This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: QeOnT31SnVm+nYdoGrbHTaia+9Jep12HIo+tqCSg/Bc= Subject key identifier: 5A:A9:87:44:00:53:EE:8A:04:60:8F:82:2E:D0:71:1F:8F:A2:28:F6 Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 021E Signing time: Sun 21 Dec 2025 01:23:58 +0000 Manifest this update: Sun 21 Dec 2025 01:23:57 +0000 Manifest next update: Sun 28 Dec 2025 01:23:57 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: K1CIMHEzs8ID0pEDYtMhUMNYvlQJ1y+sesAoYcQgL10=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: Dec 21 01:23:57 2025 GMT Not After : Dec 28 01:23:57 2025 GMT Subject: CN=69474c2e-2619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:40:5d:c1:2e:80:fa:4d:15:e5:65:a3:48: a6:2e:bc:31:03:a8:91:0b:ff:0e:6b:d6:e3:69:08: 15:ee:ea:61:1b:2d:26:73:d1:f5:5b:03:f1:64:cd: a7:13:4c:3a:01:5f:fd:eb:c3:94:7d:45:41:0a:ba: 35:09:28:fb:82:a8:3d:db:d2:9a:95:a5:ff:1a:9d: d7:46:cc:f7:c2:31:10:9e:63:a0:18:fd:a7:cf:50: 60:ed:18:87:e1:aa:d4:ff:60:8d:42:cb:00:69:56: e0:98:a1:49:af:5e:57:cb:a8:77:54:5d:87:2a:72: 50:db:70:b0:a6:a6:c8:11:92:cb:61:c6:71:79:67: cb:96:80:11:99:85:db:67:c8:76:2f:9c:64:26:23: 13:f7:0a:6b:05:e4:0b:e5:2d:ca:8a:54:9e:4b:a7: 27:42:f2:20:a3:e2:55:4f:26:99:fd:06:f8:92:19: 97:f9:e9:12:95:7e:e7:c5:d2:55:64:27:8c:9e:ab: 59:e9:02:94:f8:6d:99:5c:76:21:22:e9:9a:71:8d: ed:ea:08:bd:f1:2c:a8:fb:7b:5d:26:72:4d:e6:9f: b8:3c:1d:59:0a:4b:03:d1:62:0a:bc:ab:4d:15:40: d9:5d:94:2f:e4:e0:b6:ae:3c:2e:9e:49:4b:9c:7c: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:87:44:00:53:EE:8A:04:60:8F:82:2E:D0:71:1F:8F:A2:28:F6 X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:77:8d:fe:81:dc:6e:b1:44:bd:18:11:f1:18:56:ce:cd:f7: dd:45:1a:92:8e:05:65:f3:7c:0a:e2:4d:53:71:cc:e2:21:7e: db:21:10:af:41:4b:1c:e7:26:1b:5d:32:19:0a:0f:70:b1:14: 2e:ae:93:c5:ee:3f:8a:82:39:12:fd:5e:c0:e3:bd:66:31:8c: ce:86:16:3a:b0:70:00:88:51:77:90:92:33:bd:0a:31:88:28: 9f:7c:c9:88:7d:46:f6:27:83:d9:4d:04:12:19:41:c8:cd:43: 7f:a5:de:46:5c:35:cf:cb:55:2c:b0:0b:9e:02:38:e6:8f:17: 3a:f2:72:f3:94:0a:55:c3:76:fb:a2:cb:2b:ad:90:f4:0f:7d: 38:88:f5:db:fb:f2:71:d4:65:33:49:0c:42:87:81:19:f3:88: 26:3e:e6:df:b1:c7:b3:3e:0e:a1:a1:ca:14:54:3e:30:1a:b8: 7e:7a:90:62:f8:d8:2c:b3:d6:23:71:ec:b1:19:7e:72:f2:61: 63:59:8b:27:19:03:5a:7f:95:73:90:d5:6e:f4:3e:ff:32:29: 5c:15:06:3a:3f:27:29:16:d1:29:1f:f5:b6:8f:41:9d:99:ea: ef:57:5c:4d:d9:c3:9f:d2:08:81:4c:ef:db:b9:ab:18:66:21: 15:33:11:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjUxMjIxMDEyMzU3WhcNMjUxMjI4MDEyMzU3WjAYMRYwFAYD VQQDDA02OTQ3NGMyZS0yNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAimVAXcEugPpNFeVlo0imLrwxA6iRC/8Oa9bjaQgV7uphGy0mc9H1WwPxZM2n E0w6AV/968OUfUVBCro1CSj7gqg929KalaX/Gp3XRsz3wjEQnmOgGP2nz1Bg7RiH 4arU/2CNQssAaVbgmKFJr15Xy6h3VF2HKnJQ23CwpqbIEZLLYcZxeWfLloARmYXb Z8h2L5xkJiMT9wprBeQL5S3KilSeS6cnQvIgo+JVTyaZ/Qb4khmX+ekSlX7nxdJV ZCeMnqtZ6QKU+G2ZXHYhIumacY3t6gi98Syo+3tdJnJN5p+4PB1ZCksD0WIKvKtN FUDZXZQv5OC2rjwunklLnHxd+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqph0QA U+6KBGCPgi7QcR+Poij2MB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5d43+gdxusUS9GBHxGFbOzffdRRqSjgVl83wK4k1TccziIX7bIRCv QUsc5yYbXTIZCg9wsRQurpPF7j+KgjkS/V7A471mMYzOhhY6sHAAiFF3kJIzvQox iCiffMmIfUb2J4PZTQQSGUHIzUN/pd5GXDXPy1UssAueAjjmjxc68nLzlApVw3b7 ossrrZD0D304iPXb+/Jx1GUzSQxCh4EZ84gmPubfscezPg6hocoUVD4wGrh+epBi +Ngss9YjceyxGX5y8mFjWYsnGQNaf5VzkNVu9D7/MilcFQY6PycpFtEpH/W2j0Gd mervV1xN2cOf0giBTO/buasYZiEVMxE1 -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:50 2025 by rpki-client