This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: IvyZXMIbrfwLzqfhMvftro8BuA+GWhwVOjtXou/b+i0= Subject key identifier: 19:35:DA:9F:71:D9:D9:7A:E5:8F:2E:05:62:F3:52:74:40:AB:29:AE Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: E1 Signing time: Tue 23 Dec 2025 04:28:11 +0000 Manifest this update: Tue 23 Dec 2025 04:28:11 +0000 Manifest next update: Tue 30 Dec 2025 04:28:11 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: azs9watP/juTm0ALbAIv3ekx2G0dDiognoVFFm7iG+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Dec 23 04:28:11 2025 GMT Not After : Dec 30 04:28:11 2025 GMT Subject: CN=694a1a5b-10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:ac:b8:74:d1:91:31:6b:0f:c8:ad:8f:72: ba:d2:9c:14:09:37:6e:82:d7:3b:ee:5b:60:69:ea: 55:bc:3d:41:96:20:a3:08:c7:c1:ef:d8:45:ed:0f: 72:55:b1:f6:48:ff:6d:44:7a:65:dd:41:4f:76:13: 31:6c:16:2d:25:4a:5a:56:c7:c1:00:07:12:b6:3b: f6:f4:82:94:ac:4f:9c:b3:c7:9e:c3:a4:45:d7:7e: a6:79:ba:c9:55:a1:93:50:30:cd:22:9b:2b:c1:23: f4:0d:95:25:cc:5a:6b:50:71:dc:1e:2f:80:6b:e7: 9e:a4:d9:ed:bb:8b:74:c3:45:f6:fe:99:4e:62:f1: 32:01:b5:1a:dc:e6:99:ac:2f:e0:14:71:76:c8:9c: 86:e5:6d:d6:47:a4:de:dd:e2:96:e7:49:6c:e0:4c: 69:e3:3f:a8:9c:8c:43:87:aa:ea:85:c6:1c:61:66: bf:0d:eb:07:a9:55:e9:34:ca:da:19:08:43:1e:f1: 06:d9:d5:23:18:78:21:32:e6:40:01:b5:70:19:86: 4a:21:3b:dd:60:e6:cd:d5:ed:27:c8:98:71:c2:8e: 75:e7:ea:66:0d:a4:31:c7:6b:01:9f:82:a4:db:86: ea:4d:f3:b1:d1:91:c0:fc:6e:57:6a:5a:85:d2:dc: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:35:DA:9F:71:D9:D9:7A:E5:8F:2E:05:62:F3:52:74:40:AB:29:AE X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f3:f7:49:2a:c0:ca:a4:a1:88:8a:7a:5f:c8:56:e1:95:b9: e8:cd:f9:32:ca:91:b9:e7:d0:8f:8d:c7:a1:ff:72:8c:39:56: 4d:53:6d:9f:14:57:de:f6:49:c7:0e:c1:c1:99:97:c3:52:a8: 69:73:2c:39:78:6f:73:0d:ac:21:0a:69:0a:a5:10:d9:2a:3c: 7b:f3:ab:ea:70:0f:33:54:8c:57:5d:fc:85:d8:7a:f4:38:92: 4e:3d:83:fc:df:a4:65:2f:b4:71:76:68:00:bd:41:69:d4:41: 1c:f6:ba:e7:50:4f:64:39:ea:c7:6a:eb:e8:39:56:bf:20:88: ad:6c:28:6b:97:d1:d8:67:49:58:cd:6e:aa:6d:af:b7:38:44: c3:5b:80:ca:a3:d8:65:49:53:2c:29:5b:c6:b7:0b:21:a6:77: 04:72:98:79:6c:37:b8:e9:b5:70:bd:f1:c5:98:5c:24:ba:e5: 79:bb:49:5b:85:ae:5a:a1:04:b2:2a:90:cd:d4:a4:e6:0f:e3: 5c:d6:f6:e2:6b:09:be:ca:fc:c1:1c:0c:02:fe:cf:c8:ff:0f: d9:a5:4d:fa:e5:7f:d3:86:73:35:66:45:76:97:9a:cd:ae:04: 36:82:a0:a3:dc:82:bc:50:00:2e:80:ee:92:16:62:26:40:67: 90:9a:be:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUxMjIzMDQyODExWhcNMjUxMjMwMDQyODExWjAYMRYwFAYD VQQDDA02OTRhMWE1Yi0xMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a6suHTRkTFrD8itj3K60pwUCTdugtc77ltgaepVvD1BliCjCMfB79hF7Q9y VbH2SP9tRHpl3UFPdhMxbBYtJUpaVsfBAAcStjv29IKUrE+cs8eew6RF136mebrJ VaGTUDDNIpsrwSP0DZUlzFprUHHcHi+Aa+eepNntu4t0w0X2/plOYvEyAbUa3OaZ rC/gFHF2yJyG5W3WR6Te3eKW50ls4Exp4z+onIxDh6rqhcYcYWa/DesHqVXpNMra GQhDHvEG2dUjGHghMuZAAbVwGYZKITvdYObN1e0nyJhxwo515+pmDaQxx2sBn4Kk 24bqTfOx0ZHA/G5XalqF0tyCsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk12p9x 2dl65Y8uBWLzUnRAqymuMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP8/dJKsDKpKGIinpfyFbhlbnozfkyypG559CPjceh/3KMOVZNU22f FFfe9knHDsHBmZfDUqhpcyw5eG9zDawhCmkKpRDZKjx786vqcA8zVIxXXfyF2Hr0 OJJOPYP836RlL7RxdmgAvUFp1EEc9rrnUE9kOerHauvoOVa/IIitbChrl9HYZ0lY zW6qba+3OETDW4DKo9hlSVMsKVvGtwshpncEcph5bDe46bVwvfHFmFwkuuV5u0lb ha5aoQSyKpDN1KTmD+Nc1vbiawm+yvzBHAwC/s/I/w/ZpU365X/ThnM1ZkV2l5rN rgQ2gqCj3IK8UAAugO6SFmImQGeQmr5u -----END CERTIFICATE-----Generated at Tue Dec 23 16:26:24 2025 by rpki-client