This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: acEXdzyvBmjdcUv1P0wqSUUcvrTWP9TCl6n2T6viB7E= Subject key identifier: 9F:28:A5:59:74:25:B2:B1:6E:CB:BF:1E:71:68:5D:5B:D3:BF:87:D0 Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0D57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0D4B Signing time: Sat 20 Dec 2025 17:41:06 +0000 Manifest this update: Sat 20 Dec 2025 17:41:06 +0000 Manifest next update: Sat 27 Dec 2025 17:41:06 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: Cv3YPsnDl+QwItbUjZGWh44mUtNf0SFkRjgb+X8N/Lc=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: qxCxFSPkCJMsK7i3RHMxc9Lr9Tcp57aZA1WThFY3ZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Dec 20 17:41:06 2025 GMT Not After : Dec 27 17:41:06 2025 GMT Subject: CN=6946dfb2-25a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:0d:ec:6c:aa:4e:9a:cf:35:32:f8:2a:df: 71:b1:b1:c3:77:7f:12:83:3a:bd:31:5d:d1:ae:03: 8c:5c:a7:3b:ac:ca:8f:49:25:ca:47:0c:43:cc:c3: dd:a5:de:18:07:87:03:f0:72:a5:37:68:1f:41:ee: 86:e5:d7:9c:a2:4e:19:91:22:84:6f:95:f3:77:d1: 9b:cb:cd:0a:18:cc:bd:76:d4:d8:8f:92:b5:07:d2: 82:d1:ef:ff:7a:48:28:1e:1e:a4:6a:19:d6:07:2b: 5d:ec:19:94:e9:72:f3:e7:59:8f:23:b1:9a:5c:40: cc:d4:28:59:63:d7:ec:6e:88:6e:38:24:b2:16:bc: 9e:e1:33:d0:07:6b:d6:31:97:cd:51:bd:b0:cc:e8: 4e:ed:c5:83:26:87:59:20:20:94:54:8c:86:1d:56: 92:d6:57:1b:fd:c1:9e:6d:17:b1:06:8f:95:1f:62: 14:67:98:86:39:2f:93:3e:39:49:81:85:45:ee:18: 7c:d9:c1:38:3b:e4:84:e8:af:44:3a:f0:da:83:3e: 44:af:ca:2b:59:ce:83:6e:d0:46:3a:07:6e:41:26: 34:59:c9:e3:3a:2d:e9:4c:3c:52:5f:a9:79:83:b8: aa:2f:30:25:2d:38:f7:2c:17:02:75:4d:90:10:77: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:28:A5:59:74:25:B2:B1:6E:CB:BF:1E:71:68:5D:5B:D3:BF:87:D0 X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:73:db:a9:f3:a7:76:9e:22:bc:4b:f4:43:a1:fc:5d:33:9d: de:04:58:39:4d:3b:95:82:b2:92:3f:74:a9:ef:e6:dc:29:6f: 4e:42:ed:e9:83:0c:9c:19:89:16:03:ee:d5:d8:0f:bf:4d:6b: e0:15:00:07:c1:5c:34:f3:cc:fa:53:47:cb:60:d8:c0:37:2a: d8:52:77:e7:89:87:d0:5f:16:12:3e:6c:34:a7:ae:a9:1e:80: 27:e7:02:c3:fc:cf:15:bc:11:31:57:2d:23:7d:86:e6:58:ac: 4f:ba:34:c4:d2:ab:40:be:60:b0:91:39:7f:97:12:05:34:37: ef:23:8f:40:1e:08:49:ef:19:46:76:21:fc:7c:48:9d:8a:2a: 66:75:b4:36:f1:c6:4e:74:0a:fc:1e:39:45:cf:4c:16:dd:3a: 66:6e:e7:fe:99:55:a9:65:f4:10:a5:63:b1:62:86:f1:b6:69: 97:e8:d8:66:74:ec:7a:16:71:9e:9c:50:8a:07:dc:2b:75:e4: 7d:e8:ff:c8:f5:52:4e:49:b0:ef:c5:1b:29:c7:d4:31:f9:b5: 2c:29:44:7f:c8:c6:dd:69:3a:b8:b3:1a:c9:49:2c:c1:fa:16: 4f:ac:70:38:be:f5:f9:8c:13:ce:fa:b8:ba:25:ef:de:a8:a6: 8f:9c:9d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjUxMjIwMTc0MTA2WhcNMjUxMjI3MTc0MTA2WjAYMRYwFAYD VQQDDA02OTQ2ZGZiMi0yNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CsN7GyqTprPNTL4Kt9xsbHDd38Sgzq9MV3RrgOMXKc7rMqPSSXKRwxDzMPd pd4YB4cD8HKlN2gfQe6G5decok4ZkSKEb5Xzd9Gby80KGMy9dtTYj5K1B9KC0e// ekgoHh6kahnWBytd7BmU6XLz51mPI7GaXEDM1ChZY9fsbohuOCSyFrye4TPQB2vW MZfNUb2wzOhO7cWDJodZICCUVIyGHVaS1lcb/cGebRexBo+VH2IUZ5iGOS+TPjlJ gYVF7hh82cE4O+SE6K9EOvDagz5Er8orWc6DbtBGOgduQSY0WcnjOi3pTDxSX6l5 g7iqLzAlLTj3LBcCdU2QEHes2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8opVl0 JbKxbsu/HnFoXVvTv4fQMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8c9up86d2niK8S/RDofxdM53eBFg5TTuVgrKSP3Sp7+bcKW9OQu3p gwycGYkWA+7V2A+/TWvgFQAHwVw088z6U0fLYNjANyrYUnfniYfQXxYSPmw0p66p HoAn5wLD/M8VvBExVy0jfYbmWKxPujTE0qtAvmCwkTl/lxIFNDfvI49AHghJ7xlG diH8fEidiipmdbQ28cZOdAr8HjlFz0wW3Tpmbuf+mVWpZfQQpWOxYobxtmmX6Nhm dOx6FnGenFCKB9wrdeR96P/I9VJOSbDvxRspx9Qx+bUsKUR/yMbdaTq4sxrJSSzB +hZPrHA4vvX5jBPO+ri6Je/eqKaPnJ3D -----END CERTIFICATE-----Generated at Mon Dec 22 12:25:22 2025 by rpki-client