This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: ExGXW3L4RhdMjKzZpH5DWm3Q/BBqpjX4TecGec0T7ks= Subject key identifier: 67:C0:5B:5E:29:B6:A0:D2:C5:E8:8F:EC:6B:9E:86:F3:36:E1:B2:D5 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 032B Signing time: Tue 23 Dec 2025 00:05:05 +0000 Manifest this update: Tue 23 Dec 2025 00:05:05 +0000 Manifest next update: Tue 30 Dec 2025 00:05:05 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: x020D3b1PWl+tGe2i8EKk1YLsnk3zQIAu493tUwEfII=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: z4QSZHsaMIqrT5GqWS+ItSZJBTmn9r2MlyBM2UIg/g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: Dec 23 00:05:05 2025 GMT Not After : Dec 30 00:05:05 2025 GMT Subject: CN=6949dcb1-02dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:12:d5:8a:c8:b3:54:96:d0:a9:98:ff:b7: 49:22:c7:b2:3b:b7:2b:ed:38:0d:45:ef:a4:a5:8f: 65:f0:42:10:0d:29:aa:0d:0c:47:e0:da:4b:6b:b7: 2c:35:54:15:33:73:cc:fd:98:84:b5:ed:f7:01:26: 31:78:8c:f2:83:d1:ed:20:3b:1d:93:e1:1d:c8:35: c5:6e:12:ac:3f:42:02:d6:0f:21:0f:66:aa:9f:6a: 8f:9f:81:8b:b1:6c:73:0a:b7:e1:41:87:ab:9c:10: 35:8d:38:97:0c:d4:4b:45:55:ca:77:2a:82:03:a8: 29:c6:69:a4:4e:7b:db:77:fe:a1:d2:94:15:92:3c: bc:d7:9e:c6:99:56:7b:29:af:2e:bf:10:72:c8:d2: 8b:c3:5f:d7:46:ae:d8:1a:4b:ce:94:90:1b:17:f2: a4:39:9c:ca:70:bc:2e:8d:90:90:33:22:49:59:3e: 17:13:e2:2c:92:84:be:02:93:8a:12:b6:d4:6f:20: 8b:0d:e8:56:96:84:ff:40:b9:b0:45:4a:61:4d:98: 13:18:ba:9e:b9:5c:16:49:8f:6c:08:fe:e3:0e:af: 3a:4d:02:c3:c6:d5:e3:1d:d2:ff:9e:c0:9d:d3:71: b2:01:ba:23:41:79:43:1b:0e:ce:a5:3e:fc:b1:fd: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C0:5B:5E:29:B6:A0:D2:C5:E8:8F:EC:6B:9E:86:F3:36:E1:B2:D5 X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7d:a2:39:72:84:0c:55:f2:0e:20:6b:15:75:68:57:f4:2b: 55:51:5e:64:e8:4b:ae:1c:3f:03:86:76:85:76:1a:d8:c3:fa: 99:0a:01:b0:13:af:b7:f3:d1:5a:02:65:3e:9a:95:50:71:cd: b5:89:3a:10:50:41:61:0d:7d:87:c8:56:1e:b0:63:80:ea:12: 75:80:4b:03:a4:d4:36:23:50:00:ad:f1:86:af:17:d0:23:30: 98:d8:03:98:2d:8f:c5:73:4e:23:57:45:3b:61:41:37:4f:e1: 19:6c:d2:94:d2:dc:3a:e9:3e:ac:3f:23:ac:df:7e:da:05:90: 43:9b:a4:b3:dd:30:f3:28:cb:16:41:f7:32:23:f9:73:dd:46: 49:30:20:b0:6f:11:7c:a2:21:01:60:e3:4c:74:ea:7d:0e:4f: e9:c6:9c:35:d5:3d:31:1d:42:41:e3:d4:a1:08:e8:cf:e3:7d: 4a:07:db:93:4d:77:ab:9d:23:0e:e9:d0:39:86:e5:61:03:3b: c1:ed:08:43:b7:d5:7b:b0:ab:4a:30:82:26:bf:95:a9:48:de: 03:1a:55:f1:a2:8f:66:6c:c6:c9:4e:ce:dc:4d:8c:8f:11:3a: 2f:be:f1:3e:6d:14:b0:84:44:ae:dc:2f:fe:0f:3c:0d:ba:ce: db:49:14:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUxMjIzMDAwNTA1WhcNMjUxMjMwMDAwNTA1WjAYMRYwFAYD VQQDDA02OTQ5ZGNiMS0wMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqwS1YrIs1SW0KmY/7dJIseyO7cr7TgNRe+kpY9l8EIQDSmqDQxH4NpLa7cs NVQVM3PM/ZiEte33ASYxeIzyg9HtIDsdk+EdyDXFbhKsP0IC1g8hD2aqn2qPn4GL sWxzCrfhQYernBA1jTiXDNRLRVXKdyqCA6gpxmmkTnvbd/6h0pQVkjy8157GmVZ7 Ka8uvxByyNKLw1/XRq7YGkvOlJAbF/KkOZzKcLwujZCQMyJJWT4XE+IskoS+ApOK ErbUbyCLDehWloT/QLmwRUphTZgTGLqeuVwWSY9sCP7jDq86TQLDxtXjHdL/nsCd 03GyAbojQXlDGw7OpT78sf1HkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfAW14p tqDSxeiP7GuehvM24bLVMB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChfaI5coQMVfIOIGsVdWhX9CtVUV5k6EuuHD8DhnaFdhrYw/qZCgGw E6+389FaAmU+mpVQcc21iToQUEFhDX2HyFYesGOA6hJ1gEsDpNQ2I1AArfGGrxfQ IzCY2AOYLY/Fc04jV0U7YUE3T+EZbNKU0tw66T6sPyOs337aBZBDm6Sz3TDzKMsW QfcyI/lz3UZJMCCwbxF8oiEBYONMdOp9Dk/pxpw11T0xHUJB49ShCOjP431KB9uT TXernSMO6dA5huVhAzvB7QhDt9V7sKtKMIImv5WpSN4DGlXxoo9mbMbJTs7cTYyP ETovvvE+bRSwhESu3C/+DzwNus7bSRRz -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:58 2025 by rpki-client