This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft File: 4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json) Hash identifier: NA45AihWXp/mnHcg5v+6FdcTGohDvUjcFwxqd0VMaYE= Subject key identifier: 24:88:F6:28:7D:AA:2A:B9:07:CE:60:DC:1E:CA:EA:A6:D9:33:B2:E8 Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59 Certificate issuer: /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft Manifest number: 011E Signing time: Thu 25 Dec 2025 03:48:19 +0000 Manifest this update: Thu 25 Dec 2025 03:48:19 +0000 Manifest next update: Thu 01 Jan 2026 03:48:19 +0000 Files and hashes: 1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: OZ01//EtP+4nyXeame+snsYm4EnJdzMDk9sKvApxIJY=) 2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: 1wzYMLFHk5w163izK/FwbdDLwMdZuNPTMa1yYNCw1jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 03:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59 Validity Not Before: Dec 25 03:48:19 2025 GMT Not After : Jan 1 03:48:19 2026 GMT Subject: CN=694cb403-ee37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d8:66:f4:82:49:5e:0e:c3:63:34:b2:d8:00: f5:62:40:37:02:d1:d9:46:f1:6d:08:47:c2:50:9b: b6:6f:8e:bb:04:b4:75:fa:b3:d5:54:85:e9:6f:25: 2a:2a:24:63:89:f9:f2:ec:57:c9:df:03:02:62:85: 90:f4:d5:22:ea:30:fc:3d:91:7a:4f:f4:36:12:1f: 12:e4:0d:2e:35:69:d5:ba:ac:f6:aa:73:29:ec:ea: 5d:06:91:ee:90:67:84:00:dd:96:1b:7f:9b:18:89: 74:23:33:96:20:88:1b:3b:55:01:ff:1a:3c:bd:eb: 17:67:43:60:34:79:2d:3d:4d:74:67:ee:73:b6:b0: 0e:e1:11:85:62:11:e0:34:0c:de:16:ed:e6:d7:b4: a8:71:78:a6:0e:bd:7c:08:0e:82:39:90:59:ce:c5: d5:74:82:6a:43:ef:52:ce:6b:5f:fb:9a:cd:6d:74: 50:be:41:fa:b6:19:be:32:73:b9:f7:df:14:f9:c3: 50:dd:42:af:36:5c:20:e0:c7:95:42:fb:89:e6:24: 01:fb:02:e6:7f:ef:b2:c7:02:46:6f:33:8f:1c:1f: 88:8f:b8:67:ca:94:b4:11:62:f1:73:c0:02:f1:79: a3:15:d5:3c:dd:67:87:30:d9:9d:b3:81:33:68:cb: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:F6:28:7D:AA:2A:B9:07:CE:60:DC:1E:CA:EA:A6:D9:33:B2:E8 X509v3 Authority Key Identifier: keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9a:56:40:6e:47:75:cb:b0:fd:e9:20:c6:49:6b:0f:21:28: 53:8a:09:3f:34:18:06:c7:f9:cd:3d:57:3a:a5:b9:a4:a2:e0: 59:cf:00:3c:49:1e:83:4b:fc:c3:d7:7d:90:00:6e:5f:29:f7: 80:ac:26:59:aa:09:c6:89:fd:6b:11:3e:33:f6:2d:02:c5:44: 3f:3c:20:d3:b2:d5:f9:f1:13:e6:08:45:85:eb:a3:97:77:68: 59:d3:87:d2:83:e0:ec:39:07:96:47:77:bb:42:28:28:bd:68: ce:d7:7a:a8:4a:7d:b6:4a:cf:32:50:20:26:35:03:30:9a:2e: d5:1f:e2:32:ca:2e:f2:6e:d2:6c:a4:16:44:6b:02:d0:b9:97: 5f:02:e7:dd:68:7e:86:75:42:9f:e1:a1:02:ab:ae:cc:11:90: df:d4:65:78:81:38:d8:78:a0:75:ce:16:4e:d0:d0:02:76:b6: ca:58:55:35:9a:c5:d6:29:3c:48:49:63:3c:ca:5a:12:a7:6a: e5:fd:18:41:28:0c:25:32:58:ba:9f:2c:74:d9:20:eb:79:14: b8:1d:8f:cd:7a:e8:78:dc:4b:c4:57:97:19:c0:4f:0a:25:a6: d4:f3:31:bb:4a:8a:ce:e4:99:c4:d8:8c:05:fc:68:97:3c:10: a5:a3:14:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QjgxMTAvBgNVBAUTKEUzRThGRjA3OUUwM0ZEQTQzMzQ2ODg5RDkzNzY1Qjk1 OUY2RTFENTkwHhcNMjUxMjI1MDM0ODE5WhcNMjYwMTAxMDM0ODE5WjAYMRYwFAYD VQQDDA02OTRjYjQwMy1lZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg9hm9IJJXg7DYzSy2AD1YkA3AtHZRvFtCEfCUJu2b467BLR1+rPVVIXpbyUq KiRjifny7FfJ3wMCYoWQ9NUi6jD8PZF6T/Q2Eh8S5A0uNWnVuqz2qnMp7OpdBpHu kGeEAN2WG3+bGIl0IzOWIIgbO1UB/xo8vesXZ0NgNHktPU10Z+5ztrAO4RGFYhHg NAzeFu3m17SocXimDr18CA6COZBZzsXVdIJqQ+9Szmtf+5rNbXRQvkH6thm+MnO5 998U+cNQ3UKvNlwg4MeVQvuJ5iQB+wLmf++yxwJGbzOPHB+Ij7hnypS0EWLxc8AC 8XmjFdU83WeHMNmds4EzaMukMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSI9ih9 qiq5B85g3B7K6qbZM7LoMB8GA1UdIwQYMBaAFOPo/weeA/2kM0aInZN2W5Wfbh1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCOC82QUI5OUUyNjJD NzIxMUVGQjg5QjBGODRDNEY5QUUwMi80LWpfQjU0RF9hUXpSb2lkazNaYmxaOXVI VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtal9CNTREX2FRelJvaWRrM1pibFo5dUhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCOC82QUI5OUUyNjJDNzIxMUVGQjg5QjBGODRDNEY5QUUwMi80LWpfQjU0RF9h UXpSb2lkazNaYmxaOXVIVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwmlZAbkd1y7D96SDGSWsPIShTigk/NBgGx/nNPVc6pbmkouBZzwA8 SR6DS/zD132QAG5fKfeArCZZqgnGif1rET4z9i0CxUQ/PCDTstX58RPmCEWF66OX d2hZ04fSg+DsOQeWR3e7QigovWjO13qoSn22Ss8yUCAmNQMwmi7VH+Iyyi7ybtJs pBZEawLQuZdfAufdaH6GdUKf4aECq67MEZDf1GV4gTjYeKB1zhZO0NACdrbKWFU1 msXWKTxISWM8yloSp2rl/RhBKAwlMli6nyx02SDreRS4HY/Neuh43EvEV5cZwE8K JabU8zG7SorO5JnE2IwF/GiXPBCloxR5 -----END CERTIFICATE-----Generated at Thu Dec 25 21:10:13 2025 by rpki-client