This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: HAAokhLOkOk0WIypycSYQnantzTSrZZElc2UHKrghAk= Subject key identifier: F8:BC:05:DE:DC:82:11:4A:B3:96:AF:46:9A:75:C6:AB:8A:5A:51:D6 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07E8 Signing time: Sat 22 Nov 2025 20:06:23 +0000 Manifest this update: Sat 22 Nov 2025 20:06:22 +0000 Manifest next update: Sat 29 Nov 2025 20:06:22 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: J7UyBpUjPGSZrgHdcTpIdMU2DQuGbU01jxKrcXYfV8M=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Nov 22 20:06:22 2025 GMT Not After : Nov 29 20:06:22 2025 GMT Subject: CN=692217be-3236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:e2:a1:9d:d3:6d:a7:a6:25:87:35:5f:08: 92:a9:f2:9a:79:b5:31:21:a2:b3:37:ad:86:4c:c0: 58:31:80:51:27:98:6c:10:37:a6:e0:53:ec:70:ed: 07:9f:8d:d9:b3:03:54:af:88:71:be:1c:bd:1a:11: 4d:16:13:ec:42:83:e9:ae:c0:61:8f:27:eb:e8:4a: 8b:ea:53:ea:50:b4:4c:2a:87:94:dc:c5:ba:2d:d8: 65:f5:4c:8d:28:c1:86:12:b2:b1:eb:17:b9:d5:5e: 37:8a:2c:17:d9:d6:6a:ca:20:95:2a:e6:52:ba:7f: c4:00:a0:b7:c2:be:c9:6a:cb:62:eb:ff:6a:60:0e: a3:0b:af:a3:60:d3:8f:db:dd:50:c7:05:f7:40:a4: 77:36:2c:a4:23:06:5b:8f:0c:56:3e:a2:bd:58:41: a5:11:3a:5d:64:b1:bd:b2:56:ca:80:b6:52:08:56: fb:d8:40:14:4e:01:3f:c1:44:f3:74:3e:e9:36:b4: ec:14:ca:e8:45:0d:cb:c7:46:a8:03:c6:fa:23:d0: c0:74:b2:22:be:f5:60:34:ae:5b:b5:88:a5:e3:2d: ab:8a:e6:de:09:d5:9b:64:3c:ca:10:d2:db:e4:0c: 30:3c:a5:89:5b:38:94:5f:e8:19:5f:b9:f1:bb:47: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BC:05:DE:DC:82:11:4A:B3:96:AF:46:9A:75:C6:AB:8A:5A:51:D6 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:51:24:8d:5e:af:1b:81:9b:3e:0c:e6:1d:02:00:79:c0:b9: a4:ea:ae:a6:60:96:da:99:62:10:de:a4:c5:ee:06:36:c6:2e: 33:21:dc:d2:3f:76:b0:17:c6:8d:a8:5c:c8:60:5e:b8:10:cc: 65:6b:ba:80:06:62:e1:52:1b:fd:30:57:80:ca:93:82:c6:ed: 25:08:2f:3c:d7:60:b9:79:e2:52:23:ce:69:85:63:92:56:38: 1a:e6:5c:15:27:07:d6:39:fe:23:b6:b2:e2:13:98:1b:2a:26: 6c:ae:e0:f4:5d:f8:ef:9f:95:01:0c:da:62:e0:ce:fe:a9:54: 0f:7d:4c:39:54:26:24:a4:b6:4f:42:06:7a:ce:5d:59:c1:1d: 89:5e:da:84:15:cb:df:7d:d9:f9:d2:5e:bc:62:d0:74:60:2d: ed:a1:da:10:11:c6:93:58:0d:d2:95:a2:6f:d4:ca:0c:ec:8b: 02:0c:be:b9:5e:27:35:ff:8e:a2:2d:94:77:8e:ee:08:17:98: f1:a4:2c:f4:83:30:cc:28:89:af:e4:c3:d8:33:5d:ba:ad:70: 89:de:dc:9e:13:a6:b0:7d:87:26:86:6c:93:e1:3b:eb:49:2e: e7:70:c5:55:48:bc:df:69:32:20:a5:3c:ce:a3:da:ca:98:6a: 10:10:da:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMTIyMjAwNjIyWhcNMjUxMTI5MjAwNjIyWjAYMRYwFAYD VQQDEw02OTIyMTdiZS0zMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvDioZ3TbaemJYc1XwiSqfKaebUxIaKzN62GTMBYMYBRJ5hsEDem4FPscO0H n43ZswNUr4hxvhy9GhFNFhPsQoPprsBhjyfr6EqL6lPqULRMKoeU3MW6Ldhl9UyN KMGGErKx6xe51V43iiwX2dZqyiCVKuZSun/EAKC3wr7Jasti6/9qYA6jC6+jYNOP 291QxwX3QKR3NiykIwZbjwxWPqK9WEGlETpdZLG9slbKgLZSCFb72EAUTgE/wUTz dD7pNrTsFMroRQ3Lx0aoA8b6I9DAdLIivvVgNK5btYil4y2riubeCdWbZDzKENLb 5AwwPKWJWziUX+gZX7nxu0ex4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi8Bd7c ghFKs5avRpp1xquKWlHWMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUUSSNXq8bgZs+DOYdAgB5wLmk6q6mYJbamWIQ3qTF7gY2xi4zIdzS P3awF8aNqFzIYF64EMxla7qABmLhUhv9MFeAypOCxu0lCC8812C5eeJSI85phWOS Vjga5lwVJwfWOf4jtrLiE5gbKiZsruD0Xfjvn5UBDNpi4M7+qVQPfUw5VCYkpLZP QgZ6zl1ZwR2JXtqEFcvffdn50l68YtB0YC3todoQEcaTWA3SlaJv1MoM7IsCDL65 Xic1/46iLZR3ju4IF5jxpCz0gzDMKImv5MPYM126rXCJ3tyeE6awfYcmhmyT4Tvr SS7ncMVVSLzfaTIgpTzOo9rKmGoQENrU -----END CERTIFICATE-----Generated at Sat Nov 22 20:53:57 2025 by rpki-client