This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json) Hash identifier: 5JxwBCYuVC8EtIgX2+5Y+zyD2cIgWS4hkzrl2I6cqBg= Subject key identifier: E1:A6:30:12:39:03:C7:FE:45:A7:6F:CE:49:2D:52:A2:FD:BA:7E:F4 Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft Manifest number: 11 Signing time: Fri 19 Dec 2025 06:52:00 +0000 Manifest this update: Fri 19 Dec 2025 06:52:00 +0000 Manifest next update: Fri 26 Dec 2025 06:52:00 +0000 Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: igxwfwV30I24Isn/jBLnGiaYOWDkGqLxJL9CxsrX4Q8=) 2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: fOXOHVjQ9RI3kOSpNULXLjaNneDbA6Y3Pouw4CS3E00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Validity Not Before: Dec 19 06:52:00 2025 GMT Not After : Dec 26 06:52:00 2025 GMT Subject: CN=6944f610-5ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:9a:75:11:e0:20:78:f0:c1:dd:d3:a4:3f: 38:31:5f:57:33:18:b1:c8:ee:b8:b3:cd:7f:3a:fc: c3:f1:70:6b:8b:05:ce:ab:6d:fd:44:85:b0:b2:90: 39:4a:df:29:5f:66:81:28:54:48:a2:f4:2c:12:89: db:69:c5:17:e8:4d:3a:d2:aa:40:c0:1c:0e:c0:49: cf:a9:8a:9d:97:1c:ec:28:66:27:3e:d4:04:3e:c7: fc:66:d0:87:d1:8c:be:c7:69:a9:78:4c:85:ed:c5: 67:5a:cf:65:ef:1b:01:24:0c:fb:fe:38:c3:95:55: d2:59:68:a9:b3:01:e5:51:fb:81:17:df:15:5a:b1: 11:6f:4f:2a:98:a4:47:f9:16:f7:39:cd:0b:05:16: 9f:dd:97:f7:f3:7b:21:ec:a9:d1:4c:5a:19:68:a7: e9:8b:ea:e7:58:f9:28:13:92:7e:d8:b4:e0:86:46: 51:66:4f:d2:f2:bc:95:1e:af:aa:5a:ab:fd:68:a5: f3:e9:df:40:03:c7:13:91:1d:51:48:3e:ea:e7:f3: ec:bb:55:fe:dc:a8:35:62:6b:86:8e:09:f2:be:47: 94:4b:9a:18:1a:43:14:9c:77:fc:6f:72:38:8a:3f: ff:b0:04:60:6d:cd:7d:67:83:c7:03:2c:d6:0f:97: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A6:30:12:39:03:C7:FE:45:A7:6F:CE:49:2D:52:A2:FD:BA:7E:F4 X509v3 Authority Key Identifier: keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:c7:01:eb:56:b4:24:7e:53:cc:01:36:26:f8:7b:3a:00:4a: a8:5b:39:30:ba:df:3f:f9:be:fe:fd:10:8a:9d:11:e8:f1:b9: 5a:2d:f8:08:33:82:7b:f2:c0:50:4e:dc:f1:ca:ce:05:62:dc: 04:f2:79:59:23:b0:04:44:c5:30:21:0d:98:b4:9c:c4:be:e6: 05:25:b5:fd:fa:59:a8:3b:65:80:98:0b:66:d1:de:24:c9:fa: d6:16:b7:d7:57:8c:cb:97:c7:e6:62:2b:72:5e:5f:ee:a1:47: 87:f3:40:8d:c6:41:b4:86:a1:f4:ea:de:14:df:89:57:4d:30: 84:03:ac:37:3e:24:83:82:d5:1b:55:f3:ff:30:7d:93:77:00: 27:79:4e:90:11:b4:73:18:af:51:6d:c8:46:4f:0f:0d:70:21: 08:02:cf:96:46:10:24:61:26:19:8e:c8:9b:bb:d3:b2:52:79: c9:a7:63:c6:e6:d0:30:9b:37:d3:40:4f:a9:0f:24:1e:9c:3d: 66:c2:c8:71:41:e5:86:19:3a:ff:9e:c1:83:49:74:d4:e2:17: 07:24:b9:8a:cf:22:68:50:27:15:8f:dd:0d:ab:94:d5:02:a8: 38:50:de:4b:16:1c:74:a2:ee:07:04:88:33:15:9d:61:c3:da: e9:48:79:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OThCMTExMC8GA1UEBRMoRTMyNjVGNDExRENCQjBGMTE3NDg1MjM4NkU4MTdGRTI3 OEQyRjkwRTAeFw0yNTEyMTkwNjUyMDBaFw0yNTEyMjYwNjUyMDBaMBgxFjAUBgNV BAMMDTY5NDRmNjEwLTVhZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTqpp1EeAgePDB3dOkPzgxX1czGLHI7rizzX86/MPxcGuLBc6rbf1EhbCykDlK 3ylfZoEoVEii9CwSidtpxRfoTTrSqkDAHA7ASc+pip2XHOwoZic+1AQ+x/xm0IfR jL7Haal4TIXtxWdaz2XvGwEkDPv+OMOVVdJZaKmzAeVR+4EX3xVasRFvTyqYpEf5 Fvc5zQsFFp/dl/fzeyHsqdFMWhlop+mL6udY+SgTkn7YtOCGRlFmT9LyvJUer6pa q/1opfPp30ADxxORHVFIPurn8+y7Vf7cqDVia4aOCfK+R5RLmhgaQxScd/xvcjiK P/+wBGBtzX1ng8cDLNYPl8MPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4aYwEjkD x/5Fp2/OSS1Sov26fvQwHwYDVR0jBBgwFoAU4yZfQR3LsPEXSFI4boF/4njS+Q4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OEIxLzcyMDI3NkIwQzY2 NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BFWFNGSTRib0ZfNG5qUy1R NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHlaZlFSM0xzUEVYU0ZJNGJvRl80bmpTLVE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OEIxLzcyMDI3NkIwQzY2NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BF WFNGSTRib0ZfNG5qUy1RNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKvHAetWtCR+U8wBNib4ezoASqhbOTC63z/5vv79EIqdEejxuVot+Agz gnvywFBO3PHKzgVi3ATyeVkjsARExTAhDZi0nMS+5gUltf36Wag7ZYCYC2bR3iTJ +tYWt9dXjMuXx+ZiK3JeX+6hR4fzQI3GQbSGofTq3hTfiVdNMIQDrDc+JIOC1RtV 8/8wfZN3ACd5TpARtHMYr1FtyEZPDw1wIQgCz5ZGECRhJhmOyJu707JSecmnY8bm 0DCbN9NAT6kPJB6cPWbCyHFB5YYZOv+ewYNJdNTiFwckuYrPImhQJxWP3Q2rlNUC qDhQ3ksWHHSi7gcEiDMVnWHD2ulIeRg= -----END CERTIFICATE-----Generated at Fri Dec 19 23:37:36 2025 by rpki-client