This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft File: 4-ABdWjohx9OiHmxBiqu1yw08jo.mft (raw, json) Hash identifier: cCniLqimPy535d0tdmaEPKKrH4GxuOc+/rGp+HQUl5E= Subject key identifier: 43:BD:D7:8D:AF:BC:63:E8:82:C4:4D:D9:6D:16:6F:F2:87:21:5E:51 Authority key identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A Certificate issuer: /CN=A91A05BF/serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft Manifest number: 21 Signing time: Sun 21 Dec 2025 06:46:59 +0000 Manifest this update: Sun 21 Dec 2025 06:46:58 +0000 Manifest next update: Sun 28 Dec 2025 06:46:58 +0000 Files and hashes: 1: 4-ABdWjohx9OiHmxBiqu1yw08jo.crl (hash: 2K9U2P+mnBrXXVx7bacHlw5FSFiok5jpaTPBtpz2vsU=) 2: 5FC8CD04B3B511F0BF1A0B54C4F9AE02.roa (hash: NcL+J1oXA1oh3xoPJMoQRrIZs5vXjNVk2410Ro/0xzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05BF, serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Validity Not Before: Dec 21 06:46:58 2025 GMT Not After : Dec 28 06:46:58 2025 GMT Subject: CN=694797e3-7388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:03:8d:7f:6c:af:18:47:be:a7:a1:ba:4a: 77:5e:00:96:dc:98:bf:ad:a0:ab:31:43:40:cf:f7: 80:16:a9:59:20:44:8c:4b:25:7a:d4:ef:b2:9e:2b: f4:6e:b2:63:38:83:22:6a:f9:37:57:c1:a1:f6:d6: 5d:1b:f7:a8:43:fb:75:97:29:2e:b2:50:3d:64:60: eb:4f:d9:aa:2a:66:54:6a:e5:e5:74:b0:0d:d6:38: d3:c5:27:d1:87:2a:3f:61:6d:0d:46:8f:2c:31:9e: 0d:d8:8d:3c:7f:e0:af:de:5c:ae:f1:94:44:21:ce: b5:ac:2f:f3:cc:fb:a7:5d:55:d5:7a:82:26:1b:be: 6f:3b:ad:ac:f7:27:be:5d:c4:54:f5:cb:b8:33:9b: c7:3e:5b:96:73:61:d8:5e:20:bc:fb:0a:5e:c8:e0: 25:59:b0:04:a0:b9:b9:db:a2:2b:d7:3c:2b:07:94: 9b:23:c8:3f:49:28:91:22:e5:f2:c1:d6:f1:bd:8f: 33:52:6f:63:3d:3b:11:39:fc:1a:01:ff:85:ac:f1: 29:32:ce:30:b3:6c:fe:20:a4:2e:a2:e4:a1:a7:ad: ce:06:81:43:bd:f6:12:ea:b6:7d:14:03:68:e6:e3: d9:71:14:d3:90:12:de:c5:7a:ab:ed:7b:fe:a6:bb: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BD:D7:8D:AF:BC:63:E8:82:C4:4D:D9:6D:16:6F:F2:87:21:5E:51 X509v3 Authority Key Identifier: keyid:E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d5:4f:8d:69:7e:62:38:4a:6b:11:9f:c7:9c:bf:e6:4f:b3: 62:3f:b8:a4:cd:44:55:d6:58:20:18:29:8f:ac:cb:94:95:6c: e9:42:9e:ad:12:e0:44:a6:88:0d:d5:f6:11:6e:97:98:4e:ca: 42:2e:93:34:c0:54:7c:5c:54:60:d1:a2:fb:b0:f7:bf:24:69: 3f:e3:86:8a:22:83:e3:44:c0:d1:a5:90:b7:bc:8f:35:73:71: 48:4c:39:a5:a5:c9:89:6e:da:25:45:99:00:92:58:69:cb:4e: c2:6c:a6:a7:fb:03:96:1b:4a:b8:76:14:18:a4:a0:e1:78:b5: ae:84:b4:40:92:ea:d4:03:1b:e8:be:a0:77:e6:96:a2:64:ef: 99:54:59:c9:e9:fe:4b:a7:a2:62:66:46:75:40:96:32:e7:fd: 05:53:2e:77:aa:59:e0:6c:b4:23:4f:23:4b:59:c3:26:23:29: 59:0f:f9:e3:5b:f3:8f:3d:b5:b9:06:43:b6:28:5d:c9:8b:e2: e0:10:4e:64:e3:d6:46:a0:19:8c:ad:5d:0d:06:3f:b2:81:df: 2f:7a:3f:31:0d:cc:f6:97:c2:e2:e5:4a:ba:ca:6f:12:02:e4: a4:0c:fc:30:e1:09:5f:c8:43:6a:63:ea:83:b4:4c:d2:0e:93: 5b:e8:01:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVCRjExMC8GA1UEBRMoRTNFMDAxNzU2OEU4ODcxRjRFODg3OUIxMDYyQUFFRDcy QzM0RjIzQTAeFw0yNTEyMjEwNjQ2NThaFw0yNTEyMjgwNjQ2NThaMBgxFjAUBgNV BAMMDTY5NDc5N2UzLTczODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3hwONf2yvGEe+p6G6SndeAJbcmL+toKsxQ0DP94AWqVkgRIxLJXrU77KeK/Ru smM4gyJq+TdXwaH21l0b96hD+3WXKS6yUD1kYOtP2aoqZlRq5eV0sA3WONPFJ9GH Kj9hbQ1Gjywxng3YjTx/4K/eXK7xlEQhzrWsL/PM+6ddVdV6giYbvm87raz3J75d xFT1y7gzm8c+W5ZzYdheILz7Cl7I4CVZsASgubnboivXPCsHlJsjyD9JKJEi5fLB 1vG9jzNSb2M9OxE5/BoB/4Ws8SkyzjCzbP4gpC6i5KGnrc4GgUO99hLqtn0UA2jm 49lxFNOQEt7Feqvte/6mu4SNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ73Xja+8 Y+iCxE3ZbRZv8ochXlEwHwYDVR0jBBgwFoAU4+ABdWjohx9OiHmxBiqu1yw08jow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUJGLzE4MTM2RDhBQjNC NDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pvaHg5T2lIbXhCaXF1MXl3MDhq by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNC1BQmRXam9oeDlPaUhteEJpcXUxeXcwOGpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUJGLzE4MTM2RDhBQjNCNDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pvaHg5 T2lIbXhCaXF1MXl3MDhqby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAErVT41pfmI4SmsRn8ecv+ZPs2I/uKTNRFXWWCAYKY+sy5SVbOlCnq0S 4ESmiA3V9hFul5hOykIukzTAVHxcVGDRovuw978kaT/jhooig+NEwNGlkLe8jzVz cUhMOaWlyYlu2iVFmQCSWGnLTsJspqf7A5YbSrh2FBikoOF4ta6EtECS6tQDG+i+ oHfmlqJk75lUWcnp/kunomJmRnVAljLn/QVTLneqWeBstCNPI0tZwyYjKVkP+eNb 8489tbkGQ7YoXcmL4uAQTmTj1kagGYytXQ0GP7KB3y96PzENzPaXwuLlSrrKbxIC 5KQM/DDhCV/IQ2pj6oO0TNIOk1voARg= -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:49 2025 by rpki-client