This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: 4pMEFnTR9Wvbg9W8hQHzkuSkt0ZhXo28MOsKN+X2grI= Subject key identifier: D2:C5:4B:8B:BA:9C:57:8B:8A:AA:EC:AC:9F:E6:43:69:7F:9B:C6:7D Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01C3 Signing time: Mon 29 Dec 2025 02:07:27 +0000 Manifest this update: Mon 29 Dec 2025 02:07:26 +0000 Manifest next update: Mon 05 Jan 2026 02:07:26 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: mZnGArByFCccYY/u5pt7jqc8KIWq+7b2fm4cu+EoS84=) 2: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) 3: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 4: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 5: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Dec 29 02:07:26 2025 GMT Not After : Jan 5 02:07:26 2026 GMT Subject: CN=6951e25e-ebb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:0b:2a:e9:51:2c:42:b2:0b:76:20:33:56: 6d:4d:47:ec:a9:27:e1:82:b0:2b:fa:38:04:27:f6: 4e:a8:3a:82:5f:fb:23:40:e3:94:ec:23:ea:8e:af: 35:52:d9:22:26:e1:3c:6a:be:a3:95:0d:93:de:fe: ed:32:2a:dc:f5:52:c4:f1:a8:d1:f2:87:79:84:b1: de:81:84:b5:be:5e:90:ac:5e:8b:f3:5f:bb:b2:33: a7:87:ec:8c:51:50:25:56:11:97:e1:c1:7f:25:61: bf:74:96:7b:84:a5:f3:ea:1f:03:8b:1c:c1:0a:b1: 7d:92:44:1d:f3:9d:4e:51:73:37:6e:f9:c1:84:bc: ec:02:5d:f9:b2:73:b4:8c:02:8f:08:3d:52:bd:c7: f8:50:55:62:0d:d7:0c:e4:d2:dc:bd:8d:3c:ba:0c: 54:5f:c2:35:1b:f0:65:f6:04:df:35:43:95:63:ec: 2f:bc:bd:54:3c:c4:a3:52:e0:7b:16:cd:97:2b:8a: d2:44:cb:bc:e9:94:8e:99:54:b1:6d:07:d9:d0:f2: c5:b9:cb:47:ab:40:23:65:ae:28:e3:e6:5d:8a:aa: 4d:e5:7b:2e:77:de:b3:76:c3:a8:51:b4:f5:d3:3b: 61:90:4c:ce:86:98:d0:d6:40:a9:23:67:6c:df:b2: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:4B:8B:BA:9C:57:8B:8A:AA:EC:AC:9F:E6:43:69:7F:9B:C6:7D X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:75:d8:51:54:d2:ce:4a:5d:d1:f0:73:d4:a8:f0:1e:76:90: ed:b3:20:1a:be:aa:b7:8e:14:84:8d:36:d1:b8:91:09:7a:3c: cc:2a:a0:36:6a:89:01:fc:7b:07:2d:a2:06:86:38:1c:65:8d: 5f:f6:51:75:51:ed:b9:cc:88:2c:14:15:35:b7:93:56:74:3f: 4c:d5:f1:8e:94:08:70:7c:8c:97:6f:2e:32:e8:dd:8c:d0:1f: 48:98:e3:a1:68:34:6e:0f:2d:1f:98:4c:a6:66:08:bd:1e:b1: 84:ad:5f:89:3b:eb:74:4a:c1:e7:02:53:7e:07:dd:01:1c:a9: 96:20:ac:81:c2:34:87:d8:18:5d:06:55:03:a8:1d:45:8e:e3: 6a:47:d7:e5:88:c9:0a:ee:56:28:f8:bf:da:09:44:c9:72:d6: 2c:ee:d8:78:32:8c:fb:44:3e:af:8d:3d:1e:72:8a:5d:ac:36: d8:50:1c:a9:aa:d2:f3:e8:db:79:db:dd:ad:4b:7d:17:2e:d2: 54:e6:05:b6:0b:2b:78:71:fa:cd:e6:83:0b:63:7e:5c:c0:02: c7:93:db:cb:0d:b4:c5:6b:4b:41:77:14:90:e4:d3:6b:f4:07: eb:b0:9c:72:1c:07:8a:59:55:47:10:8c:b0:6e:1b:e0:ad:81: 56:30:68:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUxMjI5MDIwNzI2WhcNMjYwMTA1MDIwNzI2WjAYMRYwFAYD VQQDDA02OTUxZTI1ZS1lYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypwLKulRLEKyC3YgM1ZtTUfsqSfhgrAr+jgEJ/ZOqDqCX/sjQOOU7CPqjq81 UtkiJuE8ar6jlQ2T3v7tMirc9VLE8ajR8od5hLHegYS1vl6QrF6L81+7sjOnh+yM UVAlVhGX4cF/JWG/dJZ7hKXz6h8DixzBCrF9kkQd851OUXM3bvnBhLzsAl35snO0 jAKPCD1Svcf4UFViDdcM5NLcvY08ugxUX8I1G/Bl9gTfNUOVY+wvvL1UPMSjUuB7 Fs2XK4rSRMu86ZSOmVSxbQfZ0PLFuctHq0AjZa4o4+ZdiqpN5Xsud96zdsOoUbT1 0zthkEzOhpjQ1kCpI2ds37Ll4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLFS4u6 nFeLiqrsrJ/mQ2l/m8Z9MB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHddhRVNLOSl3R8HPUqPAedpDtsyAavqq3jhSEjTbRuJEJejzMKqA2 aokB/HsHLaIGhjgcZY1f9lF1Ue25zIgsFBU1t5NWdD9M1fGOlAhwfIyXby4y6N2M 0B9ImOOhaDRuDy0fmEymZgi9HrGErV+JO+t0SsHnAlN+B90BHKmWIKyBwjSH2Bhd BlUDqB1FjuNqR9fliMkK7lYo+L/aCUTJctYs7th4Moz7RD6vjT0ecopdrDbYUByp qtLz6Nt5292tS30XLtJU5gW2Cyt4cfrN5oMLY35cwALHk9vLDbTFa0tBdxSQ5NNr 9AfrsJxyHAeKWVVHEIywbhvgrYFWMGi/ -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:12 2025 by rpki-client