This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json) Hash identifier: GTuL5TixAT0rtNce53Vtsz/l0xfEgV7TLYX/reE2ROc= Subject key identifier: 2F:40:AF:BE:D7:3A:8B:CF:8A:11:CC:2D:06:56:AA:19:DF:9C:FA:5D Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft Manifest number: 07E5 Signing time: Mon 22 Dec 2025 20:29:00 +0000 Manifest this update: Mon 22 Dec 2025 20:28:59 +0000 Manifest next update: Mon 29 Dec 2025 20:28:59 +0000 Files and hashes: 1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: bfAnG6k7vSglcI7kEwLrC+1zYVV6hnYtp6/5hC1Tqqw=) 2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: s6A+c8B69JJC0+7xzhZxL1Je8usV/7mi3hySHgYS654=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Validity Not Before: Dec 22 20:28:59 2025 GMT Not After : Dec 29 20:28:59 2025 GMT Subject: CN=6949aa0b-4ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:09:86:31:5b:f8:9c:c9:15:29:37:97:e5: fb:03:72:00:f4:1f:6f:8c:cf:fa:b2:ca:b6:23:18: 13:ce:51:36:d4:55:27:1c:d5:dc:0b:d4:a0:15:68: c7:ad:a8:a2:43:fe:49:81:43:71:9f:ca:f1:fe:22: f5:ef:f6:f0:d1:89:4f:38:d9:dc:a1:33:50:9b:89: 46:47:37:c9:44:65:8a:7c:93:d5:0a:67:16:1c:3f: e8:aa:95:d3:e9:0f:82:3b:76:e8:6f:c6:9d:a8:d9: 09:07:34:aa:a3:9a:ea:30:b2:8d:7a:8f:17:df:8b: 28:5a:3a:2a:06:92:d8:04:4c:75:2f:43:57:52:65: e9:7c:d3:38:7d:77:91:66:e3:bf:20:03:1c:9a:17: 0b:91:9c:b4:10:a4:d0:2f:46:55:f4:d0:ff:08:63: ce:a2:3c:72:98:c1:60:4d:71:c8:8f:f5:6a:df:31: c0:87:7d:f5:5e:e7:95:e1:4d:78:2e:da:f7:96:4b: 07:84:74:e1:6a:9b:19:22:91:c8:73:d7:9d:71:86: f8:2e:fd:15:09:58:be:13:c7:a8:35:ba:b6:1e:a0: f1:7f:48:83:35:10:b2:46:c5:d7:86:b2:2c:21:56: 0c:34:df:3f:b8:75:50:72:72:cb:6d:f9:e1:63:49: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:40:AF:BE:D7:3A:8B:CF:8A:11:CC:2D:06:56:AA:19:DF:9C:FA:5D X509v3 Authority Key Identifier: keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:97:cc:d0:61:62:5b:bd:2f:14:05:f3:69:72:ac:9a:26:f0: cc:d7:96:e2:74:64:6f:fe:7d:59:95:af:80:4f:69:6a:03:9e: d8:41:9f:6a:b6:99:cc:2a:8a:d4:08:6e:81:d2:f4:a1:20:5f: 12:a9:d3:a0:e2:90:5e:5e:b9:50:9d:03:73:68:73:0b:3d:70: 3f:cd:27:33:50:73:1b:39:75:53:01:6b:88:d3:c9:db:90:f7: 9a:ae:6a:74:41:be:6c:75:eb:a0:79:ef:1b:59:de:27:dd:ce: 65:09:75:30:1c:7d:5f:3e:c7:7a:d6:46:66:9c:bf:1d:e4:bf: 9c:79:3d:d7:3d:bf:ab:a8:25:c7:05:43:e5:92:0b:28:9a:5e: ae:98:99:80:7d:87:8c:ac:58:50:f1:c2:04:3e:7c:1e:30:44: 52:7c:93:c0:be:ef:6c:d1:34:98:c2:d3:e7:6a:e8:a3:65:f9: e3:52:e8:97:d1:1c:39:3e:2d:cf:73:0c:02:55:28:c0:0e:97: 88:14:a1:7f:93:39:59:46:57:20:4f:0e:a5:af:ab:5f:d6:ef: 64:31:eb:85:f0:1d:cd:93:c4:6a:9e:d8:d2:0d:ed:42:a8:de: 70:4d:1b:20:2c:35:26:b6:96:c2:b1:50:68:91:bb:7a:49:9c: 32:ce:45:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5NzcwMDEzMkM3 QUM4NkU2MjAwHhcNMjUxMjIyMjAyODU5WhcNMjUxMjI5MjAyODU5WjAYMRYwFAYD VQQDDA02OTQ5YWEwYi00YWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYMJhjFb+JzJFSk3l+X7A3IA9B9vjM/6ssq2IxgTzlE21FUnHNXcC9SgFWjH raiiQ/5JgUNxn8rx/iL17/bw0YlPONncoTNQm4lGRzfJRGWKfJPVCmcWHD/oqpXT 6Q+CO3bob8adqNkJBzSqo5rqMLKNeo8X34soWjoqBpLYBEx1L0NXUmXpfNM4fXeR ZuO/IAMcmhcLkZy0EKTQL0ZV9ND/CGPOojxymMFgTXHIj/Vq3zHAh331XueV4U14 Ltr3lksHhHThapsZIpHIc9edcYb4Lv0VCVi+E8eoNbq2HqDxf0iDNRCyRsXXhrIs IVYMNN8/uHVQcnLLbfnhY0mTxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9Ar77X OovPihHMLQZWqhnfnPpdMB8GA1UdIwQYMBaAFEuFZ/s4e/10B2tQl3ABMseshuYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0M1Mi82NTI4MzZFODEz OEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19YUUhhMUNYY0FFeXg2eUc1 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M0Vm4temg3X1hRSGExQ1hjQUV5eDZ5RzVpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0M1Mi82NTI4MzZFODEzOEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19Y UUhhMUNYY0FFeXg2eUc1aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHl8zQYWJbvS8UBfNpcqyaJvDM15bidGRv/n1Zla+AT2lqA57YQZ9q tpnMKorUCG6B0vShIF8SqdOg4pBeXrlQnQNzaHMLPXA/zSczUHMbOXVTAWuI08nb kPearmp0Qb5sdeugee8bWd4n3c5lCXUwHH1fPsd61kZmnL8d5L+ceT3XPb+rqCXH BUPlkgsoml6umJmAfYeMrFhQ8cIEPnweMERSfJPAvu9s0TSYwtPnauijZfnjUuiX 0Rw5Pi3PcwwCVSjADpeIFKF/kzlZRlcgTw6lr6tf1u9kMeuF8B3Nk8RqntjSDe1C qN5wTRsgLDUmtpbCsVBokbt6SZwyzkUy -----END CERTIFICATE-----Generated at Tue Dec 23 04:16:07 2025 by rpki-client