This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: xDHa2UpYK55R9o/GveKG7x+5XNFf/HjvZgN4q61Wqp4= Subject key identifier: 65:7B:C9:A0:80:69:DA:1F:04:B5:D8:00:87:38:B3:FC:55:AF:38:9D Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 9A Signing time: Tue 23 Dec 2025 05:20:55 +0000 Manifest this update: Tue 23 Dec 2025 05:20:54 +0000 Manifest next update: Tue 30 Dec 2025 05:20:54 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: msJZjREz3mTk0aUl/yE7C8Sev9E8zhBNxGxJPLyQSMM=) 2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=) 3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: Dec 23 05:20:54 2025 GMT Not After : Dec 30 05:20:54 2025 GMT Subject: CN=694a26b7-b5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:e2:05:6e:6a:5b:1a:41:15:bb:4c:b1:92: 47:42:8b:ff:43:d6:96:3d:42:84:c5:58:f6:a4:c4: e0:d8:89:1e:b1:c8:72:ea:a5:95:78:55:6f:db:bb: 51:76:02:37:cd:b9:51:22:ae:2c:43:1d:b7:55:1c: 15:e9:09:4a:54:8e:c2:ad:71:21:6e:a3:61:17:43: fe:8e:94:cb:59:84:10:f6:02:7e:a3:a0:4d:bf:29: 73:12:79:37:5b:e9:e6:72:be:42:0d:76:0a:f0:cc: 09:33:79:67:c9:7d:1d:72:34:e0:ce:90:f4:40:66: c8:a2:da:f0:dd:7c:49:b4:59:b2:e6:89:90:d2:39: 73:f1:f4:cd:8b:cf:84:07:bc:82:79:4e:89:48:f7: 43:9a:97:74:8d:a4:f4:07:f6:fa:67:16:74:0b:fe: 97:02:c2:87:61:86:3a:09:29:81:cd:17:d1:9e:92: ce:fc:4d:39:ee:41:ff:33:31:c7:72:a4:66:ac:b2: 36:74:c4:e3:3d:c9:f7:af:7a:ed:b6:44:6d:b5:d4: af:09:df:8a:ef:e9:15:7b:b0:15:a4:e8:51:f7:0b: cb:61:20:d2:7b:b8:5d:7a:5c:03:5b:0a:ce:90:26: 07:3b:b6:8c:4a:4f:e9:7b:d3:4d:10:d0:99:c4:8e: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:C9:A0:80:69:DA:1F:04:B5:D8:00:87:38:B3:FC:55:AF:38:9D X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cc:1a:5d:e1:5c:aa:d6:1b:b6:28:20:59:6b:59:41:4d:6c: 78:ee:70:2c:35:39:35:01:ea:3b:f8:88:27:36:a1:98:1f:3a: d2:50:d0:8c:dc:36:6a:ba:78:e6:bb:29:54:90:14:76:43:47: 4d:15:9a:e2:c5:dd:48:a2:65:17:86:ce:e5:86:a2:53:77:f3: 29:1f:e0:85:b0:d5:98:53:42:a1:dc:2c:78:8b:13:b8:4d:bd: 7a:e3:2f:1a:d5:b8:ad:ef:86:31:04:4c:a8:c2:23:df:ec:7c: fe:04:53:82:6d:e9:28:8f:62:69:a0:ae:d5:bd:32:fd:41:29: e5:09:dd:63:b9:4e:1a:c2:20:f9:20:55:f9:8c:b4:b3:63:e1: 62:48:79:5f:18:8e:f3:27:a9:b3:37:1c:90:69:8d:5f:c1:19: 59:37:1b:69:10:b5:13:0b:fd:ad:61:49:82:ff:97:dd:e8:02: 61:42:0a:0a:19:ed:59:b6:d4:01:13:13:e2:8f:68:87:8e:ef: 5d:c3:e7:b5:da:81:29:db:c3:db:c5:a7:e6:99:db:06:3f:03: 8d:a4:f4:55:aa:52:0d:45:cd:1d:90:21:b9:17:d2:9b:05:a5: 64:7e:a5:f3:17:a7:55:1e:d6:02:37:33:2e:97:0f:fa:aa:58: 08:73:bf:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzRjYxMTAvBgNVBAUTKDlGODlBNjA0RjQ1Q0VCNkY2ODA0RkI1MzRFQURDMjQx NjZCRDBGMjkwHhcNMjUxMjIzMDUyMDU0WhcNMjUxMjMwMDUyMDU0WjAYMRYwFAYD VQQDDA02OTRhMjZiNy1iNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ7iBW5qWxpBFbtMsZJHQov/Q9aWPUKExVj2pMTg2Ikeschy6qWVeFVv27tR dgI3zblRIq4sQx23VRwV6QlKVI7CrXEhbqNhF0P+jpTLWYQQ9gJ+o6BNvylzEnk3 W+nmcr5CDXYK8MwJM3lnyX0dcjTgzpD0QGbIotrw3XxJtFmy5omQ0jlz8fTNi8+E B7yCeU6JSPdDmpd0jaT0B/b6ZxZ0C/6XAsKHYYY6CSmBzRfRnpLO/E057kH/MzHH cqRmrLI2dMTjPcn3r3rttkRttdSvCd+K7+kVe7AVpOhR9wvLYSDSe7hdelwDWwrO kCYHO7aMSk/pe9NNENCZxI6CZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV7yaCA adofBLXYAIc4s/xVrzidMB8GA1UdIwQYMBaAFJ+JpgT0XOtvaAT7U06twkFmvQ8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDNGNi8zNzE2ODFGQUY4 RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYyOW9CUHRUVHEzQ1FXYTlE eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDNGNi8zNzE2ODFGQUY4RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYy OW9CUHRUVHEzQ1FXYTlEeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgzBpd4Vyq1hu2KCBZa1lBTWx47nAsNTk1Aeo7+IgnNqGYHzrSUNCM 3DZqunjmuylUkBR2Q0dNFZrixd1IomUXhs7lhqJTd/MpH+CFsNWYU0Kh3Cx4ixO4 Tb164y8a1bit74YxBEyowiPf7Hz+BFOCbekoj2JpoK7VvTL9QSnlCd1juU4awiD5 IFX5jLSzY+FiSHlfGI7zJ6mzNxyQaY1fwRlZNxtpELUTC/2tYUmC/5fd6AJhQgoK Ge1ZttQBExPij2iHju9dw+e12oEp28PbxafmmdsGPwONpPRVqlINRc0dkCG5F9Kb BaVkfqXzF6dVHtYCNzMulw/6qlgIc78T -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:19 2025 by rpki-client