This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: BQ76cEWUJywEAyBdIl4kRQgpU6x1m18QXjbHBe1+ENw= Subject key identifier: 0D:BF:34:FA:55:BB:8B:F6:68:9E:99:3C:78:9F:A3:CA:15:93:5B:B6 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: 010B Signing time: Tue 23 Dec 2025 03:59:18 +0000 Manifest this update: Tue 23 Dec 2025 03:59:17 +0000 Manifest next update: Tue 30 Dec 2025 03:59:17 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: 6pfIUy6vd3nPQWNwhiGHAFF0YtTbqjJpjXp4BMw1JMg=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Dec 23 03:59:17 2025 GMT Not After : Dec 30 03:59:17 2025 GMT Subject: CN=694a1396-bf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:50:c3:fd:6d:ed:c3:d0:21:ce:be:13:a3: da:87:a0:0f:33:32:7e:82:6c:51:88:2f:ef:0f:41: 43:19:ea:56:ac:b1:01:32:cf:a1:77:a0:03:24:f1: 2b:47:71:12:62:10:aa:ed:82:4d:24:8c:e0:64:bf: 7e:c1:52:77:9d:07:dc:bf:39:70:c6:7f:4c:73:e6: f2:96:cf:fd:4b:b3:d1:04:1a:9d:f2:36:75:5b:4b: 03:84:55:28:6e:dc:57:7c:d0:79:80:f8:48:fb:15: 20:2d:ca:ae:9b:91:0f:a7:8d:6f:c1:46:c9:e4:b7: 01:3e:92:89:4d:78:44:b8:9a:4a:62:de:56:4f:67: 86:1d:d8:c5:1e:79:77:00:bd:28:0a:fb:24:87:5d: ca:59:de:c1:ee:37:46:ff:ae:cb:8a:46:cd:dc:f8: 43:85:91:50:5e:63:27:e5:45:ae:e7:d7:53:2c:0a: d8:80:da:a5:45:67:a2:5f:80:4a:8f:2a:dd:2a:de: e3:70:b2:a7:ff:d7:45:93:13:be:7e:01:f3:e4:a9: 4e:19:f3:1a:0d:75:b8:92:36:db:df:cd:30:4f:e5: c1:c6:be:eb:b1:75:2f:53:10:80:f7:24:e4:a8:28: 33:2b:db:74:e5:15:6a:42:91:0e:6f:d3:c1:5a:3d: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:34:FA:55:BB:8B:F6:68:9E:99:3C:78:9F:A3:CA:15:93:5B:B6 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b2:3f:6a:4f:bb:43:97:89:a6:0c:49:d5:b0:11:cc:2b:89: 2e:6b:b0:20:00:f1:a2:1a:d8:79:48:e7:27:62:3d:b7:35:04: dd:ab:37:38:5b:cd:56:5b:e4:09:54:62:92:0b:d8:a0:19:7f: f4:70:b1:54:10:9a:8d:df:e3:6b:61:f0:fe:19:bf:04:4b:5b: 6f:5b:34:9a:c9:ab:f0:e1:85:f2:0a:63:3b:81:a4:53:e3:03: 46:29:a0:1b:49:d5:e2:71:b1:c2:b9:7c:ab:76:d4:c3:75:7a: 16:f9:a8:3c:78:3c:f9:dc:74:0c:1b:dd:38:c6:aa:74:28:64: d5:1e:bf:bf:a8:5f:48:fe:14:d6:01:66:9f:ed:9a:cb:00:f0: 86:49:93:8d:c6:0f:bf:cc:70:93:d2:00:0a:bc:c9:c9:5c:10: 1b:55:b9:66:2e:84:96:3b:3c:f3:67:1d:03:b9:e9:2a:4e:5d: 7b:9b:00:a3:45:42:65:e7:b1:e8:0d:a8:96:6c:80:57:63:e1: 28:ad:8d:19:93:6b:b8:73:e4:86:e3:6d:28:c8:9e:78:d3:83: 9d:a6:c6:31:ca:4d:82:f6:09:88:3a:1f:be:1e:07:62:98:86: 3b:23:37:d2:9a:76:93:39:3f:24:b0:00:e6:91:d1:d9:da:a5: b8:f3:4b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjUxMjIzMDM1OTE3WhcNMjUxMjMwMDM1OTE3WjAYMRYwFAYD VQQDDA02OTRhMTM5Ni1iZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XdQw/1t7cPQIc6+E6Pah6APMzJ+gmxRiC/vD0FDGepWrLEBMs+hd6ADJPEr R3ESYhCq7YJNJIzgZL9+wVJ3nQfcvzlwxn9Mc+byls/9S7PRBBqd8jZ1W0sDhFUo btxXfNB5gPhI+xUgLcqum5EPp41vwUbJ5LcBPpKJTXhEuJpKYt5WT2eGHdjFHnl3 AL0oCvskh13KWd7B7jdG/67LikbN3PhDhZFQXmMn5UWu59dTLArYgNqlRWeiX4BK jyrdKt7jcLKn/9dFkxO+fgHz5KlOGfMaDXW4kjbb380wT+XBxr7rsXUvUxCA9yTk qCgzK9t05RVqQpEOb9PBWj2FqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2/NPpV u4v2aJ6ZPHifo8oVk1u2MB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3sj9qT7tDl4mmDEnVsBHMK4kua7AgAPGiGth5SOcnYj23NQTdqzc4 W81WW+QJVGKSC9igGX/0cLFUEJqN3+NrYfD+Gb8ES1tvWzSayavw4YXyCmM7gaRT 4wNGKaAbSdXicbHCuXyrdtTDdXoW+ag8eDz53HQMG904xqp0KGTVHr+/qF9I/hTW AWaf7ZrLAPCGSZONxg+/zHCT0gAKvMnJXBAbVblmLoSWOzzzZx0DuekqTl17mwCj RUJl57HoDaiWbIBXY+EorY0Zk2u4c+SG420oyJ5404OdpsYxyk2C9gmIOh++Hgdi mIY7IzfSmnaTOT8ksADmkdHZ2qW480tg -----END CERTIFICATE-----Generated at Tue Dec 23 07:02:19 2025 by rpki-client