This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: Yblelnq/UPCiALkMMUKFjUGR+qZ6722LdaDnouhk9po= Subject key identifier: 9D:0D:72:63:B5:53:37:63:88:A3:4E:BA:F6:CE:43:3B:64:E1:DD:A3 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 02E2 Signing time: Tue 23 Dec 2025 00:18:18 +0000 Manifest this update: Tue 23 Dec 2025 00:18:17 +0000 Manifest next update: Tue 30 Dec 2025 00:18:17 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: YVuxaFlhLnb1EYQlK2eFNuNgYl2eTo/aiScOGoQLjDo=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Dec 23 00:18:17 2025 GMT Not After : Dec 30 00:18:17 2025 GMT Subject: CN=6949dfca-3265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:b0:b4:4d:a5:76:84:56:55:e6:19:b0:98: 16:11:b7:52:d2:07:bc:87:b6:06:53:21:29:28:af: 49:1e:90:3d:e1:ea:66:3f:ba:13:8c:7d:66:1a:57: 88:f8:c8:67:64:2a:38:71:67:e9:83:7f:f6:7e:43: 0d:33:8f:3e:8c:79:4a:e9:39:42:84:c5:51:71:11: 02:d8:b8:74:dc:7d:40:50:c4:73:79:5e:a4:61:3a: a0:26:91:4d:5f:9d:4d:ea:2b:dd:18:c5:22:80:9d: 59:e4:d8:31:f7:fd:ec:5b:eb:d0:22:7a:79:14:24: 12:09:8b:bb:87:ac:a6:d4:d5:c3:91:4f:cf:49:fd: 90:69:89:02:c8:e0:1d:31:1e:69:e1:a7:0f:81:8b: 1b:55:e6:29:22:f3:8f:f8:49:4d:4d:e9:ec:27:25: 9f:69:cf:79:6c:62:e1:2c:b5:5e:91:b4:cc:1f:f6: e1:66:49:cd:3d:66:1c:a9:96:d9:cc:55:75:d7:91: 80:b2:f5:73:16:3d:d2:b8:84:e7:93:07:45:e9:d3: 46:48:76:1a:4e:f6:7e:f0:3b:43:f8:c5:07:3f:95: 58:42:9c:f9:99:39:26:d3:78:63:f0:67:f5:3c:4b: 1a:a9:f6:9f:58:e2:19:76:db:b0:76:95:02:bb:d4: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:72:63:B5:53:37:63:88:A3:4E:BA:F6:CE:43:3B:64:E1:DD:A3 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:88:8c:2a:5c:90:46:b5:79:7c:b5:14:16:d6:9b:16:1b:81: 47:94:f3:9a:f3:26:f3:2a:92:c4:f0:4a:1e:35:7b:83:81:8f: dd:77:7d:47:ab:b6:a2:cc:8d:3f:f2:f7:36:3b:df:02:97:46: 5d:1b:5d:65:08:83:50:5b:f3:0b:a1:e7:59:9f:09:8d:d1:06: ba:12:0e:23:94:7e:22:a6:09:43:04:54:57:51:d3:09:d9:13: 7f:39:27:8a:2c:3d:05:a5:39:2f:67:52:ee:03:4f:70:7f:22: b2:d6:61:55:08:e1:e6:b7:11:b3:0c:fe:8b:fc:d8:0d:fe:f6: 47:db:43:dc:97:25:6f:6a:05:e1:8d:ef:a1:4b:5e:0f:2a:02: e4:d0:3e:77:a2:9c:ba:46:23:0f:b3:99:1e:5a:dc:0a:9e:f8: 59:36:f6:39:b9:96:9c:60:f3:55:9c:1e:ec:bf:ac:91:ba:0d: 4a:63:dc:83:0b:51:65:f0:0f:b9:dd:e5:3a:ae:01:9c:73:b5: 3b:58:f2:0f:19:fb:e9:81:cb:3c:e1:73:72:c6:85:53:76:99: 65:f2:6b:fd:1f:63:e9:61:69:9a:5b:a2:4a:be:f9:f7:f4:00: 33:d2:ad:5c:a0:ee:4c:17:96:dc:f9:01:7b:7f:72:73:d6:3d: 91:36:31:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUxMjIzMDAxODE3WhcNMjUxMjMwMDAxODE3WjAYMRYwFAYD VQQDDA02OTQ5ZGZjYS0zMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU2wtE2ldoRWVeYZsJgWEbdS0ge8h7YGUyEpKK9JHpA94epmP7oTjH1mGleI +MhnZCo4cWfpg3/2fkMNM48+jHlK6TlChMVRcREC2Lh03H1AUMRzeV6kYTqgJpFN X51N6ivdGMUigJ1Z5Ngx9/3sW+vQInp5FCQSCYu7h6ym1NXDkU/PSf2QaYkCyOAd MR5p4acPgYsbVeYpIvOP+ElNTensJyWfac95bGLhLLVekbTMH/bhZknNPWYcqZbZ zFV115GAsvVzFj3SuITnkwdF6dNGSHYaTvZ+8DtD+MUHP5VYQpz5mTkm03hj8Gf1 PEsaqfafWOIZdtuwdpUCu9RQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0NcmO1 UzdjiKNOuvbOQztk4d2jMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQiIwqXJBGtXl8tRQW1psWG4FHlPOa8ybzKpLE8EoeNXuDgY/dd31H q7aizI0/8vc2O98Cl0ZdG11lCINQW/MLoedZnwmN0Qa6Eg4jlH4ipglDBFRXUdMJ 2RN/OSeKLD0FpTkvZ1LuA09wfyKy1mFVCOHmtxGzDP6L/NgN/vZH20PclyVvagXh je+hS14PKgLk0D53opy6RiMPs5keWtwKnvhZNvY5uZacYPNVnB7sv6yRug1KY9yD C1Fl8A+53eU6rgGcc7U7WPIPGfvpgcs84XNyxoVTdpll8mv9H2PpYWmaW6JKvvn3 9AAz0q1coO5MF5bc+QF7f3Jz1j2RNjEQ -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:27 2025 by rpki-client