This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: a+3RJwFULvxqxo4GToVNqPnZ1TK0Dp//GmScadlxT/8= Subject key identifier: E9:C7:E6:C6:85:E4:25:EE:79:44:64:0E:61:27:FA:68:B8:D0:CE:4E Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0E03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0DE3 Signing time: Fri 12 Dec 2025 17:38:45 +0000 Manifest this update: Fri 12 Dec 2025 17:38:44 +0000 Manifest next update: Fri 19 Dec 2025 17:38:44 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: WSj1+0ZTjQnCzeiRVPWcOK3mMkWGzBWpxZi4GIqJcVo=) 2: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: oYunWYpf2t1IumK06Lb6/BFI73s49acQDXJAUQfYpi4=) 3: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: 3jicQmgQkvww41dqycYyBrr/vfnWtkA7h6bxqXU86fw=) 4: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: zU2ZC9pd1qPndbB6paiKIY91JEp+IoIIOqC7AB8clTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 17:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3587 (0xe03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Dec 12 17:38:44 2025 GMT Not After : Dec 19 17:38:44 2025 GMT Subject: CN=693c5325-720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:bf:e3:ec:07:55:b2:64:58:7f:c4:8e:0c: c2:4f:4e:6d:db:b0:d2:08:a7:0f:ec:aa:d6:85:a5: b8:f0:82:64:f9:3e:14:ee:cd:ee:07:1a:b3:6d:d2: fa:18:39:0b:37:a2:d8:7a:39:11:5d:8e:ed:c7:c7: 01:0a:00:d1:fa:4f:61:33:b0:bf:03:d4:83:ff:05: 34:bb:e5:a3:f1:43:d1:5d:ab:4c:30:19:c8:7d:ce: da:d9:97:b5:00:8e:50:40:a2:55:70:19:c0:35:a7: 2d:c9:cb:fd:21:05:5f:dd:3c:b8:5a:3c:87:1c:70: 22:9a:72:80:20:23:3c:7e:ec:5a:8d:33:e9:ce:8f: f1:33:ab:d1:4c:4e:31:f5:a2:0b:ea:a5:6d:43:11: 74:80:ce:f5:64:2e:c8:eb:aa:c1:01:25:69:58:09: a9:16:cb:85:a7:a2:f1:42:6c:26:b8:b4:0e:bf:bc: 6c:69:63:07:07:90:2c:3e:69:ac:f9:31:da:70:ef: 6b:ff:02:59:f0:10:86:ff:b8:41:e4:eb:33:20:6f: 2e:b9:42:74:94:ab:fc:b3:15:a8:33:d6:0e:a0:8a: a1:5e:24:3f:8c:61:f2:c2:98:31:a3:b9:ba:dd:7b: 00:46:f3:9a:bb:28:2f:7a:3c:0a:c8:6b:6f:15:11: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C7:E6:C6:85:E4:25:EE:79:44:64:0E:61:27:FA:68:B8:D0:CE:4E X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6a:8d:0a:38:83:bf:32:7a:5b:13:f6:f1:6a:e1:80:89:77: a9:0e:35:b3:08:70:e7:53:a7:aa:20:14:1e:89:a5:62:4d:31: 95:21:99:69:02:58:33:88:f5:44:da:6b:03:32:5c:84:1e:1a: 66:34:29:39:4e:02:f1:eb:c0:52:0a:ae:50:78:6e:a4:a7:ca: 5c:e9:35:e1:71:d5:69:aa:27:80:04:df:40:5b:12:4b:fa:81: ac:03:f2:05:da:fc:b4:07:67:7f:52:0d:85:c0:f0:1e:2b:e0: 22:02:d6:41:5c:32:80:c6:eb:6b:4d:91:0f:98:ee:fd:fe:5c: 73:71:0f:11:a6:a0:ff:76:1f:a7:d0:52:9a:59:14:73:15:bb: 27:28:3e:9c:15:c3:81:46:60:11:c1:a2:9a:eb:00:ab:a0:3b: f1:20:c7:ed:14:fc:ad:c2:65:4f:20:de:71:de:fb:9e:89:22: b8:73:f8:06:71:d2:ce:cc:be:b1:4f:d0:83:01:a6:29:c5:fd: c3:e6:07:83:28:48:c4:24:29:0b:5e:5b:98:b0:9f:5d:c5:0f: f4:b6:0e:dd:e6:37:3a:8a:4c:3c:dc:02:f8:24:68:c1:a5:49: 43:82:5b:a5:9e:15:33:e6:bc:49:e8:74:34:31:23:04:26:5a: ab:ff:bd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUxMjEyMTczODQ0WhcNMjUxMjE5MTczODQ0WjAYMRYwFAYD VQQDDA02OTNjNTMyNS03MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FK/4+wHVbJkWH/EjgzCT05t27DSCKcP7KrWhaW48IJk+T4U7s3uBxqzbdL6 GDkLN6LYejkRXY7tx8cBCgDR+k9hM7C/A9SD/wU0u+Wj8UPRXatMMBnIfc7a2Ze1 AI5QQKJVcBnANactycv9IQVf3Ty4WjyHHHAimnKAICM8fuxajTPpzo/xM6vRTE4x 9aIL6qVtQxF0gM71ZC7I66rBASVpWAmpFsuFp6LxQmwmuLQOv7xsaWMHB5AsPmms +THacO9r/wJZ8BCG/7hB5OszIG8uuUJ0lKv8sxWoM9YOoIqhXiQ/jGHywpgxo7m6 3XsARvOauygvejwKyGtvFRFtHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnH5saF 5CXueURkDmEn+mi40M5OMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ao0KOIO/MnpbE/bxauGAiXepDjWzCHDnU6eqIBQeiaViTTGVIZlp AlgziPVE2msDMlyEHhpmNCk5TgLx68BSCq5QeG6kp8pc6TXhcdVpqieABN9AWxJL +oGsA/IF2vy0B2d/Ug2FwPAeK+AiAtZBXDKAxutrTZEPmO79/lxzcQ8RpqD/dh+n 0FKaWRRzFbsnKD6cFcOBRmARwaKa6wCroDvxIMftFPytwmVPIN5x3vueiSK4c/gG cdLOzL6xT9CDAaYpxf3D5geDKEjEJCkLXluYsJ9dxQ/0tg7d5jc6ikw83AL4JGjB pUlDglulnhUz5rxJ6HQ0MSMEJlqr/73k -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:03 2025 by rpki-client