This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: uTuWnZ+T25Vwru44JX0DUSlhSFUvwxi+nO+FdaOF8EQ= Subject key identifier: 42:F8:54:3F:2A:A0:83:D3:CD:83:97:07:3B:62:5D:E1:CF:A2:BB:94 Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1C46 Signing time: Mon 22 Dec 2025 15:59:55 +0000 Manifest this update: Mon 22 Dec 2025 15:59:55 +0000 Manifest next update: Mon 29 Dec 2025 15:59:55 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: im1+af99DbieH93OdDEtU6C+uRgXI/Z2Abt/APxdvLU=) 2: 65D82706BACE11F0AAEC4611C4F9AE02.roa (hash: jRKCXjvvxz21yV0w47MZxjLNIbg9HlLS7JMeNrcmv0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7253 (0x1c55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Dec 22 15:59:55 2025 GMT Not After : Dec 29 15:59:55 2025 GMT Subject: CN=69496afb-8520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:04:c0:91:c2:8d:0c:e9:5b:e8:9a:d7:d3: 78:91:c9:f1:6a:1f:2c:2f:c1:f7:6d:77:03:fa:eb: 3e:94:81:c9:2d:6e:68:79:d3:09:5d:77:b1:d0:48: b5:6c:70:53:f7:3f:73:2c:5a:5a:c3:d9:ef:dc:81: 1e:92:ba:4c:cb:7a:84:f4:92:04:28:41:71:f2:8a: 2e:80:84:d4:42:ec:b9:35:fc:66:bc:62:54:2f:f7: cb:f4:45:4f:4d:59:42:2b:45:16:92:d5:20:36:f7: af:01:ab:8c:ed:8b:73:9f:cd:84:71:b8:1b:03:b7: 74:1e:ad:e2:50:89:a0:f6:d6:13:8e:2f:26:b6:b3: 9f:dd:0f:a2:c7:5c:b7:c7:15:28:fe:4f:6c:7a:85: 79:9e:6f:92:9d:aa:37:6e:f0:58:41:27:ca:cb:f2: de:bf:7e:f3:1c:a2:6f:de:79:bb:98:10:7b:fe:da: 08:03:83:44:3c:73:58:50:9d:d6:01:45:67:45:bc: 38:f9:0f:93:33:a1:2b:50:f6:6a:c9:59:33:c6:b9: 96:f2:10:9c:ae:c3:06:5f:90:3c:da:95:5a:02:84: 70:d3:d1:40:b5:24:8e:76:9f:9d:ed:ea:f6:01:aa: 2e:0d:f9:e8:67:ca:24:0c:55:5c:2c:64:75:fe:a5: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:54:3F:2A:A0:83:D3:CD:83:97:07:3B:62:5D:E1:CF:A2:BB:94 X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:40:f5:78:8b:87:b5:36:5d:b2:97:69:11:c1:34:c1:a3:9e: c5:ef:cf:f1:95:15:46:cc:df:df:70:82:54:59:8e:6f:4d:62: 7f:5e:b2:65:5a:71:fb:63:44:09:85:e5:59:85:df:fe:50:b4: d8:7d:ca:24:85:28:51:bb:bd:ab:d4:17:fd:47:da:cc:ee:7d: 43:60:95:4e:67:29:5c:d5:b6:3a:76:f1:75:ee:24:d8:f7:db: 94:04:47:63:4a:16:70:b1:38:70:da:55:1f:38:2c:3b:12:b5: 34:92:8a:18:74:9b:ce:98:cd:e9:35:6e:06:d6:4d:c7:05:d8: 04:eb:42:a5:ba:c9:c2:a0:b2:ef:95:84:a8:4f:23:26:bf:50: 2d:9e:1a:f5:98:68:c6:de:f1:26:2b:34:bb:90:e5:4b:4f:73: ff:9b:98:97:fd:85:ce:ad:72:d4:97:b3:6a:a3:5d:35:d1:35: 41:38:af:8e:80:40:89:41:5b:43:d1:b1:76:3b:7a:4d:e5:12: 66:ee:d6:e7:90:cd:50:fa:04:83:4d:6e:26:57:94:e5:be:21: 5f:e3:62:bb:8a:bf:44:0b:a9:93:36:65:c7:92:9f:b1:e1:e3: ef:7d:30:41:98:35:5a:0f:86:9a:12:74:d2:e9:12:63:1c:6b: 09:88:95:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjUxMjIyMTU1OTU1WhcNMjUxMjI5MTU1OTU1WjAYMRYwFAYD VQQDDA02OTQ5NmFmYi04NTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgcEwJHCjQzpW+ia19N4kcnxah8sL8H3bXcD+us+lIHJLW5oedMJXXex0Ei1 bHBT9z9zLFpaw9nv3IEekrpMy3qE9JIEKEFx8oougITUQuy5NfxmvGJUL/fL9EVP TVlCK0UWktUgNvevAauM7Ytzn82EcbgbA7d0Hq3iUImg9tYTji8mtrOf3Q+ix1y3 xxUo/k9seoV5nm+Snao3bvBYQSfKy/Lev37zHKJv3nm7mBB7/toIA4NEPHNYUJ3W AUVnRbw4+Q+TM6ErUPZqyVkzxrmW8hCcrsMGX5A82pVaAoRw09FAtSSOdp+d7er2 AaouDfnoZ8okDFVcLGR1/qV/twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL4VD8q oIPTzYOXBztiXeHPoruUMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZQPV4i4e1Nl2yl2kRwTTBo57F78/xlRVGzN/fcIJUWY5vTWJ/XrJl WnH7Y0QJheVZhd/+ULTYfcokhShRu72r1Bf9R9rM7n1DYJVOZylc1bY6dvF17iTY 99uUBEdjShZwsThw2lUfOCw7ErU0kooYdJvOmM3pNW4G1k3HBdgE60KlusnCoLLv lYSoTyMmv1Atnhr1mGjG3vEmKzS7kOVLT3P/m5iX/YXOrXLUl7Nqo1010TVBOK+O gECJQVtD0bF2O3pN5RJm7tbnkM1Q+gSDTW4mV5TlviFf42K7ir9EC6mTNmXHkp+x 4ePvfTBBmDVaD4aaEnTS6RJjHGsJiJXB -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:55 2025 by rpki-client