This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: iaSJLK4+m5vfBg6Kb30reho+uvskz4VOQD4Ub26a5uY= Subject key identifier: A7:48:19:92:DA:03:A6:1D:9F:91:11:CE:F3:26:CD:8E:08:12:BD:96 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07FA Signing time: Sat 20 Dec 2025 20:29:13 +0000 Manifest this update: Sat 20 Dec 2025 20:29:13 +0000 Manifest next update: Sat 27 Dec 2025 20:29:13 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: Hr6WRqo+YdWl+FeRu3KDzz9UhAv1sil4BbDDaYjLWPs=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Dec 20 20:29:13 2025 GMT Not After : Dec 27 20:29:13 2025 GMT Subject: CN=69470719-ab34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:00:ec:b9:80:df:66:47:d3:5e:da:22:60: 9f:7d:b8:50:86:cb:b5:db:c4:a8:b4:ea:3a:5c:2c: 63:03:7d:f2:0e:be:3d:85:4d:26:eb:19:fd:7b:fa: d7:9e:ce:1d:bb:ec:b8:3c:38:d8:74:e3:73:01:0f: 7a:1c:fd:dc:ba:ea:ea:a0:4c:8b:ec:f1:9f:ac:a9: 6d:7b:30:b4:84:f3:b7:06:3b:3b:79:00:68:d6:85: 57:57:9e:0d:be:51:1c:97:12:82:4c:d9:a0:3e:02: d1:b2:5c:c9:c1:8c:87:0e:c2:c8:2d:0e:7e:b3:d2: e5:34:a8:a3:8b:f3:22:1f:55:5c:c5:01:ab:9f:41: 21:a6:90:fb:e4:ea:53:38:de:51:76:62:4c:04:92: bf:b2:65:4e:46:08:be:16:8e:07:4a:de:95:c2:07: 53:a5:f7:bb:1b:2c:3f:8d:09:1b:f5:9b:1b:c2:af: de:e8:db:0f:ae:e2:a5:83:5b:1a:04:99:83:2c:ce: af:7b:c7:bf:d3:d4:67:df:99:ca:5f:5f:72:d8:e5: 32:05:bc:03:77:b8:56:02:3a:f7:70:73:6c:9f:69: bb:b6:c7:42:81:da:e6:cf:90:db:d7:e3:64:3d:35: 21:0f:82:ca:15:38:89:70:0e:4e:ae:d4:cb:81:ef: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:48:19:92:DA:03:A6:1D:9F:91:11:CE:F3:26:CD:8E:08:12:BD:96 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:49:71:ab:73:d1:36:7f:43:0c:fa:f5:7e:ee:b3:c8:ee: 33:ba:5c:11:00:d5:c3:68:76:7d:47:b8:09:64:7d:d5:d7:ab: cb:81:b0:2d:ec:7c:57:57:41:d4:36:8c:86:e2:40:2a:31:f0: f7:16:fa:d7:ee:dd:a8:6c:8c:a0:07:3f:4e:e9:0e:e7:66:28: 18:7d:30:b3:a0:96:22:4a:ca:85:5a:fa:e4:b2:15:f7:cc:67: 30:23:b7:38:b5:b1:87:84:f9:02:d8:25:a9:1f:fc:c5:8f:ad: c2:1f:25:eb:85:54:9f:d6:07:d2:f3:f1:31:ac:37:01:30:1e: 4c:a9:5a:d6:49:3c:31:40:6e:44:e4:1d:a0:96:f8:a6:77:4b: d7:86:72:7b:bf:11:f6:ff:26:a4:18:91:0c:f3:0f:fb:54:82: 39:3b:c1:83:20:e4:44:65:f0:c2:31:11:77:a8:48:fe:de:33: 55:63:dd:e4:3d:c6:ac:58:06:68:12:a3:6d:35:2f:d5:8d:68: c2:c6:2f:f7:60:a0:36:af:91:bc:03:b8:1e:32:dc:0d:b7:b3: 25:79:aa:5a:b0:48:e2:74:60:b0:33:f9:cd:e4:77:85:15:fc: 5d:d0:9a:aa:e9:b7:a8:f9:b8:63:6c:1f:6e:2f:e4:11:2d:0d: a7:0e:45:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMjIwMjAyOTEzWhcNMjUxMjI3MjAyOTEzWjAYMRYwFAYD VQQDDA02OTQ3MDcxOS1hYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFgA7LmA32ZH017aImCffbhQhsu128SotOo6XCxjA33yDr49hU0m6xn9e/rX ns4du+y4PDjYdONzAQ96HP3cuurqoEyL7PGfrKltezC0hPO3Bjs7eQBo1oVXV54N vlEclxKCTNmgPgLRslzJwYyHDsLILQ5+s9LlNKiji/MiH1VcxQGrn0EhppD75OpT ON5RdmJMBJK/smVORgi+Fo4HSt6VwgdTpfe7Gyw/jQkb9Zsbwq/e6NsPruKlg1sa BJmDLM6ve8e/09Rn35nKX19y2OUyBbwDd7hWAjr3cHNsn2m7tsdCgdrmz5Db1+Nk PTUhD4LKFTiJcA5OrtTLge+VBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdIGZLa A6Ydn5ERzvMmzY4IEr2WMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAD0lxq3PRNn9DDPr1fu6zyO4zulwRANXDaHZ9R7gJZH3V16vLgbAt 7HxXV0HUNoyG4kAqMfD3FvrX7t2obIygBz9O6Q7nZigYfTCzoJYiSsqFWvrkshX3 zGcwI7c4tbGHhPkC2CWpH/zFj63CHyXrhVSf1gfS8/ExrDcBMB5MqVrWSTwxQG5E 5B2glvimd0vXhnJ7vxH2/yakGJEM8w/7VII5O8GDIOREZfDCMRF3qEj+3jNVY93k PcasWAZoEqNtNS/VjWjCxi/3YKA2r5G8A7geMtwNt7MleapasEjidGCwM/nN5HeF Ffxd0Jqq6beo+bhjbB9uL+QRLQ2nDkWX -----END CERTIFICATE-----Generated at Sun Dec 21 07:21:22 2025 by rpki-client