This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: Err0TBZfFAwKybgTMPaKGn2+dlC5/XtZ75XII+h8EqE= Subject key identifier: 85:6E:56:9B:08:97:AB:22:57:A1:EB:1A:37:56:36:F9:85:67:92:0A Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 0649 Signing time: Wed 24 Dec 2025 21:56:20 +0000 Manifest this update: Wed 24 Dec 2025 21:56:20 +0000 Manifest next update: Wed 31 Dec 2025 21:56:20 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: OhZFpzZz1R+Z3vgn7s2qKPZYKr58YddGgI5F6uSqQOM=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: LrOS5vT6G1w5nCu4oa5LHxalQDErRntPMrUYlIi++Aw=) 3: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: NMP/9h7Q+kMraIM38Dl6bwkPc4zc3AHpMdJgqonRBcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 21:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Dec 24 21:56:20 2025 GMT Not After : Dec 31 21:56:20 2025 GMT Subject: CN=694c6184-f539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:c5:41:0f:6f:28:7d:00:45:49:12:5e:ba: a5:db:2c:43:76:64:4d:43:d9:c0:48:b1:82:8b:4d: b9:f4:d4:e0:66:73:3d:25:51:58:c5:07:56:c4:bf: ed:47:7f:7c:4c:6d:0f:85:3b:8b:28:1e:80:36:09: 71:6e:67:ab:14:cc:c8:b3:bd:7c:60:9e:55:0a:99: e1:80:5b:b2:6c:66:13:46:c6:83:5b:6a:6f:23:64: 50:57:b7:18:81:3d:76:2d:08:03:32:b8:c3:02:43: 47:c9:3d:d5:cd:5b:87:95:2f:0c:97:47:7e:f4:1f: 04:38:6c:ee:5a:7a:fc:5e:e1:cc:f2:a6:76:49:b2: 77:92:09:b6:dc:df:b2:86:2c:99:0e:98:b2:5f:e1: 6f:8e:aa:d8:6e:db:2c:24:af:97:d1:f5:ab:2a:35: f4:19:02:f3:fb:f2:b5:46:62:c1:7f:bf:a8:ea:59: 40:d1:13:27:d7:aa:fc:ee:d1:7d:c2:0d:80:76:5a: 8d:af:24:d2:bb:79:cd:2a:39:16:44:43:1d:d1:ae: c8:71:d6:a3:2d:bd:db:29:f6:b5:be:6e:51:cf:c0: a1:81:92:f6:6a:3d:cc:be:0e:bc:cc:e9:b6:f0:45: fd:d2:cc:6f:9a:ef:0d:b3:f4:8e:80:d9:dc:c4:30: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:56:9B:08:97:AB:22:57:A1:EB:1A:37:56:36:F9:85:67:92:0A X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:a3:11:f0:f7:cc:a4:8b:2a:08:d5:71:3d:72:a7:9a:6f:58: c0:1b:c5:06:f2:52:ab:9f:90:2a:6b:80:26:3f:6e:99:f8:a3: 70:6f:c6:22:57:ae:a9:4d:1b:0a:f1:cc:b2:79:3f:0b:fe:e2: 61:50:3a:59:3e:82:f1:b2:0f:77:66:8b:52:a3:c8:ae:96:49: 9f:bb:89:48:72:da:d0:bb:64:ba:4d:d1:bc:db:e8:80:51:eb: 79:07:a4:77:0d:ef:03:0a:06:47:ea:10:c9:35:37:77:e6:4a: 67:8f:37:0d:89:df:39:0e:34:c1:13:3d:73:06:79:53:31:cf: 70:05:6b:e1:df:b8:02:a8:ac:9d:2d:7a:bb:ec:ad:53:e1:02: 5a:0f:23:c1:8e:68:2d:a4:69:d3:75:54:af:6a:6c:2b:fe:11: f4:7a:26:65:e9:a5:9a:00:2e:32:d9:f0:03:57:50:01:95:e3: e9:cb:d5:89:49:40:5c:53:d1:c4:0f:45:1b:32:0c:1b:0c:06: d9:69:85:8a:11:e5:09:d5:20:b5:ad:35:e4:6a:64:5b:78:9e: cd:d4:34:2e:0b:0e:12:76:6b:57:fa:e3:70:5e:b6:fe:08:11: 94:89:b4:3a:f9:57:85:b5:8c:fa:78:8d:df:58:67:6f:ec:78: d4:9e:59:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUxMjI0MjE1NjIwWhcNMjUxMjMxMjE1NjIwWjAYMRYwFAYD VQQDDA02OTRjNjE4NC1mNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqrFQQ9vKH0ARUkSXrql2yxDdmRNQ9nASLGCi0259NTgZnM9JVFYxQdWxL/t R398TG0PhTuLKB6ANglxbmerFMzIs718YJ5VCpnhgFuybGYTRsaDW2pvI2RQV7cY gT12LQgDMrjDAkNHyT3VzVuHlS8Ml0d+9B8EOGzuWnr8XuHM8qZ2SbJ3kgm23N+y hiyZDpiyX+FvjqrYbtssJK+X0fWrKjX0GQLz+/K1RmLBf7+o6llA0RMn16r87tF9 wg2AdlqNryTSu3nNKjkWREMd0a7IcdajLb3bKfa1vm5Rz8ChgZL2aj3Mvg68zOm2 8EX90sxvmu8Ns/SOgNncxDA0TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVuVpsI l6siV6HrGjdWNvmFZ5IKMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvoxHw98ykiyoI1XE9cqeab1jAG8UG8lKrn5Aqa4AmP26Z+KNwb8Yi V66pTRsK8cyyeT8L/uJhUDpZPoLxsg93ZotSo8iulkmfu4lIctrQu2S6TdG82+iA Uet5B6R3De8DCgZH6hDJNTd35kpnjzcNid85DjTBEz1zBnlTMc9wBWvh37gCqKyd LXq77K1T4QJaDyPBjmgtpGnTdVSvamwr/hH0eiZl6aWaAC4y2fADV1ABlePpy9WJ SUBcU9HED0UbMgwbDAbZaYWKEeUJ1SC1rTXkamRbeJ7N1DQuCw4SdmtX+uNwXrb+ CBGUibQ6+VeFtYz6eI3fWGdv7HjUnllE -----END CERTIFICATE-----Generated at Fri Dec 26 01:27:52 2025 by rpki-client