This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json) Hash identifier: Wj+4tyD9YEBUYB8k/JqatxFC1EOJpaYMALo1o9a9zi8= Subject key identifier: 98:A8:E0:E6:15:1E:C9:0A:CC:47:22:0E:AC:C4:98:18:57:A6:AE:5E Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75 Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 06:51:10 +0000 Manifest this update: Fri 19 Dec 2025 06:51:09 +0000 Manifest next update: Fri 26 Dec 2025 06:51:09 +0000 Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: T1VFGoXVj7chgwR9wm/8IG7MoUP6FCbHJxLBDb4Nw2k=) 2: 61955FD6C5A211F09E92B426C4F9AE02.roa (hash: 6r1w44qLv6tmb8QOg76Wi+rpkJfAknvdkQET/Ztoh7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575 Validity Not Before: Dec 19 06:51:09 2025 GMT Not After : Dec 26 06:51:09 2025 GMT Subject: CN=6944f5de-5baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:3c:33:36:62:f3:6f:0f:7f:7c:20:4e:97: f5:ba:af:e3:17:30:79:a9:62:3a:0b:50:3d:3e:44: 39:f5:5e:80:8b:d1:94:14:1d:9a:46:4d:cf:e5:fa: 75:4e:90:d0:19:cf:6e:e7:c8:d3:25:f0:8b:9e:a7: 7a:ca:31:16:e9:4b:d1:14:75:73:52:74:56:9a:5f: 9d:12:37:77:a1:59:1f:52:13:c6:94:2c:a1:d1:06: 27:28:33:ec:9b:2d:06:00:00:7e:8f:fa:58:50:fd: f9:85:3e:22:82:99:d2:f9:73:93:a3:2c:ef:c2:ce: a1:b4:5b:24:85:32:dd:47:ff:6c:de:b1:58:1d:d6: ca:2e:24:93:46:56:40:77:b5:13:97:3c:81:ab:af: ad:a1:04:17:49:77:8b:3d:43:7e:66:02:d1:b5:a0: 3e:0e:98:f4:66:55:83:ce:41:45:6b:e9:03:ff:f4: 68:66:cd:8c:70:59:e8:e8:cc:70:df:f4:81:d4:97: 91:f3:c2:e9:8d:d4:1b:fa:1a:1b:1e:10:95:6a:41: 2c:e3:a0:58:3b:28:3b:03:46:42:b9:64:d8:58:1d: e2:7e:12:51:f6:0e:f1:0f:b6:58:71:a8:b2:d3:f6: 51:f8:0a:b7:26:0c:8a:48:10:5a:06:4e:8b:5d:d2: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A8:E0:E6:15:1E:C9:0A:CC:47:22:0E:AC:C4:98:18:57:A6:AE:5E X509v3 Authority Key Identifier: keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:06:98:ce:4c:14:bc:28:c7:08:5c:e0:58:72:32:54:63: 06:6d:74:ee:7c:bb:93:2b:2b:81:2d:87:e4:2b:6b:64:3e:ca: a1:d5:2e:6b:14:dd:5e:08:ab:be:b8:65:4d:be:14:31:f0:25: 7f:a7:67:5b:4d:51:a4:a9:5a:68:8a:7b:9b:e0:68:d4:94:a8: f4:dd:a3:b2:76:a4:30:d4:e6:e0:d3:29:c5:e9:fd:0e:58:72: 7a:21:bf:c0:77:d5:21:24:ec:e0:f4:72:32:e9:e5:27:d9:88: 17:82:c4:13:a7:40:60:bc:27:9e:c2:ef:5f:db:33:0d:7b:23: 2c:d0:ac:49:89:9d:4d:55:d8:83:5a:60:44:f5:96:12:aa:22: be:76:1a:9b:bd:19:d5:09:aa:17:77:b7:95:5a:a9:28:c6:49: b7:43:a3:ba:12:e7:d6:30:3d:04:10:77:55:08:60:f9:56:51: 20:47:83:e4:8c:9f:40:cd:45:cf:91:33:de:10:b5:b1:2f:92: 60:03:c1:2c:ec:0f:8d:6d:9a:7b:cb:10:f6:59:0d:9a:de:f5: 04:71:a8:39:5f:c2:28:1f:61:ef:12:97:9b:6c:f9:07:f5:2d: 3f:d9:84:a7:fd:e4:45:c4:17:2b:05:00:69:da:21:94:72:63: 73:67:13:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkVBODExMC8GA1UEBRMoNzc4NDg4MTQ4RTNBRTJGMTRBRDQwODU0RjdBMkZBNTk1 Nzc1QzU3NTAeFw0yNTEyMTkwNjUxMDlaFw0yNTEyMjYwNjUxMDlaMBgxFjAUBgNV BAMMDTY5NDRmNWRlLTViYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaSTwzNmLzbw9/fCBOl/W6r+MXMHmpYjoLUD0+RDn1XoCL0ZQUHZpGTc/l+nVO kNAZz27nyNMl8Iuep3rKMRbpS9EUdXNSdFaaX50SN3ehWR9SE8aULKHRBicoM+yb LQYAAH6P+lhQ/fmFPiKCmdL5c5OjLO/CzqG0WySFMt1H/2zesVgd1souJJNGVkB3 tROXPIGrr62hBBdJd4s9Q35mAtG1oD4OmPRmVYPOQUVr6QP/9GhmzYxwWejozHDf 9IHUl5HzwumN1Bv6GhseEJVqQSzjoFg7KDsDRkK5ZNhYHeJ+ElH2DvEPtlhxqLLT 9lH4CrcmDIpIEFoGTotd0t9lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmKjg5hUe yQrMRyIOrMSYGFemrl4wHwYDVR0jBBgwFoAUd4SIFI464vFK1AhU96L6WVd1xXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGRUE4LzA2OEU3NjdBQzU5 RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDRTSUZJNDY0dkZLMUFoVTk2TDZXVmQxeFhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG RUE4LzA2OEU3NjdBQzU5RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZG SzFBaFU5Nkw2V1ZkMXhYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKuBpjOTBS8KMcIXOBYcjJUYwZtdO58u5MrK4Eth+Qra2Q+yqHVLmsU 3V4Iq764ZU2+FDHwJX+nZ1tNUaSpWmiKe5vgaNSUqPTdo7J2pDDU5uDTKcXp/Q5Y cnohv8B31SEk7OD0cjLp5SfZiBeCxBOnQGC8J57C71/bMw17IyzQrEmJnU1V2INa YET1lhKqIr52Gpu9GdUJqhd3t5VaqSjGSbdDo7oS59YwPQQQd1UIYPlWUSBHg+SM n0DNRc+RM94QtbEvkmADwSzsD41tmnvLEPZZDZre9QRxqDlfwigfYe8Sl5ts+Qf1 LT/ZhKf95EXEFysFAGnaIZRyY3NnE5E= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:55 2025 by rpki-client