This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: ZxSEZEEGXlkFrnBTw+jnMQUtPelalo8GNLrKnwryGBw= Subject key identifier: FF:1B:2D:F8:35:EA:A2:1F:03:6D:74:B4:43:5D:DD:73:B5:62:FD:3A Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 0292 Signing time: Thu 01 Jan 2026 01:02:03 +0000 Manifest this update: Thu 01 Jan 2026 01:02:02 +0000 Manifest next update: Thu 08 Jan 2026 01:02:02 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: tjjBI05rPz6DSUIssVM55P9V1aqnA3dPjKy68vakuAQ=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: Jan 1 01:02:02 2026 GMT Not After : Jan 8 01:02:02 2026 GMT Subject: CN=6955c78b-186b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:ed:48:ca:cb:39:cf:66:ca:a2:3f:44:44: 90:a4:33:28:ba:f4:b8:3d:f6:08:ec:3c:54:a2:41: a0:fd:76:72:b8:69:93:3f:57:03:24:e3:ea:df:1e: 83:f9:5b:a7:f3:7f:2f:8a:5a:0e:7a:45:81:69:c4: 04:3a:6b:ae:e8:36:33:b4:b0:dc:ef:a7:ec:e9:5f: d6:c9:b4:01:2a:da:d0:ad:11:13:cd:02:4d:fb:6c: e6:51:fa:ed:fa:c9:f9:16:40:a9:c2:4d:e8:b4:86: cd:a6:e3:49:ec:dd:05:a0:73:e6:9e:86:0a:bb:79: 88:4e:36:6a:5e:f8:8b:13:15:20:53:c3:37:32:ad: 61:54:f8:99:12:77:40:2e:85:ea:62:87:27:55:59: e8:e6:4a:c7:d0:0e:6d:f4:60:c5:70:36:90:23:5d: 94:df:18:37:5d:95:1a:ee:f0:5d:6a:b2:86:5c:8d: ea:d5:7d:64:60:95:4d:63:1f:7c:a5:cd:8a:f1:16: ca:01:fb:4d:f4:3b:c2:43:82:38:e2:4e:df:7d:9c: 6b:d9:3d:b5:ad:51:04:fd:df:95:3e:69:4a:ea:86: 84:d9:27:b1:cf:24:d9:bf:26:26:87:40:ac:a8:dc: 22:6d:05:09:41:8c:78:e4:7d:23:8f:00:36:cf:c8: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:2D:F8:35:EA:A2:1F:03:6D:74:B4:43:5D:DD:73:B5:62:FD:3A X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:de:54:47:e9:da:fd:94:6b:12:b3:17:74:88:34:67:b1: 2d:c1:a5:cd:08:bc:66:04:f9:a7:44:14:d5:37:cf:4a:c9:14: 9e:c7:5f:a4:06:d5:51:47:32:8e:ed:e5:45:f2:84:52:87:b3: 9f:5e:7c:bb:c8:cb:09:04:e9:30:ad:90:f0:fc:83:46:47:9d: 71:8e:77:2d:46:a2:0b:04:2a:d9:44:ce:4f:42:11:95:b1:d8: 04:38:13:d6:69:99:99:40:01:aa:ec:ef:8d:10:5a:f3:96:4c: 69:9e:ca:b2:ff:0a:bb:9f:89:b5:91:a5:81:2b:c0:f2:1d:44: 94:9d:ae:66:d2:99:6c:96:e8:54:8e:26:93:30:96:51:f3:4d: c6:2a:20:c8:ad:0c:a9:55:70:d8:83:f9:ca:e2:4a:15:17:9c: 8b:75:ee:89:b6:70:b3:55:2e:ec:7c:df:a7:1f:01:71:f9:d1: 6e:1b:ce:49:b9:b3:e9:42:af:51:30:11:bf:11:31:f4:07:a9: 3c:f4:95:0f:69:a9:59:e2:2a:c8:4a:97:97:91:c6:35:0d:28: bb:69:26:11:6c:fb:06:7a:b8:a0:e8:88:d8:56:4f:01:aa:07: 60:05:b7:94:1b:f3:18:b5:27:52:47:86:a3:8f:e4:53:f9:57: 4f:7c:55:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjYwMTAxMDEwMjAyWhcNMjYwMTA4MDEwMjAyWjAYMRYwFAYD VQQDDA02OTU1Yzc4Yi0xODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiFXtSMrLOc9myqI/RESQpDMouvS4PfYI7DxUokGg/XZyuGmTP1cDJOPq3x6D +Vun838viloOekWBacQEOmuu6DYztLDc76fs6V/WybQBKtrQrRETzQJN+2zmUfrt +sn5FkCpwk3otIbNpuNJ7N0FoHPmnoYKu3mITjZqXviLExUgU8M3Mq1hVPiZEndA LoXqYocnVVno5krH0A5t9GDFcDaQI12U3xg3XZUa7vBdarKGXI3q1X1kYJVNYx98 pc2K8RbKAftN9DvCQ4I44k7ffZxr2T21rVEE/d+VPmlK6oaE2SexzyTZvyYmh0Cs qNwibQUJQYx45H0jjwA2z8gqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8bLfg1 6qIfA210tENd3XO1Yv06MB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX795UR+na/ZRrErMXdIg0Z7EtwaXNCLxmBPmnRBTVN89KyRSex1+k BtVRRzKO7eVF8oRSh7OfXny7yMsJBOkwrZDw/INGR51xjnctRqILBCrZRM5PQhGV sdgEOBPWaZmZQAGq7O+NEFrzlkxpnsqy/wq7n4m1kaWBK8DyHUSUna5m0plsluhU jiaTMJZR803GKiDIrQypVXDYg/nK4koVF5yLde6JtnCzVS7sfN+nHwFx+dFuG85J ubPpQq9RMBG/ETH0B6k89JUPaalZ4irISpeXkcY1DSi7aSYRbPsGerig6IjYVk8B qgdgBbeUG/MYtSdSR4ajj+RT+VdPfFXK -----END CERTIFICATE-----Generated at Thu Jan 1 14:27:10 2026 by rpki-client