This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: 6lkgazhS1tHLP3oL/3JFEalnsicdBVNNg58HSR8yv7A= Subject key identifier: BF:65:48:70:5C:BA:FC:A3:88:90:44:EC:99:12:34:B5:7E:CE:9F:44 Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0D4E Signing time: Mon 22 Dec 2025 18:15:06 +0000 Manifest this update: Mon 22 Dec 2025 18:15:05 +0000 Manifest next update: Mon 29 Dec 2025 18:15:05 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: LhPLYJM07inX15ochD3sr0u/pEudgJzbzBSYm1O+fNU=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 8PBc7rJDdj900RPfyfsyZOspVRuDEqIjR6MwkbVEKO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Dec 22 18:15:05 2025 GMT Not After : Dec 29 18:15:05 2025 GMT Subject: CN=69498aaa-86b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:a1:d1:ca:79:7d:0f:62:8f:54:e9:41:5f: 11:9a:a7:83:a4:2d:5e:91:ab:ca:2b:d8:71:8e:35: de:50:5e:74:c9:02:52:fb:4f:fc:f0:e4:fa:d9:5c: f1:2e:71:f6:6a:64:d9:64:b3:83:3b:86:62:0d:03: b7:87:7e:d1:0a:6b:fa:79:97:99:33:c3:8d:87:bd: 1c:5e:7c:df:5e:46:ef:f8:0f:4e:96:03:03:64:b7: fc:fc:6d:30:16:21:3c:bc:f9:dd:98:d5:e0:4e:70: c8:73:75:b2:26:86:e2:e5:a0:eb:2b:a1:43:cc:27: a0:74:96:37:0a:3c:6b:a1:c8:5d:51:d1:89:6f:4e: 03:7e:ff:1a:2a:6a:c7:67:b0:96:11:9f:ad:4c:9b: 57:24:a2:86:a2:ca:b6:9b:e1:82:f4:d8:27:ba:0f: d8:49:0c:35:0c:df:e7:26:fc:f6:cf:ca:5f:05:04: e1:9b:ee:95:e1:2e:9b:36:51:ad:37:12:ff:b7:ed: ea:8c:a1:c0:62:64:bc:c7:85:8b:ec:25:7d:b4:e1: 91:dc:73:c4:55:b1:01:80:0c:bb:86:42:22:6c:eb: 0d:e3:36:5c:3f:cc:ad:3e:fa:82:3f:af:35:86:8f: e8:84:37:7f:87:27:5e:83:56:d3:09:c9:3e:6b:3e: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:48:70:5C:BA:FC:A3:88:90:44:EC:99:12:34:B5:7E:CE:9F:44 X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:42:94:bc:4f:0c:2e:ee:00:c8:c2:55:0b:7a:2e:9c:b0:14: 96:a1:12:cd:a2:a5:60:ce:ae:c0:0d:26:3f:f6:48:74:a2:7f: 0b:c7:4f:ee:5a:50:5c:5b:e8:18:f1:6d:4c:2b:3f:c5:c3:d0: c0:e7:fe:91:81:c8:6a:fa:90:d1:a4:0f:39:6f:e1:4f:27:c6: d9:9d:1c:e8:e8:b1:3e:89:99:d0:5e:7b:60:0e:93:9f:b8:cd: af:7f:79:23:23:f0:15:70:a0:01:d1:2c:4f:eb:ca:d7:44:af: c4:2a:a4:86:06:a5:d5:83:9a:e7:c1:96:ea:db:7b:6c:13:96: d0:a5:4c:53:ef:09:3e:87:77:e9:c0:31:3d:5b:b9:a4:f2:aa: d1:dd:94:92:6b:5b:58:20:95:f9:a2:64:2c:5f:7a:4e:79:b8: 07:68:ac:d5:75:51:3c:59:6a:0f:df:00:c0:6b:13:0e:30:6e: 9e:ef:0a:f6:d3:08:ab:70:f3:dc:08:4e:8b:a7:f9:db:d9:38: e6:e9:ee:2d:57:c9:21:58:49:77:82:c9:6b:d7:cd:aa:39:8c: 54:21:4b:5c:80:73:d9:87:85:0a:c6:9f:fe:02:29:77:89:df: cf:2a:88:b3:49:83:98:a0:e4:c1:2f:91:2e:26:d6:e0:1e:88: 2d:a2:12:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjUxMjIyMTgxNTA1WhcNMjUxMjI5MTgxNTA1WjAYMRYwFAYD VQQDDA02OTQ5OGFhYS04NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lyh0cp5fQ9ij1TpQV8RmqeDpC1ekavKK9hxjjXeUF50yQJS+0/88OT62Vzx LnH2amTZZLODO4ZiDQO3h37RCmv6eZeZM8ONh70cXnzfXkbv+A9OlgMDZLf8/G0w FiE8vPndmNXgTnDIc3WyJobi5aDrK6FDzCegdJY3CjxrochdUdGJb04Dfv8aKmrH Z7CWEZ+tTJtXJKKGosq2m+GC9Ngnug/YSQw1DN/nJvz2z8pfBQThm+6V4S6bNlGt NxL/t+3qjKHAYmS8x4WL7CV9tOGR3HPEVbEBgAy7hkIibOsN4zZcP8ytPvqCP681 ho/ohDd/hydeg1bTCck+az6urwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9lSHBc uvyjiJBE7JkSNLV+zp9EMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnQpS8Twwu7gDIwlULei6csBSWoRLNoqVgzq7ADSY/9kh0on8Lx0/u WlBcW+gY8W1MKz/Fw9DA5/6Rgchq+pDRpA85b+FPJ8bZnRzo6LE+iZnQXntgDpOf uM2vf3kjI/AVcKAB0SxP68rXRK/EKqSGBqXVg5rnwZbq23tsE5bQpUxT7wk+h3fp wDE9W7mk8qrR3ZSSa1tYIJX5omQsX3pOebgHaKzVdVE8WWoP3wDAaxMOMG6e7wr2 0wircPPcCE6Lp/nb2Tjm6e4tV8khWEl3gslr182qOYxUIUtcgHPZh4UKxp/+Ail3 id/PKoizSYOYoOTBL5EuJtbgHogtohJV -----END CERTIFICATE-----Generated at Wed Dec 24 02:20:48 2025 by rpki-client