This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: 8H/Qh0ctY4pTkHrAVnyR29QuRy9IbmP6z2pRnN2sOHg= Subject key identifier: 75:1C:A4:56:80:61:05:0A:00:58:09:A9:23:67:56:DC:E6:48:0E:2C Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B73 Signing time: Sat 20 Dec 2025 18:39:17 +0000 Manifest this update: Sat 20 Dec 2025 18:39:16 +0000 Manifest next update: Sat 27 Dec 2025 18:39:16 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: UKc/Uh4UXVONOR7ayr0/Ybkr8OfatNQKcRAOqAHwWw4=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Dec 20 18:39:16 2025 GMT Not After : Dec 27 18:39:16 2025 GMT Subject: CN=6946ed55-3be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:17:fd:e8:c4:a5:c0:15:dd:2e:d5:38:74: eb:38:db:13:61:ed:e9:fb:39:7c:2c:de:ec:76:50: d2:02:5b:04:53:67:aa:f7:7a:a3:22:82:49:e4:f2: b8:59:0d:d5:f8:5f:44:67:5c:d8:f3:77:65:84:7c: 53:f4:4d:55:2a:c3:46:ec:3c:4e:69:17:0f:13:10: ec:9c:6b:8f:1e:6d:c7:59:1d:52:8b:7a:a5:64:63: 40:88:81:46:db:24:e9:e6:cf:95:a2:b5:e6:58:a6: 23:77:12:5f:76:b0:94:af:c8:88:78:a7:2a:6f:62: 5e:f0:50:08:85:2f:55:74:e2:44:44:7e:8a:39:bd: 21:9b:ba:bc:0c:8f:b5:e6:5d:46:d7:22:a2:8a:fb: a0:ee:03:ec:b9:5b:a9:04:82:ca:df:d2:15:8c:ae: c9:4c:04:02:19:01:5b:95:0a:d9:9a:9b:77:66:7f: cd:0d:53:dc:49:d6:35:57:6d:5b:05:10:7e:28:5a: 3a:ee:f3:27:26:07:cd:8c:e8:c1:e1:a7:71:2c:6c: 97:e0:2e:7f:23:86:07:0e:61:82:dd:69:b4:0c:49: 45:7d:96:ec:00:b2:25:68:a7:41:b8:2d:c6:fe:1c: f7:ba:98:cc:30:f9:4d:38:72:f5:0d:13:a4:ae:7c: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:A4:56:80:61:05:0A:00:58:09:A9:23:67:56:DC:E6:48:0E:2C X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e8:ac:70:d2:24:04:96:da:c8:3d:56:75:e5:16:79:f1:0a: 0a:f8:ee:e0:3f:ff:d8:ad:51:83:de:a6:f6:5b:73:bd:a7:d1: e2:1b:4c:fe:d4:3f:83:9c:c1:46:9d:ba:c6:ec:73:b0:ec:0e: 27:c6:a0:ba:61:d6:3b:b5:d5:0a:8b:68:62:21:c6:9f:a4:88: ff:1b:e8:c1:37:05:01:10:67:cd:5d:bd:24:fe:a2:5c:8c:66: 12:8c:8d:fa:d9:d4:a5:38:34:e2:ce:5b:44:a5:89:07:a5:dc: f8:80:24:13:9a:ac:c5:2a:9e:2c:dc:d5:ad:e5:63:01:b9:f8: 0a:af:87:bc:65:67:1b:95:90:b5:67:5c:75:5e:bd:fb:88:2b: 40:06:da:dd:15:78:31:38:1d:7c:50:fc:29:7d:ee:eb:cf:6c: 95:14:f9:a1:5e:a2:95:58:84:5c:8e:0d:c0:fc:a9:70:48:29: 9c:0b:a1:99:7f:ec:ee:99:8d:23:47:92:da:4d:cc:cc:f7:3d: 29:d0:db:e2:2b:8d:a1:35:bb:89:69:67:f5:f0:f0:05:6f:0b: b9:98:7c:ca:4f:91:66:91:81:7c:ad:86:6f:4f:56:ef:04:3a: 25:11:2c:f9:44:46:ab:41:1d:2d:27:f0:11:ed:81:0b:2e:af: 4c:d6:9f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUxMjIwMTgzOTE2WhcNMjUxMjI3MTgzOTE2WjAYMRYwFAYD VQQDDA02OTQ2ZWQ1NS0zYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3wX/ejEpcAV3S7VOHTrONsTYe3p+zl8LN7sdlDSAlsEU2eq93qjIoJJ5PK4 WQ3V+F9EZ1zY83dlhHxT9E1VKsNG7DxOaRcPExDsnGuPHm3HWR1Si3qlZGNAiIFG 2yTp5s+VorXmWKYjdxJfdrCUr8iIeKcqb2Je8FAIhS9VdOJERH6KOb0hm7q8DI+1 5l1G1yKiivug7gPsuVupBILK39IVjK7JTAQCGQFblQrZmpt3Zn/NDVPcSdY1V21b BRB+KFo67vMnJgfNjOjB4adxLGyX4C5/I4YHDmGC3Wm0DElFfZbsALIlaKdBuC3G /hz3upjMMPlNOHL1DROkrnw4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUcpFaA YQUKAFgJqSNnVtzmSA4sMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo6Kxw0iQEltrIPVZ15RZ58QoK+O7gP//YrVGD3qb2W3O9p9HiG0z+ 1D+DnMFGnbrG7HOw7A4nxqC6YdY7tdUKi2hiIcafpIj/G+jBNwUBEGfNXb0k/qJc jGYSjI362dSlODTizltEpYkHpdz4gCQTmqzFKp4s3NWt5WMBufgKr4e8ZWcblZC1 Z1x1Xr37iCtABtrdFXgxOB18UPwpfe7rz2yVFPmhXqKVWIRcjg3A/KlwSCmcC6GZ f+zumY0jR5LaTczM9z0p0NviK42hNbuJaWf18PAFbwu5mHzKT5FmkYF8rYZvT1bv BDolESz5REarQR0tJ/AR7YELLq9M1p/F -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:40 2025 by rpki-client