This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json) Hash identifier: iKxKsWxvacXv+Vog46KPk6lkG76osQ/ZL/s8/RY3XcM= Subject key identifier: 6A:6D:1D:C7:A7:F1:07:1B:E9:09:42:33:A0:F9:50:11:D9:82:F7:C8 Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft Manifest number: 03EC Signing time: Mon 22 Dec 2025 23:35:27 +0000 Manifest this update: Mon 22 Dec 2025 23:35:26 +0000 Manifest next update: Mon 29 Dec 2025 23:35:26 +0000 Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: YYcjWCrylNs7UO+04gS5d++y1pIX8SQM2EYt70eiX/I=) 2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: t9Ue3iuOWPGeL64kpqjEgMmW4d4g4YPsvh4Erz4xwRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Validity Not Before: Dec 22 23:35:26 2025 GMT Not After : Dec 29 23:35:26 2025 GMT Subject: CN=6949d5bf-7dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:9a:66:62:fd:85:b8:c9:95:b4:4a:9d:f1: 02:bf:c9:f5:ec:5b:3c:88:9e:7e:f9:b5:20:14:5c: 2f:49:08:a7:41:e0:b3:64:ea:d5:6a:c0:9f:a0:a6: a9:40:34:4b:53:66:b4:0f:8b:05:dc:93:67:ba:40: 55:9b:57:a7:12:86:95:dc:fe:f2:e6:5f:c9:1f:67: ca:ed:ea:b3:63:47:b8:b2:ff:23:9c:11:2f:84:9d: 32:37:e1:3d:ff:10:0f:77:33:e0:ab:4e:88:a9:ba: 00:5c:f0:5e:6e:cc:92:72:60:2e:9a:c0:5c:ed:92: 34:1b:b5:d9:cf:7a:c5:0c:0a:e2:bb:cf:bb:b8:88: 34:f3:4c:aa:da:6f:58:2a:4f:ec:cf:e0:8d:48:3c: d5:0c:fc:47:c1:14:ad:24:10:6a:c9:57:3c:d3:31: 53:df:aa:d8:e2:5f:1f:f8:ad:0f:f2:9f:b4:de:08: 77:c4:27:21:24:cb:60:58:fb:4c:02:1e:b9:00:63: 3e:f3:fa:39:e3:f6:21:49:dd:50:25:81:18:1a:5a: 80:9f:4e:9d:bd:d3:a8:da:8d:19:15:6c:bb:9b:9b: b9:19:b5:89:c6:ff:25:8b:fa:fb:6d:64:22:87:ac: 4e:f7:ca:c7:10:5b:45:26:e1:f7:d6:3c:16:65:fe: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6D:1D:C7:A7:F1:07:1B:E9:09:42:33:A0:F9:50:11:D9:82:F7:C8 X509v3 Authority Key Identifier: keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:a9:2a:d4:ad:8f:88:47:d9:2c:c2:ef:e6:cc:e9:c1:da: f6:98:52:67:5c:40:8f:96:e3:83:47:16:4d:a3:62:9f:e4:d5: 26:a1:bd:08:2c:8d:91:cb:5d:7c:5d:c8:a8:54:5f:ec:30:a7: 78:b3:31:1f:3b:b6:8e:0d:d0:4c:f1:8c:ac:66:8b:87:36:72: 30:b4:36:7d:a9:77:86:fd:d3:b3:65:ef:45:25:f2:95:c3:a9: 98:1f:0d:9f:21:9e:20:17:a7:22:ce:ee:43:19:b6:23:91:fc: 71:dd:cd:9a:bb:57:1c:3d:87:7f:70:7b:15:50:4d:62:cb:dd: a0:b2:f6:82:40:16:ee:5b:58:ea:8b:38:10:bf:9b:ba:32:9d: 15:6d:09:d9:f0:fb:3a:93:39:a4:10:b0:23:aa:ee:bd:24:7a: 35:77:56:ee:2b:66:a8:cc:65:90:ce:64:79:b6:cc:6c:0f:12: 4f:84:f2:e5:ad:d0:36:a3:fc:8e:27:b9:0a:bc:59:4e:ce:41: bf:fc:48:96:56:ea:a3:c5:cf:78:26:20:52:ee:1c:10:45:19: 62:df:22:b1:04:13:45:88:8d:1d:4d:a3:dd:2a:0f:53:9d:95: 40:ad:ec:d5:67:d9:86:e3:7f:a7:c8:a7:49:68:d7:1e:23:98: da:14:1f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEQzExMTAvBgNVBAUTKEUxNDRDQ0Y0MURBMTA1QUY2Q0Q0NUJDM0Y4ODY2MjM0 RDM4RjdDNzUwHhcNMjUxMjIyMjMzNTI2WhcNMjUxMjI5MjMzNTI2WjAYMRYwFAYD VQQDDA02OTQ5ZDViZi03ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6aaZmL9hbjJlbRKnfECv8n17Fs8iJ5++bUgFFwvSQinQeCzZOrVasCfoKap QDRLU2a0D4sF3JNnukBVm1enEoaV3P7y5l/JH2fK7eqzY0e4sv8jnBEvhJ0yN+E9 /xAPdzPgq06IqboAXPBebsyScmAumsBc7ZI0G7XZz3rFDAriu8+7uIg080yq2m9Y Kk/sz+CNSDzVDPxHwRStJBBqyVc80zFT36rY4l8f+K0P8p+03gh3xCchJMtgWPtM Ah65AGM+8/o54/YhSd1QJYEYGlqAn06dvdOo2o0ZFWy7m5u5GbWJxv8li/r7bWQi h6xO98rHEFtFJuH31jwWZf7zUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGptHcen 8Qcb6QlCM6D5UBHZgvfIMB8GA1UdIwQYMBaAFOFEzPQdoQWvbNRbw/iGYjTTj3x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0RDMS81MEM2MDI3QUE1 MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJhOXMxRnZELUlaaU5OT1Bm SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVVE05QjJoQmE5czFGdkQtSVppTk5PUGZIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0RDMS81MEM2MDI3QUE1MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJh OXMxRnZELUlaaU5OT1BmSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAirakq1K2PiEfZLMLv5szpwdr2mFJnXECPluODRxZNo2Kf5NUmob0I LI2Ry118XcioVF/sMKd4szEfO7aODdBM8YysZouHNnIwtDZ9qXeG/dOzZe9FJfKV w6mYHw2fIZ4gF6cizu5DGbYjkfxx3c2au1ccPYd/cHsVUE1iy92gsvaCQBbuW1jq izgQv5u6Mp0VbQnZ8Ps6kzmkELAjqu69JHo1d1buK2aozGWQzmR5tsxsDxJPhPLl rdA2o/yOJ7kKvFlOzkG//EiWVuqjxc94JiBS7hwQRRli3yKxBBNFiI0dTaPdKg9T nZVArezVZ9mG43+nyKdJaNceI5jaFB8X -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:38 2025 by rpki-client