This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: HNUmdyM7HC7AfttCwqOhlivkAazBU/MQdWKA9rFuuEw= Subject key identifier: C5:9E:F5:F8:EB:57:A1:97:08:30:89:2E:53:13:65:AB:DE:D2:FF:86 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 0520 Signing time: Thu 18 Dec 2025 22:53:20 +0000 Manifest this update: Thu 18 Dec 2025 22:53:20 +0000 Manifest next update: Thu 25 Dec 2025 22:53:20 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: K6oU5mglIVqfyxgjACi24dhiwC0RkyoRWj1ZT5GOU0c=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: LIC3UjwuX1L1kGuepSck3yzfK3nMMe4EkNAzNmI2D14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Dec 18 22:53:20 2025 GMT Not After : Dec 25 22:53:20 2025 GMT Subject: CN=694485e0-05c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:d2:c3:ac:a0:1d:2e:53:86:f3:6b:41:28: 90:b4:49:50:f1:1d:b3:91:3e:f4:c3:46:06:a0:db: 22:63:b4:14:98:45:d1:07:43:42:eb:4f:b5:ef:c4: c5:56:0d:e0:94:2f:eb:97:e5:a2:4d:4a:c9:a4:39: 83:56:2b:e2:2b:99:c4:98:bb:91:70:15:2f:34:04: 97:30:93:98:76:66:58:22:2f:7d:fa:0f:d5:eb:ad: 84:5e:38:ed:bb:cb:e1:7c:59:88:30:22:58:a5:09: 81:3f:d0:a6:64:72:ae:08:c5:99:bc:e5:3c:76:ae: c8:ac:5e:dc:71:8c:ea:06:2c:0e:b4:a4:f1:4b:69: c6:ea:4f:81:d0:8d:59:ca:9b:88:30:e8:ad:5f:30: 16:75:f1:6c:51:31:17:88:8e:fb:74:7e:42:d5:fe: f5:96:82:f1:db:5c:0b:d5:d7:4c:62:cb:5d:51:4c: 8a:1e:e5:20:65:31:6b:40:ef:c3:5f:23:da:ac:07: 68:a9:48:e3:12:4b:a9:08:c1:ea:8d:74:9d:1d:f1: d5:b0:87:5f:c3:22:23:23:d4:c7:65:bf:93:3e:b1: 5b:20:0a:4f:3c:35:d4:f2:30:8a:d9:5d:63:cc:9e: 1e:cb:20:d9:1b:53:9b:47:99:d5:f4:0f:ae:42:0c: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:F5:F8:EB:57:A1:97:08:30:89:2E:53:13:65:AB:DE:D2:FF:86 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d8:38:ca:2f:be:f4:df:32:52:23:30:40:27:f5:20:dd:42: 59:ed:f3:23:3a:e0:ba:93:33:45:bb:02:bd:70:be:26:0b:72: 68:68:37:77:55:84:4a:9b:21:e5:55:fb:4e:b7:56:da:04:bb: fa:fe:d4:40:f0:2f:25:fe:ff:eb:2c:a1:f0:ff:c0:22:95:b3: 57:31:eb:44:99:e9:27:ae:a9:dd:43:d2:95:92:0e:e1:69:63: b6:13:09:59:ed:5e:11:92:b1:93:82:55:81:a6:fd:81:2d:32: bf:07:e6:83:46:29:0b:5c:3c:d0:4e:1f:e3:e4:6e:0e:ae:57: 10:86:4f:2e:d0:c8:3d:9a:9c:9e:3b:57:51:5f:ed:ad:50:34: 4a:32:a9:23:ed:09:b3:60:bf:ad:f2:eb:06:6e:9f:59:15:7d: 72:45:b3:d4:21:68:6b:7a:9c:b1:94:c4:ce:ab:d1:2c:19:8b: 72:b1:2c:ce:9a:16:2f:d6:1d:00:cb:c0:91:a2:7a:b4:73:a0: a5:3a:c5:af:2b:65:43:ff:d9:2c:b7:ae:0b:70:67:f4:36:9a: 01:6e:f7:aa:b5:18:96:2a:93:59:df:9c:89:6b:90:b1:af:73: bb:15:3e:b3:ef:8d:ff:38:20:27:a5:16:2a:6a:b9:fe:b4:5f: bf:0e:4c:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUxMjE4MjI1MzIwWhcNMjUxMjI1MjI1MzIwWjAYMRYwFAYD VQQDDA02OTQ0ODVlMC0wNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznrSw6ygHS5ThvNrQSiQtElQ8R2zkT70w0YGoNsiY7QUmEXRB0NC60+178TF Vg3glC/rl+WiTUrJpDmDViviK5nEmLuRcBUvNASXMJOYdmZYIi99+g/V662EXjjt u8vhfFmIMCJYpQmBP9CmZHKuCMWZvOU8dq7IrF7ccYzqBiwOtKTxS2nG6k+B0I1Z ypuIMOitXzAWdfFsUTEXiI77dH5C1f71loLx21wL1ddMYstdUUyKHuUgZTFrQO/D XyParAdoqUjjEkupCMHqjXSdHfHVsIdfwyIjI9THZb+TPrFbIApPPDXU8jCK2V1j zJ4eyyDZG1ObR5nV9A+uQgw2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWe9fjr V6GXCDCJLlMTZave0v+GMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk2DjKL7703zJSIzBAJ/Ug3UJZ7fMjOuC6kzNFuwK9cL4mC3JoaDd3 VYRKmyHlVftOt1baBLv6/tRA8C8l/v/rLKHw/8AilbNXMetEmeknrqndQ9KVkg7h aWO2EwlZ7V4RkrGTglWBpv2BLTK/B+aDRikLXDzQTh/j5G4OrlcQhk8u0Mg9mpye O1dRX+2tUDRKMqkj7QmzYL+t8usGbp9ZFX1yRbPUIWhrepyxlMTOq9EsGYtysSzO mhYv1h0Ay8CRonq0c6ClOsWvK2VD/9kst64LcGf0NpoBbveqtRiWKpNZ35yJa5Cx r3O7FT6z743/OCAnpRYqarn+tF+/Dkwv -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:47 2025 by rpki-client