This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: EPDsVIXgbCrqeIxYOnkyc4gAVNESZWXxj5LcWgI8vQY= Subject key identifier: E0:2C:B9:5D:CB:49:FA:8D:CF:AE:B9:F9:48:69:00:BB:24:74:EF:A1 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 0737 Signing time: Thu 18 Dec 2025 21:38:38 +0000 Manifest this update: Thu 18 Dec 2025 21:38:37 +0000 Manifest next update: Thu 25 Dec 2025 21:38:37 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: E+byLfwRJuRgJAMbKXYod+g+LuR80t9bQPCl4yzevE0=) 2: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 3: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 4: 317095E0A28911ECBC355360C4F9AE02.roa (hash: Pa0iKARYCWRSksppmbtkHK6D27x19i+sB6izIsd+594=) 5: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 6: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: ahURvf3WgTOlPvJ2Yvz5ikj2GmylBcCLMIT4Gjnelzo=) 7: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=) 8: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 9: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Dec 18 21:38:37 2025 GMT Not After : Dec 25 21:38:37 2025 GMT Subject: CN=6944745e-b12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:6a:ff:de:27:11:a8:a8:50:6a:2e:95:9b: 2c:b1:50:56:da:1b:44:77:ad:2c:a3:00:99:90:a3: fa:82:cd:59:35:19:33:2a:d6:90:53:d2:95:5e:75: c3:e5:c8:67:c0:be:f1:a8:8a:aa:4e:4e:58:7d:d1: 3d:dd:14:51:45:f7:25:bf:f7:7c:e9:a2:db:cf:a6: 2b:b1:38:2c:b2:d1:5f:c1:23:92:5d:dd:7b:d2:e3: b2:95:49:5e:e5:d5:c5:05:df:23:1d:31:3c:22:3a: 5e:5a:5f:f4:c5:c0:86:a0:2b:ec:fc:ba:7a:a7:87: 8e:af:c3:50:af:5b:43:9b:a1:99:ee:3a:8a:6c:95: c8:56:50:3b:6d:44:2b:85:c3:54:7e:67:94:79:23: 03:d2:20:59:8d:1c:d7:d9:10:7b:a5:0a:0a:47:32: e4:cc:14:d4:90:7e:a9:6e:bc:11:7a:8c:00:c2:10: fa:7f:7c:ef:b4:83:7a:f0:15:9d:16:60:aa:25:53: c8:ee:d0:1c:72:21:f9:41:18:08:32:16:51:33:85: 3a:b8:46:ca:5a:6c:1d:8e:8b:54:ab:d2:76:33:d4: 27:85:72:a3:f2:f0:8a:db:ac:17:9c:ea:9a:79:8c: 97:5b:9c:34:ae:0b:35:29:e3:9b:07:4d:de:6f:69: 8b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:B9:5D:CB:49:FA:8D:CF:AE:B9:F9:48:69:00:BB:24:74:EF:A1 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b9:f0:ac:56:ed:d9:be:ea:dc:f6:ec:59:e6:96:ff:17:87: 11:7a:16:c9:52:a6:8c:90:ad:6b:46:b9:45:81:74:a8:0d:a4: 8e:09:50:ba:a7:81:48:c8:31:c2:89:5e:8c:39:61:5c:02:7c: b5:e1:19:78:fa:4a:2e:85:88:07:6a:bd:6a:83:e0:4e:56:ac: a2:2e:f3:d7:b4:4f:fe:7f:7d:1b:6c:da:19:32:b3:9b:f3:3d: 21:47:dd:c1:86:bd:64:62:f9:b6:e4:28:a5:ac:fc:87:65:03: 3f:5b:34:00:a6:ed:95:b3:13:c7:42:4a:70:1c:f3:59:aa:3e: 46:c4:1f:2d:02:1d:7a:f6:5f:fe:6f:61:d8:d9:c4:80:6f:42: 11:2f:59:b8:b9:73:94:48:86:e4:00:22:be:90:59:f8:fd:df: 5b:ac:ba:96:b9:c9:ab:51:fa:9c:4e:ab:19:94:9f:e3:1b:d6: d5:8d:fa:a8:0b:10:41:4c:37:26:ec:2c:e5:ca:48:0e:52:6c: 0a:ad:39:d4:1b:d0:5d:76:16:52:8d:c8:43:16:7c:38:d1:7b: 1a:dc:f8:81:d5:f0:e9:e9:78:11:f9:b6:b5:2d:46:09:6a:29: 74:a9:c8:df:73:91:02:dc:87:43:06:e7:bc:62:f8:ad:a9:ff: 2b:f8:b1:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUxMjE4MjEzODM3WhcNMjUxMjI1MjEzODM3WjAYMRYwFAYD VQQDDA02OTQ0NzQ1ZS1iMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTdq/94nEaioUGoulZsssVBW2htEd60sowCZkKP6gs1ZNRkzKtaQU9KVXnXD 5chnwL7xqIqqTk5YfdE93RRRRfclv/d86aLbz6YrsTgsstFfwSOSXd170uOylUle 5dXFBd8jHTE8IjpeWl/0xcCGoCvs/Lp6p4eOr8NQr1tDm6GZ7jqKbJXIVlA7bUQr hcNUfmeUeSMD0iBZjRzX2RB7pQoKRzLkzBTUkH6pbrwReowAwhD6f3zvtIN68BWd FmCqJVPI7tAcciH5QRgIMhZRM4U6uEbKWmwdjotUq9J2M9QnhXKj8vCK26wXnOqa eYyXW5w0rgs1KeObB03eb2mLswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAsuV3L SfqNz665+UhpALskdO+hMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHufCsVu3Zvurc9uxZ5pb/F4cRehbJUqaMkK1rRrlFgXSoDaSOCVC6 p4FIyDHCiV6MOWFcAny14Rl4+kouhYgHar1qg+BOVqyiLvPXtE/+f30bbNoZMrOb 8z0hR93Bhr1kYvm25CilrPyHZQM/WzQApu2VsxPHQkpwHPNZqj5GxB8tAh169l/+ b2HY2cSAb0IRL1m4uXOUSIbkACK+kFn4/d9brLqWucmrUfqcTqsZlJ/jG9bVjfqo CxBBTDcm7CzlykgOUmwKrTnUG9BddhZSjchDFnw40Xsa3PiB1fDp6XgR+ba1LUYJ ail0qcjfc5EC3IdDBue8Yvitqf8r+LGR -----END CERTIFICATE-----Generated at Sat Dec 20 19:02:39 2025 by rpki-client