:4e:13:e6:cc:f1:9e:c4: 9b:4c:45:3a:7a:e3:3e:f8:7a:57:e2:f1:71:17:30: f4:f6:c4:d0:14:87:b2:e5:29:1b:17:b3:ec:99:8f: 0b:20:7c:6b:e7:d3:69:fe:7d:d3:78:84:39:6b:22: a4:9c:c3:c7:ff:2d:e2:51:54:6c:ee:cc:dc:c0:b1: 92:00:1d:f3:44:57:1a:98:00:09:57:af:23:55:d0: 04:5b:9b:54:8e:58:b6:6a:ae:00:0c:43:7b:47:6f: 15:7c:35:f5:5d:43:bd:a5:f0:19:1f:a9:10:bd:21: 54:61:e3:66:97:45:8e:a0:fd:31:0d:6a:f9:1a:a2: 10:67:8a:b9:2a:43:9d:6e:2c:34:11:3f:af:df:72: cc:8a:60:5a:2d:35:96:ad:eb:9f:50:32:a0:9e:be: 05:73:7c:9e:d7:8b:f0:e2:c0:6b:ad:18:20:5f:e2: 64:17:47:e8:7d:68:dd:55:99:d2:f8:ad:3e:56:be: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:80:58:51:8B:AB:54:2E:7A:1B:7B:A8:64:5C:80:B8:A5:38:9A X509v3 Authority Key Identifier: keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:73:8d:82:ff:da:7a:91:c3:09:e6:f6:9b:b5:dd:da:d1:9b: f9:aa:ef:6a:4e:0d:1b:f1:bf:0b:96:ac:5c:a5:25:ec:4b:84: 99:37:2a:d0:87:e8:3b:70:a9:19:de:da:05:c2:39:41:72:8e: 74:9d:d0:59:18:f1:3a:7a:29:8b:26:7e:5c:a2:97:fa:91:ce: 04:29:08:86:90:87:12:2e:80:02:b4:e7:6e:61:22:c6:77:12: 75:ad:51:8a:42:90:30:b1:d1:95:46:6a:76:bc:7b:f8:6b:f1: 9a:f6:f0:37:a6:9e:f7:b4:95:a4:d3:0a:31:d0:6c:c5:41:f3: b0:da:11:44:cd:ed:6c:a9:66:b6:ce:c1:c9:3f:63:5a:ba:e7: 4f:7a:83:67:72:26:0b:0a:66:f7:0d:10:fa:36:b0:18:41:89: 59:66:4f:33:c5:d1:6c:03:7d:21:f4:6f:50:a2:c8:43:71:c0: 2c:ee:32:09:7e:bf:15:bb:d8:ca:cd:4c:ec:8a:e2:1e:a3:3f: b3:c9:b5:7c:bc:a7:9c:10:32:a7:4c:96:f7:e6:69:1d:81:4d: 15:21:b7:ec:66:e3:f4:65:e6:0f:19:79:0e:6c:5b:86:5d:a9: b2:71:68:68:4b:f1:5d:24:de:b5:c3:ff:fd:49:a0:f8:88:a8: 86:b6:87:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkVBODExMC8GA1UEBRMoNzc4NDg4MTQ4RTNBRTJGMTRBRDQwODU0RjdBMkZBNTk1 Nzc1QzU3NTAeFw0yNTEyMjMwNjQ1NDBaFw0yNTEyMzAwNjQ1NDBaMBgxFjAUBgNV BAMMDTY5NGEzYTk1LTY1ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCklqvL7eWb/cv4qzuHoDGRlD0VIxYCjZTPSHfxZZkrHIsnH1CIknat69yfmz5q pbctFS4f2OhQKm1G5mv+08Zr6TWuThPmzPGexJtMRTp64z74elfi8XEXMPT2xNAU h7LlKRsXs+yZjwsgfGvn02n+fdN4hDlrIqScw8f/LeJRVGzuzNzAsZIAHfNEVxqY AAlXryNV0ARbm1SOWLZqrgAMQ3tHbxV8NfVdQ72l8BkfqRC9IVRh42aXRY6g/TEN avkaohBnirkqQ51uLDQRP6/fcsyKYFotNZat659QMqCevgVzfJ7Xi/DiwGutGCBf 4mQXR+h9aN1VmdL4rT5WvrHhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSQKAWFGL q1Queht7qGRcgLilOJowHwYDVR0jBBgwFoAUd4SIFI464vFK1AhU96L6WVd1xXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGRUE4LzA2OEU3NjdBQzU5 RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDRTSUZJNDY0dkZLMUFoVTk2TDZXVmQxeFhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG RUE4LzA2OEU3NjdBQzU5RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZG SzFBaFU5Nkw2V1ZkMXhYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJzjYL/2nqRwwnm9pu13drRm/mq72pODRvxvwuWrFylJexLhJk3KtCH 6DtwqRne2gXCOUFyjnSd0FkY8Tp6KYsmflyil/qRzgQpCIaQhxIugAK0525hIsZ3 EnWtUYpCkDCx0ZVGana8e/hr8Zr28Demnve0laTTCjHQbMVB87DaEUTN7WypZrbO wck/Y1q65096g2dyJgsKZvcNEPo2sBhBiVlmTzPF0WwDfSH0b1CiyENxwCzuMgl+ vxW72MrNTOyK4h6jP7PJtXy8p5wQMqdMlvfmaR2BTRUht+xm4/Rl5g8ZeQ5sW4Zd qbJxaGhL8V0k3rXD//1JoPiIqIa2h3g= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:27 2025 by rpki-client