This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: No9xy4RWzCasr6whv4L192w9l8vbiefGXnDT0jTkDEo= Subject key identifier: 11:5A:6A:D0:DF:51:C6:BD:65:E9:0C:50:4E:F8:A0:D9:8B:6F:E9:90 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 09D4 Signing time: Thu 18 Dec 2025 19:30:45 +0000 Manifest this update: Thu 18 Dec 2025 19:30:44 +0000 Manifest next update: Thu 25 Dec 2025 19:30:44 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: MgabeTo7Tk8PRix2gj/2W3XFwGkbGNkziZAEd7x5TLw=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Dec 18 19:30:44 2025 GMT Not After : Dec 25 19:30:44 2025 GMT Subject: CN=69445665-638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:21:32:8b:75:cb:52:f9:b4:b3:d7:57:55: da:1f:67:d1:8e:98:4e:d4:96:2c:f7:03:a2:28:75: 25:cf:19:e7:ec:24:08:c9:85:57:b4:c8:66:8d:17: 14:ed:74:f8:39:7a:12:e8:c0:3c:8a:60:80:c4:65: 56:2e:9e:db:44:11:f1:23:7b:ad:86:1a:95:c5:88: bd:e5:47:54:b6:78:69:e1:18:c4:e3:bb:98:fa:db: e0:a6:16:eb:fa:ca:f1:76:ac:37:6e:e9:06:66:19: 6f:a3:02:de:ba:65:6b:f7:00:68:51:d2:d5:74:51: d0:70:26:15:75:e2:b7:6e:f0:38:e3:8f:d3:ca:b8: ff:fa:12:c1:2c:74:0a:81:f8:c0:39:22:a6:7d:0f: 2b:00:89:b9:8a:79:ab:f0:99:18:5c:fe:9c:fe:62: 03:9d:fa:66:b0:86:01:2a:94:ab:42:45:4b:f1:cf: 17:37:b6:bb:48:ab:91:2e:e1:c7:6f:45:bd:d6:2e: 1a:5f:8b:57:07:20:fb:fc:6b:15:fd:9d:69:8d:1d: fb:36:07:48:96:fd:32:35:e7:bf:6e:c3:54:7a:ac: 10:70:d3:57:ac:19:3a:c9:bd:c1:a4:8a:5f:20:ac: d8:66:0e:d5:44:c4:e4:3e:a4:d6:59:89:00:68:50: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:6A:D0:DF:51:C6:BD:65:E9:0C:50:4E:F8:A0:D9:8B:6F:E9:90 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2f:1a:e0:25:f3:c0:b1:45:d2:4c:bd:f1:51:a1:85:82:e3: 09:9e:d6:e2:28:e1:3a:40:d9:47:f5:f3:e8:db:bd:4f:85:87: 1e:82:91:a6:c7:50:a2:c2:58:5b:2b:e3:c3:4f:1f:23:83:2c: fc:7c:ba:46:e6:8c:4b:75:e4:c8:90:db:59:20:57:10:96:59: 60:30:57:43:71:4a:c2:62:29:cc:30:ff:92:3f:ba:96:5e:5d: c5:68:c1:b9:ae:07:05:ca:06:33:92:77:3e:84:8f:26:51:48: 75:92:d8:75:73:4b:19:32:78:88:63:db:43:94:6e:6a:57:b2: 38:c7:a3:96:62:92:5b:71:34:d7:2d:8b:46:d3:a9:b7:ff:25: 62:ba:22:ad:c2:a1:05:e2:52:23:0a:7d:0c:27:1c:73:0d:da: ce:e6:fa:81:c4:6d:1a:6c:c9:39:e3:d8:44:79:fe:38:f9:8a: d5:5e:32:cb:cc:55:cc:1f:8a:be:b4:17:d0:5c:18:f6:cb:47: 3b:0f:67:37:7b:5a:e1:42:b5:a2:57:9b:d8:b0:6c:34:41:3f: 35:7e:c2:fd:bd:93:d6:51:3b:91:e1:71:1c:10:a9:3a:54:8a: cd:52:15:5e:42:71:dd:bc:9a:84:17:ac:9d:eb:25:1e:36:fe: 93:5f:47:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjUxMjE4MTkzMDQ0WhcNMjUxMjI1MTkzMDQ0WjAYMRYwFAYD VQQDDA02OTQ0NTY2NS02MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxukhMot1y1L5tLPXV1XaH2fRjphO1JYs9wOiKHUlzxnn7CQIyYVXtMhmjRcU 7XT4OXoS6MA8imCAxGVWLp7bRBHxI3uthhqVxYi95UdUtnhp4RjE47uY+tvgphbr +srxdqw3bukGZhlvowLeumVr9wBoUdLVdFHQcCYVdeK3bvA444/Tyrj/+hLBLHQK gfjAOSKmfQ8rAIm5inmr8JkYXP6c/mIDnfpmsIYBKpSrQkVL8c8XN7a7SKuRLuHH b0W91i4aX4tXByD7/GsV/Z1pjR37NgdIlv0yNee/bsNUeqwQcNNXrBk6yb3BpIpf IKzYZg7VRMTkPqTWWYkAaFAQNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFaatDf Uca9ZekMUE74oNmLb+mQMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXLxrgJfPAsUXSTL3xUaGFguMJntbiKOE6QNlH9fPo271PhYcegpGm x1CiwlhbK+PDTx8jgyz8fLpG5oxLdeTIkNtZIFcQlllgMFdDcUrCYinMMP+SP7qW Xl3FaMG5rgcFygYzknc+hI8mUUh1kth1c0sZMniIY9tDlG5qV7I4x6OWYpJbcTTX LYtG06m3/yViuiKtwqEF4lIjCn0MJxxzDdrO5vqBxG0abMk549hEef44+YrVXjLL zFXMH4q+tBfQXBj2y0c7D2c3e1rhQrWiV5vYsGw0QT81fsL9vZPWUTuR4XEcEKk6 VIrNUhVeQnHdvJqEF6yd6yUeNv6TX0cn -----END CERTIFICATE-----Generated at Fri Dec 19 17:48:04 2025 by rpki-client