This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: 9VTiwDtfxqCvud178dZz75wMoSykg3XiFf7PiZWdnjg= Subject key identifier: 47:06:2A:D6:3D:05:4D:60:5A:7D:BF:22:DD:7B:1A:79:99:94:96:5E Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0BAA Signing time: Fri 12 Dec 2025 18:36:25 +0000 Manifest this update: Fri 12 Dec 2025 18:36:25 +0000 Manifest next update: Fri 19 Dec 2025 18:36:25 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: rzubIIObxrIZC0Rbp1XqiCnKKs9fhfd+4xXNfMul3oY=) 2: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kiwqoX3h4ubEB/f3uAb3AdDh++JWYwrrl7T90TiKXzs=) 3: 843804BE744C11F0B13EF277C4F9AE02.roa (hash: KVcRx1AIexKUEoEWUnnAhnjFkWCaA/g6jhGPzAyzQQ4=) 4: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: eX92U/H+ZCVecCeGgTVqWhOCqzFSaTsYmsLKYsy4M8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 18:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Dec 12 18:36:25 2025 GMT Not After : Dec 19 18:36:25 2025 GMT Subject: CN=693c60a9-57c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:6d:b6:0e:04:f4:1f:9e:96:11:8d:ae:b0: 4d:ac:f0:bb:cf:af:01:9a:a4:3c:91:8d:90:b1:3f: 25:c2:a0:b4:d4:41:4c:a0:85:c3:59:2c:f5:2e:46: c5:83:cf:73:2d:b2:8c:e6:3b:02:80:f1:e4:f2:e5: 0b:6c:97:09:88:fd:85:ac:33:d1:ff:f4:38:61:bb: cf:97:88:76:46:0d:4f:92:6f:72:aa:78:0c:ca:5b: 8b:c5:e7:5c:e5:fe:9c:8b:cf:47:a8:96:7e:d6:37: d2:6e:f3:45:46:91:3c:3e:43:41:52:ca:0e:c8:00: 3e:7f:03:ba:e2:fc:04:87:a6:bf:10:f3:44:6b:25: af:cf:6a:18:ed:6d:11:ef:0d:18:94:aa:bb:b9:bb: 34:9c:a6:6c:4d:3b:56:30:ad:12:c2:25:6a:78:14: 39:f1:44:ba:f8:73:21:04:51:f5:91:de:15:e2:65: d5:49:9d:09:78:ce:81:09:f0:91:e5:26:c4:99:ce: 42:c8:c9:ba:f1:97:44:bd:dd:24:ae:12:7e:a3:6b: 15:e7:30:14:51:ce:1f:ed:4d:ff:9d:9f:97:4a:58: 45:a3:31:7a:df:5e:3e:74:3f:d7:ca:c4:d1:47:2d: ae:dc:e4:2e:2b:13:3f:18:68:a8:5a:e2:e8:8b:cf: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:2A:D6:3D:05:4D:60:5A:7D:BF:22:DD:7B:1A:79:99:94:96:5E X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:98:1b:d9:fb:38:46:55:6f:35:ad:00:3c:a1:ab:5a:a0:5d: 51:5c:0b:2d:ec:f6:5e:29:cd:29:3c:af:d6:ad:58:70:55:52: e1:b1:06:b6:8a:7c:e2:f3:7f:10:bd:56:32:ac:ac:be:13:b1: fc:68:2b:7c:86:0c:d0:93:4b:d6:12:a8:d2:7d:a1:f4:a4:e1: bf:88:c7:65:22:dc:0f:a2:eb:f5:ac:c9:6f:22:3b:c1:c8:69: e1:17:e4:83:60:98:23:3a:ef:21:3c:c7:9c:22:f5:d3:f7:a4: 5b:d1:54:7e:7e:fb:47:6b:55:c1:ce:b4:46:67:e6:6b:66:61: df:5c:1f:a6:c9:d8:78:a6:89:da:bd:a1:cb:84:63:2e:05:d0: dc:ce:df:9f:ea:6b:9f:d9:f7:b4:14:0b:b6:32:45:8d:2e:bd: 05:91:1d:54:1a:8d:da:8e:00:56:b0:07:b1:bc:2a:98:86:89: c7:26:f0:e8:3c:81:b3:3e:e5:ea:d7:da:fb:f2:a4:a1:f9:6b: a0:04:5d:5c:d3:fa:75:8e:21:3b:34:63:f9:b5:6a:4d:9a:f9: 4c:9f:18:fb:39:0d:ce:6d:a0:a8:ca:e6:ec:a6:51:7a:8d:10: 67:ae:02:bc:4e:a6:11:fe:56:fe:e6:90:48:68:0b:55:7d:4b: 29:f4:db:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUxMjEyMTgzNjI1WhcNMjUxMjE5MTgzNjI1WjAYMRYwFAYD VQQDDA02OTNjNjBhOS01N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFZttg4E9B+elhGNrrBNrPC7z68BmqQ8kY2QsT8lwqC01EFMoIXDWSz1LkbF g89zLbKM5jsCgPHk8uULbJcJiP2FrDPR//Q4YbvPl4h2Rg1Pkm9yqngMyluLxedc 5f6ci89HqJZ+1jfSbvNFRpE8PkNBUsoOyAA+fwO64vwEh6a/EPNEayWvz2oY7W0R 7w0YlKq7ubs0nKZsTTtWMK0SwiVqeBQ58US6+HMhBFH1kd4V4mXVSZ0JeM6BCfCR 5SbEmc5CyMm68ZdEvd0krhJ+o2sV5zAUUc4f7U3/nZ+XSlhFozF6314+dD/XysTR Ry2u3OQuKxM/GGioWuLoi8/SxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcGKtY9 BU1gWn2/It17GnmZlJZeMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkmBvZ+zhGVW81rQA8oataoF1RXAst7PZeKc0pPK/WrVhwVVLhsQa2 inzi838QvVYyrKy+E7H8aCt8hgzQk0vWEqjSfaH0pOG/iMdlItwPouv1rMlvIjvB yGnhF+SDYJgjOu8hPMecIvXT96Rb0VR+fvtHa1XBzrRGZ+ZrZmHfXB+mydh4pona vaHLhGMuBdDczt+f6muf2fe0FAu2MkWNLr0FkR1UGo3ajgBWsAexvCqYhonHJvDo PIGzPuXq19r78qSh+WugBF1c0/p1jiE7NGP5tWpNmvlMnxj7OQ3ObaCoyubsplF6 jRBnrgK8TqYR/lb+5pBIaAtVfUsp9Nun -----END CERTIFICATE-----Generated at Sun Dec 14 05:16:15 2025 by rpki-client