This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: JGZE6cAluOb330qsk6HlLl9IZMmeAR1Xiu8a44KR4cI= Subject key identifier: 5B:E3:2E:DA:D9:89:43:47:D5:C4:A8:DB:7F:E8:5C:DA:7E:66:DD:87 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07FB Signing time: Mon 22 Dec 2025 20:25:35 +0000 Manifest this update: Mon 22 Dec 2025 20:25:34 +0000 Manifest next update: Mon 29 Dec 2025 20:25:34 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: Cmjp/SQ+otqU22cpmEBsUkOZ8s9ixMmzaJCbO9+FfjI=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Dec 22 20:25:34 2025 GMT Not After : Dec 29 20:25:34 2025 GMT Subject: CN=6949a93f-9e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:dd:9b:a6:a2:59:49:74:81:62:2e:c6:99: bc:3f:cc:71:07:c5:5e:81:be:50:ad:c2:ef:93:ab: c1:fd:6b:f4:dd:f3:52:d5:0a:62:41:ff:3e:73:6e: ef:ec:b2:60:fd:c4:e1:81:ba:9a:c6:c8:f6:ec:71: aa:13:6f:d4:1f:c2:a9:c6:8a:af:71:2a:e3:b7:df: d8:bb:d7:7b:12:5d:6e:f1:f1:06:d2:3b:4b:4f:75: 87:25:1a:25:6c:e7:5c:8d:e9:02:ae:90:bb:42:97: 5d:c0:aa:db:bb:be:9a:01:4e:0b:0f:a8:00:69:f0: cd:0b:f1:67:8a:ae:33:cb:3f:83:0b:a8:d7:f6:8b: e3:f0:99:17:2c:58:3b:00:69:72:b0:b1:f2:ef:21: 14:fd:4f:93:4f:e5:62:ad:f8:ef:f5:3f:7f:1b:f5: 40:81:77:50:4b:4d:3d:a7:0d:41:fe:f9:f4:53:a7: 85:72:5b:18:90:39:1d:8c:c8:ac:01:c7:db:f0:2f: 18:a2:ee:31:e7:b1:86:60:18:a2:bd:7a:58:97:de: 5f:7a:f7:87:f2:7b:bb:2d:ab:de:88:98:62:b5:82: 8b:f7:a0:a5:a9:45:73:c9:99:13:50:44:2a:d4:09: b1:26:72:8f:a2:83:68:76:a3:bf:21:54:4f:72:f7: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E3:2E:DA:D9:89:43:47:D5:C4:A8:DB:7F:E8:5C:DA:7E:66:DD:87 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:60:b8:c8:91:07:ae:09:e8:68:3a:4b:a5:cb:09:d2:66:ec: df:1f:36:c3:55:92:99:2d:0e:c5:05:b0:7c:af:26:34:51:df: 1b:ad:82:fc:c7:58:e8:11:29:d5:b2:ee:e0:a2:9d:1c:6a:54: 25:48:6e:ed:f3:2e:dc:fe:6c:82:2a:38:24:ac:16:c5:e3:38: bc:7a:47:4d:08:b9:4c:cb:58:3f:20:b5:b7:39:59:fb:c5:b9: f4:2a:d8:af:6e:e7:a0:ac:75:7c:ae:f0:ce:e7:22:15:05:a0: d4:2e:52:68:64:45:ea:bc:9b:39:48:c2:5a:5d:88:0e:71:82: 09:6c:4f:3a:aa:72:cd:ac:4e:d9:0d:2c:e2:d1:89:1d:4d:97: ce:95:f2:5d:0e:5b:32:0f:b9:fc:f0:ed:09:19:37:12:08:b6: 2f:6c:28:ce:d6:e0:be:a0:87:59:ec:b6:3d:44:76:fe:11:87: 7d:1b:13:2c:7b:b4:e2:1b:15:6b:16:1c:fe:a7:fb:fe:d7:c5: ba:c5:86:7c:2f:70:ed:11:fa:56:ef:e6:34:ab:2e:73:9e:fd: b4:ee:12:3a:cb:c6:8d:ea:23:c8:2f:0c:c7:eb:0a:8e:2d:f0: 92:f9:6f:d9:e6:87:73:4f:fd:fb:ad:e4:29:c2:0b:9a:aa:7c: 55:1e:50:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMjIyMjAyNTM0WhcNMjUxMjI5MjAyNTM0WjAYMRYwFAYD VQQDDA02OTQ5YTkzZi05ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c3dm6aiWUl0gWIuxpm8P8xxB8Vegb5QrcLvk6vB/Wv03fNS1QpiQf8+c27v 7LJg/cThgbqaxsj27HGqE2/UH8KpxoqvcSrjt9/Yu9d7El1u8fEG0jtLT3WHJRol bOdcjekCrpC7QpddwKrbu76aAU4LD6gAafDNC/Fniq4zyz+DC6jX9ovj8JkXLFg7 AGlysLHy7yEU/U+TT+Virfjv9T9/G/VAgXdQS009pw1B/vn0U6eFclsYkDkdjMis Acfb8C8You4x57GGYBiivXpYl95feveH8nu7LaveiJhitYKL96ClqUVzyZkTUEQq 1AmxJnKPooNodqO/IVRPcvfnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvjLtrZ iUNH1cSo23/oXNp+Zt2HMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxYLjIkQeuCehoOkulywnSZuzfHzbDVZKZLQ7FBbB8ryY0Ud8brYL8 x1joESnVsu7gop0calQlSG7t8y7c/myCKjgkrBbF4zi8ekdNCLlMy1g/ILW3OVn7 xbn0KtivbuegrHV8rvDO5yIVBaDULlJoZEXqvJs5SMJaXYgOcYIJbE86qnLNrE7Z DSzi0YkdTZfOlfJdDlsyD7n88O0JGTcSCLYvbCjO1uC+oIdZ7LY9RHb+EYd9GxMs e7TiGxVrFhz+p/v+18W6xYZ8L3DtEfpW7+Y0qy5znv207hI6y8aN6iPILwzH6wqO LfCS+W/Z5odzT/37reQpwguaqnxVHlAK -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:30 2025 by rpki-client