This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json) Hash identifier: gK5JZBvPhMkgPlGqeJWvBv4f53fFR83eqiFj2L1fDfI= Subject key identifier: 37:88:A7:CD:13:46:E6:CA:37:3A:CF:3F:07:78:68:21:BD:F0:F8:B5 Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Certificate serial: 191A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft Manifest number: 47BB Signing time: Mon 22 Dec 2025 15:37:15 +0000 Manifest this update: Mon 22 Dec 2025 15:37:15 +0000 Manifest next update: Mon 29 Dec 2025 15:37:15 +0000 Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: hZl+uhLx2d+2lFBcEL0Vsg/SKKWqd/JLFtU8FmDDfPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6426 (0x191a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Validity Not Before: Dec 22 15:37:15 2025 GMT Not After : Dec 29 15:37:15 2025 GMT Subject: CN=694965ab-b026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:ce:aa:ef:0c:13:45:74:23:22:ca:69:db: 6f:3e:dc:ce:98:d6:64:bf:1b:4d:af:f3:c1:a8:10: 65:21:8b:7e:1d:8b:47:39:8e:f0:ae:71:1f:2e:fa: 84:a7:c9:c4:20:0c:62:49:25:42:fa:e0:7a:33:17: d4:da:15:53:c3:20:ba:22:5a:c3:5e:a2:6d:e2:87: ea:3b:7d:a5:be:ee:d2:f1:73:ea:4f:07:7a:65:4a: ad:6c:bd:06:26:08:3c:e6:b0:6d:44:dd:2b:62:4e: 19:c8:72:7f:95:e4:e7:24:6b:bf:81:99:34:19:6d: f7:89:ad:4e:f4:c9:2d:ec:1f:b5:3c:5b:ca:e9:99: 2e:64:b0:d8:3d:46:00:a4:61:f0:e8:71:80:a6:ba: f8:b8:42:37:10:97:94:b0:55:ce:48:d7:5d:12:27: 0b:e9:4b:7c:48:30:a1:61:e4:8f:d3:a5:03:02:55: b0:76:41:6c:bd:73:01:b7:3c:be:d6:85:79:c7:04: bc:dc:43:d9:b1:8b:95:48:13:fa:a5:93:2b:01:d8: ae:2d:3e:d4:8b:7b:e4:60:f3:6a:27:1b:d6:62:a8: 6d:8e:01:45:3b:c2:1f:81:79:aa:ac:29:f7:bc:b8: 2f:6b:5b:a2:b0:e4:0a:1a:c0:19:1c:22:a7:de:99: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:88:A7:CD:13:46:E6:CA:37:3A:CF:3F:07:78:68:21:BD:F0:F8:B5 X509v3 Authority Key Identifier: keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:35:d5:1b:b8:e3:39:99:16:2c:2b:a7:cc:f7:46:69:06:e9: a7:8e:2a:eb:fe:7b:54:93:cd:dd:d7:af:84:dc:97:39:96:bd: ec:99:44:00:90:0a:59:d6:ca:6c:49:c4:0d:d3:e4:f5:24:b0: 01:5c:ae:2a:f5:14:6a:3d:14:62:e7:a5:86:e8:77:8c:23:f0: 70:24:0a:c8:9f:e6:29:d1:2f:4b:df:98:8c:df:df:65:98:9b: 37:fb:1b:27:3d:21:6a:6b:52:84:15:2e:ed:87:c2:e8:c8:03: 57:0a:3c:7c:2d:6e:cd:c2:28:8b:29:4a:1c:9f:99:84:e3:e9: c5:25:32:8c:ae:7a:6e:e8:52:a3:8e:8d:ac:f8:e2:78:b6:52: a7:96:fd:f9:e2:6f:30:11:c7:c7:aa:7b:9b:0a:f3:b2:e8:63: 7e:4e:b0:0c:de:ce:f3:ac:a6:7e:08:4d:d1:99:e9:5b:ea:d6: 3a:c8:0c:8b:3f:16:13:58:81:61:5a:d9:2b:3d:6c:7b:83:8e: 74:c5:05:65:82:87:ce:9d:c2:d8:16:90:b2:38:90:be:a6:36: 53:88:36:4a:bc:0b:50:55:89:fc:b2:f9:62:1a:0d:c6:da:c1: 28:9a:69:f7:06:af:ed:79:fa:ed:bb:92:84:71:72:56:6f:68: 83:97:0c:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB NzcxMDk0OTEwHhcNMjUxMjIyMTUzNzE1WhcNMjUxMjI5MTUzNzE1WjAYMRYwFAYD VQQDDA02OTQ5NjVhYi1iMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11/Oqu8ME0V0IyLKadtvPtzOmNZkvxtNr/PBqBBlIYt+HYtHOY7wrnEfLvqE p8nEIAxiSSVC+uB6MxfU2hVTwyC6IlrDXqJt4ofqO32lvu7S8XPqTwd6ZUqtbL0G Jgg85rBtRN0rYk4ZyHJ/leTnJGu/gZk0GW33ia1O9Mkt7B+1PFvK6ZkuZLDYPUYA pGHw6HGAprr4uEI3EJeUsFXOSNddEicL6Ut8SDChYeSP06UDAlWwdkFsvXMBtzy+ 1oV5xwS83EPZsYuVSBP6pZMrAdiuLT7Ui3vkYPNqJxvWYqhtjgFFO8IfgXmqrCn3 vLgva1uisOQKGsAZHCKn3pm6gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeIp80T RubKNzrPPwd4aCG98Pi1MB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlNdUbuOM5mRYsK6fM90ZpBumnjirr/ntUk83d16+E3Jc5lr3smUQA kApZ1spsScQN0+T1JLABXK4q9RRqPRRi56WG6HeMI/BwJArIn+Yp0S9L35iM399l mJs3+xsnPSFqa1KEFS7th8LoyANXCjx8LW7NwiiLKUocn5mE4+nFJTKMrnpu6FKj jo2s+OJ4tlKnlv354m8wEcfHqnubCvOy6GN+TrAM3s7zrKZ+CE3Rmelb6tY6yAyL PxYTWIFhWtkrPWx7g450xQVlgofOncLYFpCyOJC+pjZTiDZKvAtQVYn8svliGg3G 2sEommn3Bq/tefrtu5KEcXJWb2iDlwy8 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:12 2025 by rpki-client