This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: xzoo/UhnghBfCniA6SorkFDZm3qVwpfjr8E7R2ogbtk= Subject key identifier: EA:04:95:9E:0A:DD:23:03:5B:D4:19:B0:E0:46:AD:4F:1C:A9:B1:E8 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 04 Signing time: Mon 15 Dec 2025 10:25:25 +0000 Manifest this update: Mon 15 Dec 2025 10:25:24 +0000 Manifest next update: Mon 22 Dec 2025 10:25:24 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: oyMgudrqzsUAPoagrOV/+0raTACVbSao7Od2AiQ3dK0=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: mc23TLWcQpileDQlx1e7FDTUox4NNol25hSA6IP7+MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Dec 15 10:25:24 2025 GMT Not After : Dec 22 10:25:24 2025 GMT Subject: CN=693fe215-4f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:12:0f:fc:76:05:4c:80:97:0b:81:03:dc: a9:c8:da:ed:90:f5:15:01:3a:8d:7f:33:43:d3:d0: ec:55:33:43:7c:c7:03:0e:1d:70:59:76:ca:45:ca: 58:47:b6:62:91:da:dc:c6:46:39:da:2d:33:34:95: db:26:2d:9b:f4:51:bb:68:4e:70:4c:dd:cb:1f:44: 55:0b:85:74:15:34:86:fa:d8:0e:d6:5b:3e:26:ce: dd:0c:e8:d6:2a:a1:6c:56:2b:78:73:8f:e4:4c:9b: fd:35:ba:de:75:f2:62:f2:31:1f:95:ed:18:b8:21: a9:cc:f3:0f:85:60:6e:0c:25:c5:51:97:04:1d:f0: 2a:0d:f3:93:63:18:96:1f:b4:89:4f:09:45:de:d5: b3:0a:70:23:88:f0:9c:96:9e:b5:f3:ca:0e:62:1e: de:f8:54:4d:28:c5:83:c7:03:f4:79:81:f3:27:86: ef:d6:1e:eb:17:cf:91:49:4a:a4:2e:73:6b:d5:6d: 0a:a0:cf:d4:0c:c3:54:70:cd:9b:bd:80:56:3c:29: 26:9d:e9:6d:92:8e:fd:78:48:3d:37:f7:97:8a:d2: 2a:dd:9c:d9:af:b9:29:ca:da:f7:49:b2:a1:27:a0: f6:8d:58:7e:b2:db:37:16:f8:0e:c3:f6:20:0d:88: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:95:9E:0A:DD:23:03:5B:D4:19:B0:E0:46:AD:4F:1C:A9:B1:E8 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f1:36:18:ef:19:ee:1d:ad:7d:cb:b8:4f:5f:e3:19:09:81: ab:0d:20:92:af:19:1f:b2:11:5f:59:a9:cd:2e:4a:df:81:ba: 00:ef:f6:cc:89:f1:eb:a1:e5:d8:83:d3:c9:97:bd:2f:78:93: a4:47:4b:30:e0:4c:41:c3:7f:f6:34:84:77:2d:29:27:63:64: df:0b:6d:74:97:d4:29:e2:fe:4f:95:76:1b:30:32:d0:b4:c8: 9a:ce:b9:cc:78:29:a0:a9:58:f7:3b:9e:87:57:e7:7d:ef:a8: f2:87:c6:7e:75:36:90:46:4a:7b:bb:81:71:2f:f6:50:8e:32: 53:d5:88:3f:5c:a3:12:48:6d:40:49:9f:a7:21:25:87:68:58: e4:ea:8a:b5:71:4c:9c:c1:f2:f5:d2:ad:c2:cd:3c:6b:9e:33: 3e:b0:49:1d:e9:d8:9e:ff:76:4b:0e:ad:d0:33:60:da:0f:f5: 47:64:57:b9:1b:82:b4:17:9f:b3:b9:9b:3c:97:ef:ca:51:6f: 47:c2:84:25:4f:28:b5:61:2a:65:63:6b:94:3c:e0:65:9b:8c: e5:67:95:0d:87:d1:1e:0d:eb:be:b3:15:8a:52:f8:e3:48:5b: cd:9c:29:95:45:6b:e7:8b:19:16:cc:c6:2b:af:2f:8a:d5:43: 5e:07:8b:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNTEyMTUxMDI1MjRaFw0yNTEyMjIxMDI1MjRaMBgxFjAUBgNV BAMMDTY5M2ZlMjE1LTRmNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjcRIP/HYFTICXC4ED3KnI2u2Q9RUBOo1/M0PT0OxVM0N8xwMOHXBZdspFylhH tmKR2tzGRjnaLTM0ldsmLZv0UbtoTnBM3csfRFULhXQVNIb62A7WWz4mzt0M6NYq oWxWK3hzj+RMm/01ut518mLyMR+V7Ri4IanM8w+FYG4MJcVRlwQd8CoN85NjGJYf tIlPCUXe1bMKcCOI8JyWnrXzyg5iHt74VE0oxYPHA/R5gfMnhu/WHusXz5FJSqQu c2vVbQqgz9QMw1RwzZu9gFY8KSad6W2Sjv14SD0395eK0irdnNmvuSnK2vdJsqEn oPaNWH6y2zcW+A7D9iANiGojAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6gSVngrd IwNb1Bmw4EatTxypsegwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTxNhjvGe4drX3LuE9f4xkJgasNIJKvGR+yEV9Zqc0uSt+BugDv9syJ 8euh5diD08mXvS94k6RHSzDgTEHDf/Y0hHctKSdjZN8LbXSX1Cni/k+VdhswMtC0 yJrOucx4KaCpWPc7nodX533vqPKHxn51NpBGSnu7gXEv9lCOMlPViD9coxJIbUBJ n6chJYdoWOTqirVxTJzB8vXSrcLNPGueMz6wSR3p2J7/dksOrdAzYNoP9UdkV7kb grQXn7O5mzyX78pRb0fChCVPKLVhKmVja5Q84GWbjOVnlQ2H0R4N676zFYpS+ONI W82cKZVFa+eLGRbMxiuvL4rVQ14Hi0Q= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:36 2025 by rpki-client