This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: 4eTTZbvb+OwutMljQBB+aH0IXhGYAlWCw403kKleL/s= Subject key identifier: 73:6E:FD:9F:78:1B:5F:18:A2:56:82:79:2A:F8:F5:36:7F:FC:07:00 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 093B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 092C Signing time: Mon 22 Dec 2025 19:37:39 +0000 Manifest this update: Mon 22 Dec 2025 19:37:39 +0000 Manifest next update: Mon 29 Dec 2025 19:37:39 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: U2fo05NXetSKm2yMjdEwL5NVhuRfoH4Lg9YXu4Ngpks=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2363 (0x93b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Dec 22 19:37:39 2025 GMT Not After : Dec 29 19:37:39 2025 GMT Subject: CN=69499e03-6bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:0d:64:ac:87:92:dc:b0:0e:fe:7f:7b:ad: 80:a5:f1:8d:48:50:c3:a1:43:89:c8:81:a8:0c:51: e6:e8:bf:5e:27:94:05:35:23:2c:4e:b6:d3:30:47: a7:b9:b8:aa:da:11:f8:9f:80:42:fe:06:aa:0b:ec: 99:7e:53:ab:5e:24:57:d2:4a:c5:55:41:39:4b:3d: 8e:aa:bc:fd:0f:a1:03:6f:15:29:2b:a9:64:8a:f6: dd:41:1d:b3:a7:07:48:f4:23:70:f3:72:4e:54:24: db:86:fc:6a:91:03:d8:7e:58:23:21:78:c5:9f:62: 47:bb:5c:10:12:89:2f:6d:77:bf:4f:18:d5:37:13: 6e:57:b1:a8:7f:fc:a1:d7:ec:94:18:c1:00:c5:45: ad:8a:ef:1d:2a:a9:8f:ae:ae:f4:17:0d:b8:93:61: e6:d0:9b:8b:79:4f:5e:ed:38:cf:f4:de:4a:57:48: 25:87:11:68:c3:90:a5:08:ee:e2:ca:cb:c5:5d:a7: e9:19:05:74:7c:66:2c:4c:31:3d:49:c8:c4:fe:96: 11:f8:4b:42:7f:96:92:09:1b:db:d0:6d:24:92:9f: ed:4b:d8:d3:d6:72:67:53:4a:ce:4b:f1:d6:44:5d: 93:9d:69:aa:c2:c3:4d:ab:6c:75:21:5d:f0:39:47: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6E:FD:9F:78:1B:5F:18:A2:56:82:79:2A:F8:F5:36:7F:FC:07:00 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ce:e7:3e:8e:be:1e:7e:54:4e:c6:12:f9:32:ea:92:4b:28: 82:7c:b4:f9:5c:c4:4a:57:a7:98:24:d0:1a:23:8c:30:ed:53: d0:f2:d9:67:05:10:ab:f8:be:0c:8a:31:d1:80:27:f7:c8:56: 53:68:5d:c2:aa:d9:4c:b8:14:a0:54:56:7f:29:94:84:12:15: 53:10:8f:5d:18:aa:06:e4:42:9f:f5:7e:ca:3e:d4:a3:22:c4: 6b:6e:06:8d:5d:19:29:3f:85:a9:9a:04:71:db:4e:6c:0c:92: 8b:4a:bf:d0:b4:4b:6b:c0:93:c5:8a:09:88:77:9c:4e:cf:bf: bb:66:e1:54:72:10:ad:b1:ef:1a:71:d7:2a:c3:51:27:41:19: c8:95:22:b3:a4:b4:bf:52:38:f4:f1:10:46:c5:42:b8:cd:d8: 8d:5a:55:3d:73:74:fb:c8:68:fb:2d:34:66:54:f3:e7:a4:f6: 07:c5:13:3d:d8:f9:35:38:00:b1:62:04:ca:9c:ce:5a:74:18: 6f:60:b6:28:69:74:9c:ad:ef:e5:48:01:bb:13:d1:18:ae:c4: fb:36:28:81:9d:8c:6d:35:72:34:90:66:ae:67:86:54:6c:c9: 92:c3:71:c8:2c:28:58:fb:0b:2d:3a:4d:5d:c5:60:e1:02:1e: 82:49:d1:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUxMjIyMTkzNzM5WhcNMjUxMjI5MTkzNzM5WjAYMRYwFAYD VQQDDA02OTQ5OWUwMy02YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEoNZKyHktywDv5/e62ApfGNSFDDoUOJyIGoDFHm6L9eJ5QFNSMsTrbTMEen ubiq2hH4n4BC/gaqC+yZflOrXiRX0krFVUE5Sz2Oqrz9D6EDbxUpK6lkivbdQR2z pwdI9CNw83JOVCTbhvxqkQPYflgjIXjFn2JHu1wQEokvbXe/TxjVNxNuV7Gof/yh 1+yUGMEAxUWtiu8dKqmPrq70Fw24k2Hm0JuLeU9e7TjP9N5KV0glhxFow5ClCO7i ysvFXafpGQV0fGYsTDE9ScjE/pYR+EtCf5aSCRvb0G0kkp/tS9jT1nJnU0rOS/HW RF2TnWmqwsNNq2x1IV3wOUfahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNu/Z94 G18YolaCeSr49TZ//AcAMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJzuc+jr4eflROxhL5MuqSSyiCfLT5XMRKV6eYJNAaI4ww7VPQ8tln BRCr+L4MijHRgCf3yFZTaF3CqtlMuBSgVFZ/KZSEEhVTEI9dGKoG5EKf9X7KPtSj IsRrbgaNXRkpP4WpmgRx205sDJKLSr/QtEtrwJPFigmId5xOz7+7ZuFUchCtse8a cdcqw1EnQRnIlSKzpLS/Ujj08RBGxUK4zdiNWlU9c3T7yGj7LTRmVPPnpPYHxRM9 2Pk1OACxYgTKnM5adBhvYLYoaXScre/lSAG7E9EYrsT7NiiBnYxtNXI0kGauZ4ZU bMmSw3HILChY+wstOk1dxWDhAh6CSdEF -----END CERTIFICATE-----Generated at Tue Dec 23 17:15:46 2025 by rpki-client