This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: KxkjQXMxvR3PYddCxevoAQeXYBOVhlAiLIU17D57h4U= Subject key identifier: C4:BD:85:6B:34:6B:88:7D:92:9C:16:C1:AB:CA:0F:6F:31:7D:FA:93 Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 022D Signing time: Tue 09 Dec 2025 00:19:55 +0000 Manifest this update: Tue 09 Dec 2025 00:19:54 +0000 Manifest next update: Tue 16 Dec 2025 00:19:54 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: zn/IqKmLtZRj5WHsHQC3TQeUJ2crF3o6B7sadQY1CxM=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: Hy6T8zhOl3f+SHukkt0PutGPxcTAN5g9mi9bO48HFgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Dec 9 00:19:54 2025 GMT Not After : Dec 16 00:19:54 2025 GMT Subject: CN=69376b2b-5f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:f1:8c:ed:3d:d5:6c:a3:d4:de:3c:14:a6: 42:9d:60:0a:bd:f6:6e:a5:eb:f5:a2:69:a0:81:6e: b1:52:e7:eb:3a:f6:da:75:b2:b6:d5:ec:68:3f:4b: eb:39:c9:a8:b6:ff:2f:45:ac:69:e9:b5:76:f1:6c: 9b:fa:78:97:f5:61:97:3c:db:60:44:d8:18:f6:f3: 82:bb:3d:9d:fc:68:06:22:1e:5f:8d:40:53:3d:87: 21:06:3c:d6:c1:70:7d:44:8a:4a:7d:c6:aa:85:5d: 08:e6:6a:84:cb:5b:2f:d1:6f:70:16:15:97:bf:a6: 65:16:9f:95:2b:6d:92:bd:0f:25:96:a9:5e:48:a4: 59:10:44:3a:b5:fd:ea:94:5c:57:4e:19:a2:eb:13: 68:59:1b:9e:f4:41:60:09:8c:3a:26:2f:c6:93:a8: 76:5f:e9:17:43:83:c8:8c:65:d6:83:98:db:31:80: 2b:0d:4d:bd:3f:96:aa:b9:07:ce:41:4a:e1:0a:a6: f1:7c:cd:a5:75:59:eb:3f:df:f6:9e:37:88:e1:e4: e3:3c:d0:e4:70:6a:46:3a:37:ad:8d:e6:85:1c:52: de:d6:c9:e4:72:cc:91:2d:64:40:7f:17:44:d4:a4: 37:0f:b2:51:55:9e:a1:cd:18:cf:26:3c:e6:77:10: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BD:85:6B:34:6B:88:7D:92:9C:16:C1:AB:CA:0F:6F:31:7D:FA:93 X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:79:1d:37:e0:52:06:9f:98:b0:68:34:71:b1:2b:e2:58:02: c9:69:f6:c2:36:83:84:2a:33:50:29:98:b2:dd:4d:2a:c5:e0: b7:c5:75:f5:19:90:c5:df:9b:e1:63:e6:57:9d:42:09:9c:86: ef:6c:b2:7d:bc:b1:7a:19:2d:a3:72:6b:c0:b4:b1:61:5c:71: 57:14:fd:75:14:94:0b:bb:3d:21:2d:9f:17:e7:1d:1a:27:21: b1:4f:89:c5:a4:ea:c4:8e:e1:3c:30:33:a9:5b:25:2c:82:87: 2e:86:3f:0b:11:86:08:72:02:9a:fd:be:b1:75:6a:ad:42:ef: 54:74:ea:e0:51:31:cb:fc:3d:33:5f:d9:36:73:d1:60:46:08: 1e:50:e0:35:9f:37:8f:83:a0:f1:9c:23:1b:60:1d:1d:9a:de: eb:f8:6b:81:72:d2:35:73:72:4c:e1:51:e4:23:b0:57:87:0e: 84:c4:78:a8:d9:cf:56:04:e8:5a:3c:a4:01:cc:09:60:2f:58: 2a:03:3b:66:7c:e6:1e:2b:70:36:61:1c:5e:15:37:92:2a:6e: ca:f1:eb:32:5f:34:3f:dd:97:c8:71:8c:6d:5a:18:77:a6:2e: 84:2b:b1:f7:65:04:f1:7f:72:1e:4c:e5:13:8e:e4:f3:7b:4c: 82:bc:12:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjUxMjA5MDAxOTU0WhcNMjUxMjE2MDAxOTU0WjAYMRYwFAYD VQQDEw02OTM3NmIyYi01ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwzxjO091Wyj1N48FKZCnWAKvfZupev1ommggW6xUufrOvbadbK21exoP0vr Ocmotv8vRaxp6bV28Wyb+niX9WGXPNtgRNgY9vOCuz2d/GgGIh5fjUBTPYchBjzW wXB9RIpKfcaqhV0I5mqEy1sv0W9wFhWXv6ZlFp+VK22SvQ8llqleSKRZEEQ6tf3q lFxXThmi6xNoWRue9EFgCYw6Ji/Gk6h2X+kXQ4PIjGXWg5jbMYArDU29P5aquQfO QUrhCqbxfM2ldVnrP9/2njeI4eTjPNDkcGpGOjetjeaFHFLe1snkcsyRLWRAfxdE 1KQ3D7JRVZ6hzRjPJjzmdxB4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS9hWs0 a4h9kpwWwavKD28xffqTMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSeR034FIGn5iwaDRxsSviWALJafbCNoOEKjNQKZiy3U0qxeC3xXX1 GZDF35vhY+ZXnUIJnIbvbLJ9vLF6GS2jcmvAtLFhXHFXFP11FJQLuz0hLZ8X5x0a JyGxT4nFpOrEjuE8MDOpWyUsgocuhj8LEYYIcgKa/b6xdWqtQu9UdOrgUTHL/D0z X9k2c9FgRggeUOA1nzePg6DxnCMbYB0dmt7r+GuBctI1c3JM4VHkI7BXhw6ExHio 2c9WBOhaPKQBzAlgL1gqAztmfOYeK3A2YRxeFTeSKm7K8esyXzQ/3ZfIcYxtWhh3 pi6EK7H3ZQTxf3IeTOUTjuTze0yCvBKz -----END CERTIFICATE-----Generated at Thu Dec 11 19:02:57 2025 by rpki-client