This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: 9s+pecODsUxxGcaGl46A+rVIMeE/wOWif22W5DKYHBI= Subject key identifier: 85:4B:3D:CA:4A:2D:56:FE:4A:DA:74:0E:82:F3:D0:A4:5B:9E:E3:8F Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 0879 Signing time: Fri 26 Dec 2025 19:56:10 +0000 Manifest this update: Fri 26 Dec 2025 19:56:09 +0000 Manifest next update: Fri 02 Jan 2026 19:56:09 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: 56AtC3m+4U9DcMJU7hdgcbPhJdrUgUsTZHiJHcXT59w=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Dec 26 19:56:09 2025 GMT Not After : Jan 2 19:56:09 2026 GMT Subject: CN=694ee85a-788c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:42:ab:9f:ba:fb:f0:20:c1:54:83:ed:ee: 47:79:65:b8:2c:55:f1:8e:ad:d9:31:d0:02:c5:01: 5c:26:95:dd:18:84:6e:16:fe:c3:b3:16:8e:f0:ac: 88:ca:34:db:c8:a0:93:52:26:0c:c1:bf:be:84:01: 6b:ab:c4:04:9e:d0:27:80:c5:08:fe:66:d3:bc:1c: 0b:14:51:5a:1f:a5:9a:f1:e2:87:13:2d:2f:d8:89: 41:50:23:1c:ea:8c:6c:33:bb:d3:63:77:5b:30:94: c0:b1:6d:b6:b7:c1:71:86:36:ca:87:a5:19:4f:dc: 0c:63:d0:bd:d0:fa:46:97:f5:7d:77:f3:a2:c7:4a: 18:a3:55:ac:16:02:76:36:05:e3:50:9f:f8:6f:4d: 2b:5e:df:c5:1b:a0:bf:a4:a2:b4:a9:14:be:49:25: c5:ec:d4:d1:9e:e6:87:df:db:f7:cb:fe:ab:17:cb: 85:72:04:6f:47:91:d3:c4:a6:67:b1:b4:03:49:b6: bd:07:b4:1b:16:90:25:06:fb:f9:67:63:39:6d:ae: 65:ef:86:e3:d2:4c:51:27:88:04:fe:e0:0e:56:30: 58:91:00:e9:3d:a2:7e:50:b8:81:ba:8d:3e:fe:c1: 76:dc:b7:c8:d3:05:67:97:e7:57:e5:73:ad:07:f8: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4B:3D:CA:4A:2D:56:FE:4A:DA:74:0E:82:F3:D0:A4:5B:9E:E3:8F X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:44:86:af:53:05:58:c6:8c:c6:e6:39:b5:fa:1f:67:c7:cb: 0c:7a:70:d7:34:a0:79:c8:11:7f:fe:4e:b9:75:90:97:2b:14: 61:7b:96:9d:ac:a6:be:00:31:8b:1b:49:bf:87:4e:c6:9c:64: 1f:27:54:44:23:dd:3a:4c:7d:1d:5a:d1:08:70:db:8c:17:5b: 7a:11:73:26:3f:6a:e1:59:aa:97:49:8c:29:63:b2:a4:68:dd: db:31:7e:08:18:76:b4:45:87:84:f8:02:2d:93:d4:72:4d:d3: 76:fb:c0:f4:29:ea:1e:dc:06:ca:d3:b0:2c:6b:6f:5d:d3:eb: 12:2b:5a:43:23:f0:20:b1:85:b9:09:e3:b0:6b:eb:79:01:73: 54:de:8e:ee:e4:9c:1c:4b:5c:42:eb:54:99:b0:ed:f0:1d:da: 35:54:e3:4a:dc:e9:5d:56:48:52:f1:79:86:cf:b9:42:e4:28: 6d:65:fa:f3:24:54:56:2b:4c:56:01:82:36:bd:75:9f:35:50: a1:54:8a:d8:9c:cc:7e:c9:fd:c0:b6:4e:af:a8:8e:03:81:5e: cc:52:47:0f:38:2b:31:89:94:a0:ca:a0:0a:9f:69:7a:44:b7: db:c7:f2:51:3c:37:83:bd:a1:f9:19:3e:2e:16:85:99:b5:00: b7:f8:ce:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUxMjI2MTk1NjA5WhcNMjYwMTAyMTk1NjA5WjAYMRYwFAYD VQQDDA02OTRlZTg1YS03ODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HxCq5+6+/AgwVSD7e5HeWW4LFXxjq3ZMdACxQFcJpXdGIRuFv7DsxaO8KyI yjTbyKCTUiYMwb++hAFrq8QEntAngMUI/mbTvBwLFFFaH6Wa8eKHEy0v2IlBUCMc 6oxsM7vTY3dbMJTAsW22t8FxhjbKh6UZT9wMY9C90PpGl/V9d/Oix0oYo1WsFgJ2 NgXjUJ/4b00rXt/FG6C/pKK0qRS+SSXF7NTRnuaH39v3y/6rF8uFcgRvR5HTxKZn sbQDSba9B7QbFpAlBvv5Z2M5ba5l74bj0kxRJ4gE/uAOVjBYkQDpPaJ+ULiBuo0+ /sF23LfI0wVnl+dX5XOtB/gRiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVLPcpK LVb+Stp0DoLz0KRbnuOPMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANRIavUwVYxozG5jm1+h9nx8sMenDXNKB5yBF//k65dZCXKxRhe5ad rKa+ADGLG0m/h07GnGQfJ1REI906TH0dWtEIcNuMF1t6EXMmP2rhWaqXSYwpY7Kk aN3bMX4IGHa0RYeE+AItk9RyTdN2+8D0Keoe3AbK07Asa29d0+sSK1pDI/AgsYW5 CeOwa+t5AXNU3o7u5JwcS1xC61SZsO3wHdo1VONK3OldVkhS8XmGz7lC5ChtZfrz JFRWK0xWAYI2vXWfNVChVIrYnMx+yf3Atk6vqI4DgV7MUkcPOCsxiZSgyqAKn2l6 RLfbx/JRPDeDvaH5GT4uFoWZtQC3+M4A -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:06 2025 by rpki-client