This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: oR0kCPpUhGb+W3IJ1Dk8GZFI3Hpju4si6ERp3j9RNAQ= Subject key identifier: 72:8F:83:77:B9:A9:06:A6:EC:BB:6D:F7:12:EC:7F:21:3D:44:C2:CB Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 01C2 Signing time: Tue 23 Dec 2025 02:02:26 +0000 Manifest this update: Tue 23 Dec 2025 02:02:25 +0000 Manifest next update: Tue 30 Dec 2025 02:02:25 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: nIUetCntoVLl2PvLSktGnV674tWJgAGmdbvISCTKFz0=) 2: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) 3: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Dec 23 02:02:25 2025 GMT Not After : Dec 30 02:02:25 2025 GMT Subject: CN=6949f832-feb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:76:5a:e6:d8:29:ce:15:6e:40:43:94:bb: e1:81:8f:a2:fc:6c:f3:2a:fb:1f:ea:78:8d:bc:0a: 12:94:4d:46:0e:35:ec:d6:88:73:e6:06:2a:ed:2b: a4:91:27:81:a2:62:ab:bc:1d:26:5d:b7:b9:64:9a: 4d:89:1b:36:60:5b:7d:48:53:47:91:a7:8d:8d:c3: e9:fc:7d:9c:f8:21:b1:72:50:8b:0d:d3:ae:bf:72: d2:33:d0:69:3c:f3:fa:a1:36:03:ce:39:f6:06:af: 30:93:9d:03:2b:d6:7e:b3:71:8a:23:22:83:b0:e8: a4:29:96:0f:8b:0e:ea:20:0f:0f:71:ae:3e:cf:a5: b0:aa:09:1b:7d:78:c6:66:88:12:f2:12:5d:d1:48: c6:36:19:fb:76:4c:da:97:bd:7e:c8:e3:34:80:93: 36:b9:ae:5b:a8:ac:b9:36:4e:12:20:dd:18:a2:01: d6:fc:41:c6:d0:bf:3c:6b:50:bc:fa:1d:d5:09:81: 36:55:0e:9d:be:2c:3e:22:8b:52:50:93:fc:7a:54: fc:d4:51:10:54:9b:0d:3d:31:5b:46:0a:eb:2b:b5: e1:d2:47:7e:31:b6:4a:f8:9c:8f:35:5c:bc:00:e3: c3:57:f4:29:44:3e:79:7b:fb:06:82:da:59:81:47: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:83:77:B9:A9:06:A6:EC:BB:6D:F7:12:EC:7F:21:3D:44:C2:CB X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:64:4a:d5:4f:aa:21:e8:ea:86:4d:e0:42:dc:60:ad:c0:2b: 4f:4e:13:cb:f7:7f:7a:bc:4e:d9:10:83:f7:5a:d2:95:e4:5a: 0f:ad:6f:13:0d:20:4d:25:2f:9d:7c:16:61:ca:15:22:26:f5: bd:71:4c:ed:f3:5e:2a:fc:6f:ac:e7:74:50:46:a9:0c:5e:ce: 86:ae:a7:e3:18:92:dd:af:48:c6:b2:1f:7d:8d:18:3e:3d:ec: b3:5e:03:5e:d7:25:a1:a7:46:88:83:96:36:a8:1e:80:19:ec: 19:23:06:32:c6:94:61:19:5a:6b:5a:5c:1c:1a:6e:c1:86:bb: 24:83:e3:b0:72:b5:52:d2:02:df:12:63:ea:10:0e:49:cf:c9: 8e:d0:59:8e:9e:ed:b9:78:95:52:b9:f5:b8:d1:71:26:ac:4e: 54:4f:21:77:46:67:9a:11:b2:0e:98:64:89:12:85:93:c4:1c: a4:04:9b:f8:94:1b:f4:ab:94:5c:18:08:c8:c9:7c:6f:f7:57: 8e:c6:52:b3:c9:81:87:53:9d:1d:ac:7c:68:6a:db:2f:ec:aa: 7d:c7:27:89:ac:00:9a:1c:04:9d:e1:25:31:f2:c2:55:c6:e6: ca:03:5b:93:ad:b4:d1:db:c7:79:b4:1c:6d:73:83:4b:14:78: e2:66:e4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUxMjIzMDIwMjI1WhcNMjUxMjMwMDIwMjI1WjAYMRYwFAYD VQQDDA02OTQ5ZjgzMi1mZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9Z2WubYKc4VbkBDlLvhgY+i/GzzKvsf6niNvAoSlE1GDjXs1ohz5gYq7Suk kSeBomKrvB0mXbe5ZJpNiRs2YFt9SFNHkaeNjcPp/H2c+CGxclCLDdOuv3LSM9Bp PPP6oTYDzjn2Bq8wk50DK9Z+s3GKIyKDsOikKZYPiw7qIA8Pca4+z6WwqgkbfXjG ZogS8hJd0UjGNhn7dkzal71+yOM0gJM2ua5bqKy5Nk4SIN0YogHW/EHG0L88a1C8 +h3VCYE2VQ6dviw+IotSUJP8elT81FEQVJsNPTFbRgrrK7Xh0kd+MbZK+JyPNVy8 AOPDV/QpRD55e/sGgtpZgUe8kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKPg3e5 qQam7Ltt9xLsfyE9RMLLMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByZErVT6oh6OqGTeBC3GCtwCtPThPL9396vE7ZEIP3WtKV5FoPrW8T DSBNJS+dfBZhyhUiJvW9cUzt814q/G+s53RQRqkMXs6GrqfjGJLdr0jGsh99jRg+ PeyzXgNe1yWhp0aIg5Y2qB6AGewZIwYyxpRhGVprWlwcGm7Bhrskg+OwcrVS0gLf EmPqEA5Jz8mO0FmOnu25eJVSufW40XEmrE5UTyF3RmeaEbIOmGSJEoWTxBykBJv4 lBv0q5RcGAjIyXxv91eOxlKzyYGHU50drHxoatsv7Kp9xyeJrACaHASd4SUx8sJV xubKA1uTrbTR28d5tBxtc4NLFHjiZuQz -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:07 2025 by rpki-client