This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: 4/BlqLXoU+E6ikpJhhzK+Tnmf66ZCEVkm0TWajhKgJg= Subject key identifier: 0C:8B:51:32:15:0E:11:4B:A2:5A:99:BF:91:B7:D8:A2:A8:21:58:87 Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 4E Signing time: Sun 07 Dec 2025 05:26:33 +0000 Manifest this update: Sun 07 Dec 2025 05:26:33 +0000 Manifest next update: Sun 14 Dec 2025 05:26:33 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: /68WTKrFhN2soap1GHwpS+d79v8oKWkVe3/KJivKA1g=) 2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: RPf9NqAE6pLl+9GCTFNlsn+MgSYDmDceWR0KK3K6OCw=) 3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: MQngZQ/wU1MkMIqSO6wrur4Hqr2/VRq/8pjF4hDEg7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Dec 7 05:26:33 2025 GMT Not After : Dec 14 05:26:33 2025 GMT Subject: CN=69351009-1f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:ce:5c:37:b0:ec:1c:d6:47:3c:96:d0:da: fc:4e:2d:07:e0:83:28:03:ce:a8:1e:69:b7:79:74: 59:52:65:58:ea:70:b2:1d:ab:23:2c:74:e1:b7:12: be:22:1c:b2:23:0e:e5:0a:f7:15:2a:36:e4:d4:3f: bd:e3:fb:cc:01:af:21:17:f8:2c:b9:85:48:1b:4c: de:67:23:64:86:06:61:d2:6c:09:af:3c:ed:3d:e3: b1:ff:fc:27:4e:5e:8b:0e:3a:c8:63:28:92:e9:02: 57:11:bc:cd:ba:78:ae:53:45:44:c8:4f:4d:a0:37: 78:37:e7:f0:cd:f9:8c:37:53:98:9c:2d:32:42:75: be:bd:b6:84:66:35:aa:3f:dc:a3:65:bc:c0:9e:a6: 6a:84:f3:44:d7:e5:b3:13:81:95:81:7b:24:67:2b: fb:4b:39:b0:d9:d2:f4:2c:31:7a:8c:b3:66:d9:0b: a7:db:9c:21:a6:af:e2:ec:9e:9e:0e:8f:e9:b3:b0: 26:6f:fe:29:43:8a:c1:68:2f:4a:73:7c:c1:cb:2d: 3f:ab:a4:2d:64:85:c7:a8:cd:ab:d7:7c:b5:32:05: 58:3b:fb:da:46:fe:a0:6e:2f:47:57:73:59:3d:e3: b8:40:97:d2:1f:88:ef:18:22:dc:bf:da:35:f7:33: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8B:51:32:15:0E:11:4B:A2:5A:99:BF:91:B7:D8:A2:A8:21:58:87 X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:1e:96:d2:e8:c6:55:7c:88:cd:9f:b7:7b:dc:77:3f:93: c6:4e:a2:e2:8d:69:c8:1e:48:08:bf:c1:84:7f:2d:5d:6b:52: 18:53:95:18:ae:5e:de:fc:2b:bb:af:69:b9:fb:cc:32:f7:dd: 21:f7:b7:07:82:5d:e1:95:ec:17:fc:2a:b3:8a:5f:9e:9d:f5: 7a:45:b0:be:42:90:3e:dc:52:8f:ed:b3:04:d8:00:e5:2e:03: ce:b3:24:64:13:b1:2a:d9:df:fd:03:aa:83:e5:20:04:41:eb: 6c:36:e5:8d:60:04:3b:0e:b7:f2:66:80:bd:bb:bc:8a:6f:8d: 1b:05:38:2e:cc:fe:e7:c7:62:86:2c:fd:75:60:39:7f:d4:62: 4c:40:be:e8:7b:2a:65:9e:ad:8b:29:26:08:0b:c2:58:95:ea: 37:96:d3:30:89:1b:d7:ab:b8:4f:bf:8e:0a:ff:e1:21:41:75: 81:d0:4a:f7:ec:97:2c:bd:68:dd:39:c1:c2:13:06:db:a4:ec: ff:5b:32:12:ec:23:68:cd:0c:dc:80:f7:c9:fe:5a:6f:22:f6: 7f:dd:be:ef:33:11:d7:43:bc:5b:7e:bb:e8:3e:4c:c2:3f:69: 36:37:60:f6:7b:3d:9e:fe:46:f3:3a:24:54:1c:66:df:3d:1e: a0:84:83:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNTEyMDcwNTI2MzNaFw0yNTEyMTQwNTI2MzNaMBgxFjAUBgNV BAMTDTY5MzUxMDA5LTFmODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpyM5cN7DsHNZHPJbQ2vxOLQfggygDzqgeabd5dFlSZVjqcLIdqyMsdOG3Er4i HLIjDuUK9xUqNuTUP73j+8wBryEX+Cy5hUgbTN5nI2SGBmHSbAmvPO0947H//CdO XosOOshjKJLpAlcRvM26eK5TRUTIT02gN3g35/DN+Yw3U5icLTJCdb69toRmNao/ 3KNlvMCepmqE80TX5bMTgZWBeyRnK/tLObDZ0vQsMXqMs2bZC6fbnCGmr+Lsnp4O j+mzsCZv/ilDisFoL0pzfMHLLT+rpC1khceozavXfLUyBVg7+9pG/qBuL0dXc1k9 47hAl9IfiO8YIty/2jX3M/QPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDItRMhUO EUuiWpm/kbfYoqghWIcwHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1LHpbS6MZVfIjNn7d73Hc/k8ZOouKNacgeSAi/wYR/LV1rUhhTlRiu Xt78K7uvabn7zDL33SH3tweCXeGV7Bf8KrOKX56d9XpFsL5CkD7cUo/tswTYAOUu A86zJGQTsSrZ3/0DqoPlIARB62w25Y1gBDsOt/JmgL27vIpvjRsFOC7M/ufHYoYs /XVgOX/UYkxAvuh7KmWerYspJggLwliV6jeW0zCJG9eruE+/jgr/4SFBdYHQSvfs lyy9aN05wcITBtuk7P9bMhLsI2jNDNyA98n+Wm8i9n/dvu8zEddDvFt+u+g+TMI/ aTY3YPZ7PZ7+RvM6JFQcZt89HqCEgxQ= -----END CERTIFICATE-----Generated at Mon Dec 8 14:27:29 2025 by rpki-client