This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: haEMIG8KHi94Yzrfb1z4+bmOS4XuICiGpWkVcku3s7k= Subject key identifier: 3E:10:FB:C8:0E:D5:66:9A:00:1D:53:B0:93:A1:16:91:E8:35:A0:A4 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 62 Signing time: Wed 03 Dec 2025 05:17:32 +0000 Manifest this update: Wed 03 Dec 2025 05:17:31 +0000 Manifest next update: Wed 10 Dec 2025 05:17:31 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: dms3UV8zaXNsxsHy7fsIainws9Frd1A/F/GAIu35caQ=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Dec 3 05:17:31 2025 GMT Not After : Dec 10 05:17:31 2025 GMT Subject: CN=692fc7ec-896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:85:70:64:2a:33:5e:7a:7e:30:58:f8:42: a5:33:33:17:24:d5:39:fa:40:13:d9:9b:fc:ec:15: 34:e2:10:d6:75:3a:78:c8:ff:f4:5d:93:2c:03:c9: e5:e4:7f:09:46:e3:34:c5:b2:25:d7:a7:4b:57:9a: 03:14:e6:69:ca:20:a3:97:b3:59:ab:de:14:f4:f8: 75:0e:52:01:08:1e:57:7f:56:0b:e4:41:bc:eb:d6: 78:84:8a:87:31:0e:47:30:f0:5a:9a:12:b5:be:08: 0c:77:2d:c9:df:b7:26:17:d7:c3:6c:18:f9:57:8c: bb:6f:58:77:53:28:53:7f:a4:09:9b:b1:63:de:52: cf:ef:13:89:44:96:ca:e3:07:78:fd:e8:3f:e7:ae: 50:79:b6:00:11:b8:b6:1f:0e:10:7a:24:b7:41:23: 75:45:ab:fe:a8:86:0d:cf:95:5b:7f:b6:ff:39:aa: 5d:bb:64:32:ad:8b:63:fe:ad:e0:38:f9:44:b5:a2: 9b:7b:2a:de:5e:d2:dd:db:0c:21:a9:85:73:46:c1: ea:00:e1:f8:e4:18:88:74:51:64:3e:3b:ff:e7:ff: b6:ad:7f:ac:03:53:01:e9:a5:bd:25:5e:19:81:7a: 2d:d0:10:26:d3:37:44:55:ad:7f:04:5d:17:fc:87: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:FB:C8:0E:D5:66:9A:00:1D:53:B0:93:A1:16:91:E8:35:A0:A4 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:64:49:72:89:0f:77:f4:64:f7:9b:b3:df:bb:e6:da:0b:a7: 23:f2:a8:21:bd:07:3d:82:7e:a0:f8:5c:d0:fb:01:a2:01:81: 3a:70:5c:3b:40:6b:5f:ee:d5:52:6d:9d:b7:bc:14:24:86:c3: 84:97:81:02:1c:64:bd:e3:6a:fe:4a:f7:37:bd:46:ec:a5:10: e5:71:16:f3:af:53:99:21:a6:f5:87:c1:ee:ca:92:c4:1b:13: 09:20:70:f5:d4:3f:b8:d9:b3:8f:b6:ee:ea:a7:bc:90:54:dd: 36:a2:1c:30:47:29:a7:f3:d3:7a:46:65:2e:e0:c3:87:b9:40: e9:68:c1:1a:64:72:c6:6b:a4:27:7f:b7:1e:48:9d:a6:1e:dd: 04:c7:65:7a:a2:b5:c7:ef:ef:43:ba:dd:b6:ee:07:e9:08:a4: 7a:a1:43:42:00:96:99:fb:41:c5:30:55:c9:44:ae:bf:fd:f9: c2:d1:b9:33:63:57:8d:b2:91:ef:c7:29:d9:59:77:47:b0:d2: 18:98:0d:c3:3e:e5:46:a9:5b:aa:86:e5:c0:c5:40:28:21:27: 0f:76:10:6c:6b:2d:9f:12:8d:f0:dd:52:13:e2:ef:88:08:c5: 8b:71:46:75:ba:f1:4c:54:1d:70:dc:a7:26:08:68:9d:cf:6e: f1:1e:c4:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTEyMDMwNTE3MzFaFw0yNTEyMTAwNTE3MzFaMBgxFjAUBgNV BAMTDTY5MmZjN2VjLTg5NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaZIVwZCozXnp+MFj4QqUzMxck1Tn6QBPZm/zsFTTiENZ1OnjI//RdkywDyeXk fwlG4zTFsiXXp0tXmgMU5mnKIKOXs1mr3hT0+HUOUgEIHld/VgvkQbzr1niEiocx Dkcw8FqaErW+CAx3LcnftyYX18NsGPlXjLtvWHdTKFN/pAmbsWPeUs/vE4lElsrj B3j96D/nrlB5tgARuLYfDhB6JLdBI3VFq/6ohg3PlVt/tv85ql27ZDKti2P+reA4 +US1opt7Kt5e0t3bDCGphXNGweoA4fjkGIh0UWQ+O//n/7atf6wDUwHppb0lXhmB ei3QECbTN0RVrX8EXRf8h7wPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPhD7yA7V ZpoAHVOwk6EWkeg1oKQwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI9kSXKJD3f0ZPebs9+75toLpyPyqCG9Bz2CfqD4XND7AaIBgTpwXDtA a1/u1VJtnbe8FCSGw4SXgQIcZL3jav5K9ze9RuylEOVxFvOvU5khpvWHwe7KksQb EwkgcPXUP7jZs4+27uqnvJBU3TaiHDBHKafz03pGZS7gw4e5QOlowRpkcsZrpCd/ tx5InaYe3QTHZXqitcfv70O63bbuB+kIpHqhQ0IAlpn7QcUwVclErr/9+cLRuTNj V42yke/HKdlZd0ew0hiYDcM+5UapW6qG5cDFQCghJw92EGxrLZ8SjfDdUhPi74gI xYtxRnW68UxUHXDcpyYIaJ3PbvEexJs= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:56 2025 by rpki-client