This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft File: 4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json) Hash identifier: 3YxfoKoGfN+y+gWXdBSYNf1iDufNww+d0FMWmbPHsz4= Subject key identifier: 5A:C8:25:86:89:D4:A0:B3:77:FC:13:07:C5:90:94:4B:42:70:E2:E0 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft Manifest number: 0811 Signing time: Mon 22 Dec 2025 20:18:55 +0000 Manifest this update: Mon 22 Dec 2025 20:18:55 +0000 Manifest next update: Mon 29 Dec 2025 20:18:55 +0000 Files and hashes: 1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: pPfkyj594VF0oIaxFYqYkiJIV9Li02yOOzZHf4b163U=) 2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: GAAl2FKpxbhzibjhh8Ygaavm0l/cpCR9EhU9gObhxBc=) 3: 0074C31ABA2911F08FC0166EC4F9AE02.roa (hash: fIuWw4iqtHBcQNlRi7ttEGVoYGii6DsGZshpyxIUXGI=) 4: 01F74A7EBFAC11EE89B0182DC4F9AE02.roa (hash: Zz2NVstL8auBq8I64jr8lENGYJp2GsiOwFTr/pV3kVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Validity Not Before: Dec 22 20:18:55 2025 GMT Not After : Dec 29 20:18:55 2025 GMT Subject: CN=6949a7af-dde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:01:ae:51:42:44:50:11:63:fe:23:fe:ae: 1e:8d:8d:dc:33:50:a0:78:4b:5f:a4:50:60:ec:cb: 93:c2:95:63:3c:7d:ed:da:46:94:9e:a9:5b:46:2d: 79:f0:2a:98:67:0d:4a:fa:97:a7:5d:6c:ed:51:65: cf:fe:e2:76:c0:0d:92:e3:72:88:82:4e:bf:2b:ae: 98:1b:c1:df:3b:fa:85:d4:e2:ae:5b:4a:0c:f1:46: 4a:a2:3f:30:45:94:72:b2:9f:73:4d:a3:a1:5b:f3: 63:df:39:72:32:67:1b:7c:4d:10:ab:7e:51:00:e6: cd:eb:19:d8:e9:6b:b9:cf:22:68:80:4b:5f:ae:b3: 63:cc:8e:8e:86:87:c8:e6:7e:f2:32:69:93:67:e9: 60:55:c4:11:ba:42:73:1d:0e:d7:e0:49:fd:73:11: cd:56:fc:68:fb:8b:35:8e:54:f5:84:9d:62:e4:ef: e2:58:ec:4d:85:d0:fb:83:cf:b2:f9:5d:f8:f4:75: 5b:c4:ce:22:29:b8:e8:00:5f:0f:52:c8:71:8d:b5: 0f:b4:7e:42:bc:13:17:24:eb:15:d7:06:c1:d5:cb: 5d:d2:dd:fd:59:79:9a:34:69:5f:22:82:b7:f1:bb: 63:0a:2d:3b:e0:b9:4d:c2:44:b7:74:42:10:dc:d5: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C8:25:86:89:D4:A0:B3:77:FC:13:07:C5:90:94:4B:42:70:E2:E0 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:87:a7:9d:f5:27:81:d2:dd:67:6b:c2:72:fc:aa:16:b3:e6: fa:32:42:ff:3d:a7:6d:51:c2:42:4a:90:fd:ab:41:ea:5f:9b: d4:e8:d5:1d:76:c5:c0:36:fc:ac:2d:89:c0:28:21:c3:e6:8f: 69:e0:f6:76:03:0c:05:22:c0:22:3c:ab:aa:b3:27:e8:31:f8: 85:2f:19:ef:9e:63:ff:b2:75:7a:93:d2:fe:f2:56:65:19:60: 53:63:fb:c9:b5:55:5a:1a:82:eb:6c:d2:cc:87:ba:f3:3b:04: 71:f4:75:eb:33:78:a1:c7:1e:52:37:85:7c:95:ec:40:12:e5: 09:27:c6:17:45:b3:b4:4f:a0:77:1c:53:8f:49:cb:28:e4:3f: b1:1b:2b:2d:14:6c:b9:aa:09:5c:f9:bd:8b:b7:15:72:a8:03: 5d:58:43:70:bb:d2:77:51:75:55:b4:9e:19:93:53:1d:23:b5: 2a:f7:9f:77:78:49:6b:1a:63:85:c4:e5:54:46:95:7b:a3:8e: 52:65:ce:2e:7a:2a:66:fe:3f:60:6e:1f:20:96:c8:9b:b8:1a: a0:5c:c5:3a:d2:a2:fe:53:07:04:d0:fb:ee:ff:f7:95:8b:ed: 16:4d:8e:43:f3:13:f6:1b:c4:57:a4:a1:5a:c1:eb:10:f1:ba: c7:0e:28:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjUxMjIyMjAxODU1WhcNMjUxMjI5MjAxODU1WjAYMRYwFAYD VQQDDA02OTQ5YTdhZi1kZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhkBrlFCRFARY/4j/q4ejY3cM1CgeEtfpFBg7MuTwpVjPH3t2kaUnqlbRi15 8CqYZw1K+penXWztUWXP/uJ2wA2S43KIgk6/K66YG8HfO/qF1OKuW0oM8UZKoj8w RZRysp9zTaOhW/Nj3zlyMmcbfE0Qq35RAObN6xnY6Wu5zyJogEtfrrNjzI6OhofI 5n7yMmmTZ+lgVcQRukJzHQ7X4En9cxHNVvxo+4s1jlT1hJ1i5O/iWOxNhdD7g8+y +V349HVbxM4iKbjoAF8PUshxjbUPtH5CvBMXJOsV1wbB1ctd0t39WXmaNGlfIoK3 8btjCi074LlNwkS3dEIQ3NVhGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrIJYaJ 1KCzd/wTB8WQlEtCcOLgMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg1My81Qjk0MzkwRTA0NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIw SjAtblNkUUNuTzQxaVBkOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAph6ed9SeB0t1na8Jy/KoWs+b6MkL/PadtUcJCSpD9q0HqX5vU6NUd dsXANvysLYnAKCHD5o9p4PZ2AwwFIsAiPKuqsyfoMfiFLxnvnmP/snV6k9L+8lZl GWBTY/vJtVVaGoLrbNLMh7rzOwRx9HXrM3ihxx5SN4V8lexAEuUJJ8YXRbO0T6B3 HFOPScso5D+xGystFGy5qglc+b2LtxVyqANdWENwu9J3UXVVtJ4Zk1MdI7Uq9593 eElrGmOFxOVURpV7o45SZc4ueipm/j9gbh8glsibuBqgXMU60qL+UwcE0Pvu//eV i+0WTY5D8xP2G8RXpKFawesQ8brHDigp -----END CERTIFICATE-----Generated at Tue Dec 23 07:55:12 2025 by rpki-client