This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json) Hash identifier: qNC84UvzV+LwQo7kCBrXGO3t8O01egL7+jq5Afik9IQ= Subject key identifier: 27:9F:2A:9B:A2:28:DA:9E:78:26:F7:DA:E4:5F:A5:74:5A:78:01:BC Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft Manifest number: 1C Signing time: Tue 23 Dec 2025 06:39:46 +0000 Manifest this update: Tue 23 Dec 2025 06:39:45 +0000 Manifest next update: Tue 30 Dec 2025 06:39:45 +0000 Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: 2tlRs4tA5ooDkkv9tIJnWaDMq1aTnlYqxHhkYtVX51w=) 2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 5BoyFe6vauY5VbEjJJ7Dh4FCQg/kfYL0f9QDaipyVwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Validity Not Before: Dec 23 06:39:45 2025 GMT Not After : Dec 30 06:39:45 2025 GMT Subject: CN=694a3932-2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:ca:0a:07:39:d3:63:73:a8:ba:c2:28:b4: 4b:d2:a5:d5:a1:23:a3:87:88:38:e5:2e:80:94:1e: ce:29:75:3a:f8:3d:34:bf:1b:c5:f1:e6:4b:70:7e: 5d:f1:f8:5f:8b:7a:98:62:74:20:70:70:5c:28:2a: 9c:71:0a:2f:90:86:86:a8:7f:e4:db:db:e5:4f:fa: 04:d9:11:8e:12:86:a3:93:b0:27:34:5b:b7:6d:e6: 0c:ea:47:ad:55:62:f9:37:bb:1b:93:06:dc:bf:72: ed:05:e7:aa:ef:d1:ef:80:71:2b:f8:06:22:a6:02: fe:2e:1b:ff:ff:ec:b5:08:d7:6e:73:85:80:10:f7: 1b:bb:f3:9c:1e:fa:5a:9e:11:67:85:9b:d4:a3:fb: cc:2c:75:fe:6e:3b:4d:10:a2:99:bd:55:1f:6d:44: 6b:58:57:57:2e:08:14:fb:fe:a7:64:e3:ef:0c:32: a9:de:36:ec:9c:53:40:b9:7e:ba:b8:c0:a6:68:aa: e3:d9:c5:97:06:48:fc:4c:6f:12:f5:5d:75:81:1c: b0:06:6f:60:9c:3c:36:35:d2:62:18:19:ae:5e:56: fe:29:de:d4:2f:40:63:a0:a2:8b:68:e7:dd:96:1e: fc:4f:80:bc:9f:8a:a3:8e:94:d9:d4:81:29:0a:26: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9F:2A:9B:A2:28:DA:9E:78:26:F7:DA:E4:5F:A5:74:5A:78:01:BC X509v3 Authority Key Identifier: keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0b:ce:2d:2f:e9:16:be:79:c2:80:ab:cf:bf:e6:aa:f9:2e: c9:e3:03:8d:f5:03:a6:8f:e8:00:64:13:98:64:f4:8a:20:d6: 12:6a:9c:9c:e2:f2:a6:27:53:d2:36:1d:0b:36:54:5b:81:78: aa:7e:6c:26:12:77:92:db:52:52:f2:96:0c:fe:c6:4a:0c:1a: a3:84:2b:df:d2:2f:47:fe:8e:b6:7b:15:3b:67:67:e0:ef:37: 8b:2a:43:57:6e:3a:82:fb:c3:ed:c8:e8:56:b6:f8:20:c5:cc: 1a:05:94:5c:e1:f6:26:5c:04:3e:c3:0b:8e:84:12:aa:7c:7f: f7:f7:c1:35:71:63:8f:18:d6:08:59:d4:64:af:74:1f:ac:44: a6:3c:d2:0f:7a:8f:3a:38:9f:78:c2:2e:be:3e:c3:3b:cd:4f: 6b:7f:1d:d7:34:16:7b:c3:df:75:36:78:53:4f:3f:ba:cc:4f: 89:76:dc:79:3c:a5:ff:7d:e9:8c:f4:2c:3e:2a:26:c6:8a:f1: 15:d0:99:c2:2b:f5:7e:64:c5:4b:43:58:ee:bc:94:10:18:a9: 82:23:a6:c6:77:44:eb:09:a6:11:6d:af:96:fb:6b:0b:55:59: 6c:6a:70:a4:30:54:74:18:fe:32:fd:fb:50:1d:8a:da:be:c2: af:d7:28:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoM0Y4RjM4NjMwRjREM0Q3MEVERDlFNUM5MUUzNkVDNDhF RkI5RkQ2MjAeFw0yNTEyMjMwNjM5NDVaFw0yNTEyMzAwNjM5NDVaMBgxFjAUBgNV BAMMDTY5NGEzOTMyLTJlYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjGsoKBznTY3OousIotEvSpdWhI6OHiDjlLoCUHs4pdTr4PTS/G8Xx5ktwfl3x +F+LephidCBwcFwoKpxxCi+Qhoaof+Tb2+VP+gTZEY4ShqOTsCc0W7dt5gzqR61V Yvk3uxuTBty/cu0F56rv0e+AcSv4BiKmAv4uG///7LUI125zhYAQ9xu785we+lqe EWeFm9Sj+8wsdf5uO00Qopm9VR9tRGtYV1cuCBT7/qdk4+8MMqneNuycU0C5frq4 wKZoquPZxZcGSPxMbxL1XXWBHLAGb2CcPDY10mIYGa5eVv4p3tQvQGOgooto592W HvxPgLyfiqOOlNnUgSkKJlpFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ58qm6Io 2p54Jvfa5F+ldFp4AbwwHwYDVR0jBBgwFoAUP484Yw9NPXDt2eXJHjbsSO+5/WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0RFNTMxMDgwQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhEdDJlWEpIamJzU08tNV9X SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDQ4NFl3OU5QWER0MmVYSkhqYnNTTy01X1dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0RFNTMxMDgwQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhE dDJlWEpIamJzU08tNV9XSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQLzi0v6Ra+ecKAq8+/5qr5LsnjA431A6aP6ABkE5hk9Iog1hJqnJzi 8qYnU9I2HQs2VFuBeKp+bCYSd5LbUlLylgz+xkoMGqOEK9/SL0f+jrZ7FTtnZ+Dv N4sqQ1duOoL7w+3I6Fa2+CDFzBoFlFzh9iZcBD7DC46EEqp8f/f3wTVxY48Y1ghZ 1GSvdB+sRKY80g96jzo4n3jCLr4+wzvNT2t/Hdc0FnvD33U2eFNPP7rMT4l23Hk8 pf996Yz0LD4qJsaK8RXQmcIr9X5kxUtDWO68lBAYqYIjpsZ3ROsJphFtr5b7awtV WWxqcKQwVHQY/jL9+1Aditq+wq/XKFM= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:16 2025 by rpki-client