This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: cXHpveEK3w7Y/yVUhYn6E36SqJwkMP48Pv6YJwcguFU= Subject key identifier: 31:B6:23:AC:26:AA:91:8E:8E:14:5F:94:98:45:E0:8D:DA:6C:09:98 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: DF Signing time: Fri 19 Dec 2025 04:38:00 +0000 Manifest this update: Fri 19 Dec 2025 04:37:59 +0000 Manifest next update: Fri 26 Dec 2025 04:37:59 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: zgg8GnpUi5zk+PFgU0t89BfKfdviVEgzkgoHfYtNoes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Dec 19 04:37:59 2025 GMT Not After : Dec 26 04:37:59 2025 GMT Subject: CN=6944d6a8-8bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:08:e0:f9:77:d5:d2:67:ca:8f:8e:53:54: 04:3d:3b:2b:ea:51:8f:60:0c:8f:81:65:a6:3a:29: 92:81:60:c2:73:d4:2d:05:b0:0d:31:4f:85:f7:5e: d5:da:53:8a:22:ef:2e:c4:e6:22:d6:ec:72:7e:16: 38:bf:fc:9b:59:df:a9:ec:56:28:6b:07:ab:bc:65: 30:47:69:96:18:85:a4:72:32:23:38:b2:7f:fa:4b: b1:b9:f5:c9:c0:f6:42:29:2a:f5:7e:3c:7d:41:ed: 44:bb:2a:f6:e1:a9:1b:19:34:18:d0:b4:f6:79:a6: 3c:7e:ed:79:f6:f8:9b:ea:40:99:03:eb:38:30:e5: a6:83:28:8f:75:be:66:73:d8:5b:f9:bb:bb:a2:d5: 67:4d:3f:27:ff:b3:3c:ec:c7:b0:a4:7e:71:be:64: 20:2b:ca:2a:30:bc:fc:52:77:34:c9:f6:dc:0b:a1: 3a:fb:86:c7:a0:b9:3f:da:5f:3c:80:2e:98:77:58: f6:3a:92:c3:09:e7:a1:41:33:9a:fb:f0:88:fe:e9: 8a:4c:3f:cd:de:62:3a:8b:4a:c4:94:25:3d:51:41: 29:28:9e:66:1f:d8:32:0a:12:a4:ec:eb:fa:24:b5: 1a:d7:d4:2f:42:d8:e9:be:a5:90:d7:29:b0:d5:89: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B6:23:AC:26:AA:91:8E:8E:14:5F:94:98:45:E0:8D:DA:6C:09:98 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e4:31:91:ee:f1:63:48:8a:cd:f1:07:0b:95:eb:53:ba:64: 5f:3a:74:67:95:e7:e6:f1:e1:eb:c2:a3:0a:ed:78:0b:8a:41: 66:e9:80:7b:67:81:1f:ca:e1:b9:b3:8e:f1:53:bf:86:8c:59: 05:a9:bb:28:26:0b:3a:22:7b:16:ac:c9:3c:b0:ec:e9:8b:52: b6:eb:55:24:a4:58:3e:31:8e:58:30:a8:88:51:44:81:c8:39: b0:3b:c4:a1:23:0a:2e:bf:05:81:76:7c:f6:1f:b5:02:d8:85: c3:82:eb:bf:00:b2:11:ae:fc:65:2d:98:55:4e:5e:7a:b2:55: 2d:60:4e:b0:41:c3:11:30:60:8b:31:ad:53:08:cc:63:ee:b0: b8:29:ec:1f:fe:4a:59:05:b8:cf:38:dc:f4:c0:a7:0f:5c:86: a7:5a:6b:7a:15:cc:b2:6a:78:8a:75:3a:5a:47:a6:36:4e:f5: 36:bd:cd:c9:3c:4b:68:51:a0:64:b8:ab:07:5a:b9:c4:31:be: b6:46:74:96:9a:94:e3:bb:94:36:7e:72:99:9b:3f:68:a6:14: e6:24:51:86:26:82:0f:27:58:ba:86:d5:f4:42:7f:4d:14:c1: 2e:13:b5:8d:6c:0a:49:54:65:eb:2b:71:a2:56:99:34:46:a7: 73:84:00:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUxMjE5MDQzNzU5WhcNMjUxMjI2MDQzNzU5WjAYMRYwFAYD VQQDDA02OTQ0ZDZhOC04YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveMI4Pl31dJnyo+OU1QEPTsr6lGPYAyPgWWmOimSgWDCc9QtBbANMU+F917V 2lOKIu8uxOYi1uxyfhY4v/ybWd+p7FYoawervGUwR2mWGIWkcjIjOLJ/+kuxufXJ wPZCKSr1fjx9Qe1Euyr24akbGTQY0LT2eaY8fu159vib6kCZA+s4MOWmgyiPdb5m c9hb+bu7otVnTT8n/7M87MewpH5xvmQgK8oqMLz8Unc0yfbcC6E6+4bHoLk/2l88 gC6Yd1j2OpLDCeehQTOa+/CI/umKTD/N3mI6i0rElCU9UUEpKJ5mH9gyChKk7Ov6 JLUa19QvQtjpvqWQ1ymw1Ym/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG2I6wm qpGOjhRflJhF4I3abAmYMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm5DGR7vFjSIrN8QcLletTumRfOnRnlefm8eHrwqMK7XgLikFm6YB7 Z4EfyuG5s47xU7+GjFkFqbsoJgs6InsWrMk8sOzpi1K261UkpFg+MY5YMKiIUUSB yDmwO8ShIwouvwWBdnz2H7UC2IXDguu/ALIRrvxlLZhVTl56slUtYE6wQcMRMGCL Ma1TCMxj7rC4Kewf/kpZBbjPONz0wKcPXIanWmt6FcyyaniKdTpaR6Y2TvU2vc3J PEtoUaBkuKsHWrnEMb62RnSWmpTju5Q2fnKZmz9ophTmJFGGJoIPJ1i6htX0Qn9N FMEuE7WNbApJVGXrK3GiVpk0RqdzhACa -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:49 2025 by rpki-client