This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: nwe5XQ4DHfYL34OM09V0b9pPHcUgdlBn4Grvi6BTW60= Subject key identifier: 6F:E8:AE:35:F1:0C:AA:C2:61:9F:F5:A2:C6:BD:C0:C8:BC:57:46:B8 Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0B1F Signing time: Mon 22 Dec 2025 18:46:49 +0000 Manifest this update: Mon 22 Dec 2025 18:46:49 +0000 Manifest next update: Mon 29 Dec 2025 18:46:49 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: zTjz21tzNimcfmmzYSJZg5YgRmbGMmH7Yz1uc0786DM=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: XgnhviRQUKAkeu4itRmlPhHlV4kxqNIZcBKK2pdxl3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Dec 22 18:46:49 2025 GMT Not After : Dec 29 18:46:49 2025 GMT Subject: CN=69499219-3fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:3b:44:8f:c1:27:7e:58:51:83:82:cb:f3: 7c:4a:91:d6:ef:61:a3:e8:d6:1e:82:a2:8e:7f:f8: 8c:e7:ec:8a:36:50:40:49:c3:28:bb:aa:a8:76:63: 8d:0c:8a:7a:ce:08:f4:8e:68:d0:00:cf:54:26:01: 0d:97:8c:71:ec:cd:32:97:a5:1c:49:3a:77:5a:27: 11:9f:62:6c:e6:a9:51:eb:e1:59:64:ce:d6:1f:ff: f6:aa:e8:f8:cc:28:71:41:54:80:01:fd:0f:47:ed: 64:2d:e0:38:fa:d4:48:58:51:c0:6e:02:c6:d8:a3: c4:85:3d:b1:0f:80:df:2d:89:e7:49:10:c4:03:37: df:2e:3d:6e:13:ef:a5:ef:44:42:c8:98:0f:23:eb: 73:0c:81:94:50:b0:a2:62:d5:7e:99:5d:88:74:cf: 4e:74:5e:18:c3:9f:2b:c8:d7:06:2f:fb:3c:1d:69: 0e:82:52:4e:d9:7b:72:c9:25:12:00:d1:ff:38:4c: e1:05:26:ea:7d:9a:43:a2:82:11:97:83:37:97:5a: 3b:94:2f:f2:ee:27:69:07:32:60:1e:fa:5c:a9:3b: d3:ea:91:91:65:76:4e:2c:81:2a:84:34:e9:fb:66: 71:57:38:bb:03:13:5f:ee:c7:13:75:6f:29:7f:d7: 0d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E8:AE:35:F1:0C:AA:C2:61:9F:F5:A2:C6:BD:C0:C8:BC:57:46:B8 X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c9:dc:d5:b4:6e:76:1c:d3:61:89:1a:17:6b:83:9a:82:4e: 96:a7:b1:f8:e2:47:90:02:cd:58:b1:54:df:cf:7d:00:26:34: 2e:50:e6:d6:ba:9b:4e:49:ce:00:24:4c:48:95:8e:28:d7:38: 60:7b:6b:5d:29:5c:ea:29:8d:d6:ef:9c:b7:d0:5f:f5:39:cc: 2d:71:ca:ec:1d:89:70:7a:b8:57:74:4c:4e:da:f1:7a:89:d0: 6c:99:e0:79:c9:7b:08:23:c1:cd:4f:82:02:45:43:c2:45:fa: 14:ed:fa:27:63:74:ee:f6:05:13:fc:67:56:cc:0a:30:90:c9: 12:a4:cf:aa:47:df:50:f2:f6:e7:7f:56:2d:16:22:7b:73:d6: 3d:f2:31:f2:41:03:80:02:65:7d:8c:93:4a:53:19:c6:9f:e4: 08:5b:6a:3f:0a:96:93:e6:5c:fe:e4:76:ba:84:0c:73:14:31: 98:6a:ae:93:61:76:03:47:78:c6:61:6c:80:5e:3d:c9:84:c7: 6c:e1:38:c7:dd:33:d0:f1:56:90:0a:50:d7:cd:d2:e9:9e:b0: 71:0f:0f:b5:b2:d6:9f:05:70:32:75:d9:09:ff:af:b4:67:0f: 23:80:6a:40:41:db:63:90:16:43:e1:96:46:d6:20:23:ed:7d: c3:df:09:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUxMjIyMTg0NjQ5WhcNMjUxMjI5MTg0NjQ5WjAYMRYwFAYD VQQDDA02OTQ5OTIxOS0zZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjQ7RI/BJ35YUYOCy/N8SpHW72Gj6NYegqKOf/iM5+yKNlBAScMou6qodmON DIp6zgj0jmjQAM9UJgENl4xx7M0yl6UcSTp3WicRn2Js5qlR6+FZZM7WH//2quj4 zChxQVSAAf0PR+1kLeA4+tRIWFHAbgLG2KPEhT2xD4DfLYnnSRDEAzffLj1uE++l 70RCyJgPI+tzDIGUULCiYtV+mV2IdM9OdF4Yw58ryNcGL/s8HWkOglJO2XtyySUS ANH/OEzhBSbqfZpDooIRl4M3l1o7lC/y7idpBzJgHvpcqTvT6pGRZXZOLIEqhDTp +2ZxVzi7AxNf7scTdW8pf9cNpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/orjXx DKrCYZ/1osa9wMi8V0a4MB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVydzVtG52HNNhiRoXa4Oagk6Wp7H44keQAs1YsVTfz30AJjQuUObW uptOSc4AJExIlY4o1zhge2tdKVzqKY3W75y30F/1OcwtccrsHYlwerhXdExO2vF6 idBsmeB5yXsII8HNT4ICRUPCRfoU7fonY3Tu9gUT/GdWzAowkMkSpM+qR99Q8vbn f1YtFiJ7c9Y98jHyQQOAAmV9jJNKUxnGn+QIW2o/CpaT5lz+5Ha6hAxzFDGYaq6T YXYDR3jGYWyAXj3JhMds4TjH3TPQ8VaQClDXzdLpnrBxDw+1stafBXAyddkJ/6+0 Zw8jgGpAQdtjkBZD4ZZG1iAj7X3D3wny -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:42 2025 by rpki-client