This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: 45Sh6rKtISCbxXEiE/gSEv8egu1kaHmFixWLYjKibUs= Subject key identifier: 45:37:0E:0A:B5:53:CD:DB:F3:B6:89:71:D5:94:92:F1:AD:11:3D:8E Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 0230 Signing time: Tue 23 Dec 2025 01:01:52 +0000 Manifest this update: Tue 23 Dec 2025 01:01:52 +0000 Manifest next update: Tue 30 Dec 2025 01:01:52 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: P5ItHC6PS0zHH+linHPZmNF3vMCscDAjJ2VDdZIZ8bE=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: FG8mZ0xSMI661bwpz8jXY8dYE+DuRrKVmBGsSUwXpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Dec 23 01:01:52 2025 GMT Not After : Dec 30 01:01:52 2025 GMT Subject: CN=6949ea00-f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:92:c8:e7:f3:c7:f1:30:b1:e8:18:0f:d9: d6:a6:22:5a:c1:92:6e:60:97:0b:e8:a1:07:2c:26: ef:bc:1d:f5:d8:d9:29:3b:59:b7:61:e9:62:2f:73: e6:44:43:a1:60:ee:bf:fc:9b:5f:60:0a:ce:9a:34: 70:25:d0:be:d2:19:f7:dc:2d:81:c2:3b:6b:f7:1c: 9f:a2:35:c3:35:53:7c:c7:6c:73:cf:1a:df:12:21: 75:71:99:c0:3f:d5:63:a2:e1:a3:ec:29:47:a0:12: db:27:23:ab:32:0e:b5:ba:2e:5c:97:c2:87:4c:00: 2d:a8:19:c3:94:9a:71:59:ec:d9:0d:33:ee:a1:ea: 61:5e:93:2c:c5:65:ea:fe:c2:2d:8a:ed:dc:7d:2d: f7:ac:b8:c2:ae:22:5f:d3:2c:c2:a9:2c:af:67:10: e5:e4:44:dd:69:40:b1:84:b8:39:45:9d:62:e0:f2: fb:c0:da:0e:94:33:31:e4:c0:18:e6:e4:ac:bd:94: eb:ee:87:9d:b8:e3:09:29:dc:68:fd:0f:91:b1:a9: f3:21:e9:d5:a1:8a:03:f2:6a:43:0d:8c:29:03:91: a1:0c:83:d9:b8:9a:a7:ba:be:9f:f5:c0:3d:51:e9: 8d:42:07:bb:aa:45:17:2d:14:f2:f0:de:f7:c0:a5: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:0E:0A:B5:53:CD:DB:F3:B6:89:71:D5:94:92:F1:AD:11:3D:8E X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:3e:4c:b2:39:63:2d:da:cb:0d:a2:c9:67:fd:ee:3d:83:c3: bb:34:56:13:af:e9:79:77:9c:b9:01:68:88:28:35:0b:ba:c6: ea:65:65:d6:e9:aa:c8:b1:15:fd:8b:1e:83:a0:84:4b:34:28: 14:0c:5b:f4:90:cb:56:29:d5:37:e6:2e:5e:a6:34:c6:8f:52: 29:8d:33:07:b3:a4:85:f0:04:cc:82:cc:79:a0:4b:4e:80:a4: 95:31:7e:be:68:9f:83:f5:1a:88:6b:68:f3:e9:fd:47:75:2d: 12:9c:cb:3e:95:10:97:b5:16:79:de:32:a0:78:c0:7e:e0:a4: b6:84:e1:12:34:f4:4a:96:51:37:dc:7a:81:64:e2:09:f5:08: 5a:98:f0:cb:40:ab:4e:65:8f:de:8f:13:98:18:ab:b5:70:e0: ad:35:10:6c:8d:2c:cf:8b:71:19:44:3c:27:55:0f:0f:bf:8f: f7:f3:c4:31:56:e8:e9:18:48:0c:8b:ad:fc:f9:f6:cd:b6:ca: aa:80:7e:13:9e:43:ec:96:5e:9e:9d:fd:c0:e6:a8:06:4b:37: 66:dc:2d:7d:28:a4:d1:88:f9:66:1a:3f:60:6b:19:6f:12:bd: 74:8e:1a:1f:5b:21:2b:78:54:37:63:f9:85:3f:bd:a7:68:37: 57:33:37:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUxMjIzMDEwMTUyWhcNMjUxMjMwMDEwMTUyWjAYMRYwFAYD VQQDDA02OTQ5ZWEwMC1mOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd+SyOfzx/EwsegYD9nWpiJawZJuYJcL6KEHLCbvvB312NkpO1m3YeliL3Pm REOhYO6//JtfYArOmjRwJdC+0hn33C2Bwjtr9xyfojXDNVN8x2xzzxrfEiF1cZnA P9VjouGj7ClHoBLbJyOrMg61ui5cl8KHTAAtqBnDlJpxWezZDTPuoephXpMsxWXq /sItiu3cfS33rLjCriJf0yzCqSyvZxDl5ETdaUCxhLg5RZ1i4PL7wNoOlDMx5MAY 5uSsvZTr7oeduOMJKdxo/Q+RsanzIenVoYoD8mpDDYwpA5GhDIPZuJqnur6f9cA9 UemNQge7qkUXLRTy8N73wKVMjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU3Dgq1 U83b87aJcdWUkvGtET2OMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGPkyyOWMt2ssNosln/e49g8O7NFYTr+l5d5y5AWiIKDULusbqZWXW 6arIsRX9ix6DoIRLNCgUDFv0kMtWKdU35i5epjTGj1IpjTMHs6SF8ATMgsx5oEtO gKSVMX6+aJ+D9RqIa2jz6f1HdS0SnMs+lRCXtRZ53jKgeMB+4KS2hOESNPRKllE3 3HqBZOIJ9QhamPDLQKtOZY/ejxOYGKu1cOCtNRBsjSzPi3EZRDwnVQ8Pv4/388Qx VujpGEgMi638+fbNtsqqgH4TnkPsll6enf3A5qgGSzdm3C19KKTRiPlmGj9gaxlv Er10jhofWyEreFQ3Y/mFP72naDdXMzeo -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:35 2025 by rpki-client