This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: FUtPZqV0YCnNR2kNGGZje2qLWV5SgRpURXwGPtXMz0k= Subject key identifier: 04:90:7E:46:78:09:52:54:A3:C8:87:81:22:80:EC:42:84:52:92:A3 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 0150 Signing time: Fri 19 Dec 2025 03:28:11 +0000 Manifest this update: Fri 19 Dec 2025 03:28:10 +0000 Manifest next update: Fri 26 Dec 2025 03:28:10 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: at3ptq6fjmEbXlalyKzx1+LKoQEG6/ehYgak1QC/nF0=) 2: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: MNv7Tv9JE/4kyK1NNSNq4H6AovhKI1wlDUP/bnL+AHo=) 3: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: w52d9OuktB7yo9yKgF19teLaRAwVoNJ/C/T16AevquE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Dec 19 03:28:10 2025 GMT Not After : Dec 26 03:28:10 2025 GMT Subject: CN=6944c64a-ee07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:da:67:3d:69:b5:b9:58:2c:53:37:71:19:a4: 90:d8:b1:35:93:b5:80:23:67:97:aa:53:f3:6b:7f: 3d:8e:39:da:bb:c8:9d:fc:8b:a3:bc:4b:9b:6f:fb: 80:14:79:ac:d4:86:bc:cc:85:87:33:a2:48:99:54: 71:f2:54:c7:cb:59:2f:b0:16:26:fe:60:59:35:6a: 6d:d8:2e:96:82:78:d6:bb:f6:4b:75:e8:74:94:f5: df:64:92:ab:3a:40:2d:78:af:ea:70:e8:0c:15:6c: e5:fb:df:c9:78:5e:61:d7:5d:1b:49:fa:aa:15:ae: 66:4e:d2:c1:6c:0a:ef:e5:df:bd:bd:64:16:d8:2f: cd:b7:55:68:a0:49:a4:57:12:28:fd:b1:7b:5b:c8: c4:09:2e:27:48:1d:2c:20:2e:00:4c:a7:7d:b1:b0: 0d:5b:fa:84:e8:09:2a:39:b1:d4:17:2a:98:7f:ce: 9b:cf:6c:2c:74:99:7d:55:32:92:00:dd:2b:39:a9: eb:35:9c:5d:b8:08:c7:73:63:19:8f:c9:72:c1:63: 15:86:97:f3:a7:b2:a1:55:ff:d2:ba:78:47:3d:e9: 90:0b:a5:ed:2f:c8:4e:49:9e:da:41:72:b5:44:85: 63:01:25:bf:7b:93:51:62:78:55:3e:a5:3d:a6:c1: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:90:7E:46:78:09:52:54:A3:C8:87:81:22:80:EC:42:84:52:92:A3 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:73:44:8c:e9:7f:51:72:ea:27:84:bf:04:2d:ba:98:46:08: 8b:76:dd:ad:69:54:3b:8f:7e:a0:ea:d5:cf:97:68:c5:7c:75: e2:17:47:a5:52:9d:59:a8:f8:22:1d:c4:64:66:56:2e:c5:7a: 1d:64:f3:8c:ce:e0:d6:35:5e:d6:54:f6:92:2f:0a:83:c6:91: 70:de:26:30:9b:76:8c:2e:89:73:af:38:b6:aa:e7:ef:6d:02: d5:35:ae:b8:6b:a2:c3:ec:a8:e2:bb:07:77:79:c6:50:50:ad: e2:94:9e:fc:7d:4b:17:9a:6b:c5:31:eb:b4:6a:0e:d6:3e:8f: 95:22:2a:8a:22:ee:d0:64:70:43:37:77:ba:53:ca:f3:c1:50: e8:d4:62:88:20:c9:5f:1f:22:bd:3f:e4:b2:c9:03:3e:80:41: 48:59:e0:5d:b7:90:ad:04:dd:ff:39:b0:ba:d2:75:d1:03:f6: 53:3e:e1:06:b9:69:58:b1:4c:c1:c9:b4:c9:5d:39:a3:00:59: 3b:b6:21:fe:0d:24:e3:1b:e1:5e:12:f3:dd:61:48:d9:44:f9: 22:bc:f9:b2:a0:3f:0f:b6:b8:97:99:cb:c4:34:5c:66:03:87: aa:77:86:c2:f5:ac:a0:3e:44:3c:fd:6d:df:73:8f:27:2a:88: 95:14:5c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUxMjE5MDMyODEwWhcNMjUxMjI2MDMyODEwWjAYMRYwFAYD VQQDDA02OTQ0YzY0YS1lZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dpnPWm1uVgsUzdxGaSQ2LE1k7WAI2eXqlPza389jjnau8id/IujvEubb/uA FHms1Ia8zIWHM6JImVRx8lTHy1kvsBYm/mBZNWpt2C6WgnjWu/ZLdeh0lPXfZJKr OkAteK/qcOgMFWzl+9/JeF5h110bSfqqFa5mTtLBbArv5d+9vWQW2C/Nt1VooEmk VxIo/bF7W8jECS4nSB0sIC4ATKd9sbANW/qE6AkqObHUFyqYf86bz2wsdJl9VTKS AN0rOanrNZxduAjHc2MZj8lywWMVhpfzp7KhVf/SunhHPemQC6XtL8hOSZ7aQXK1 RIVjASW/e5NRYnhVPqU9psFhKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASQfkZ4 CVJUo8iHgSKA7EKEUpKjMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbc0SM6X9RcuonhL8ELbqYRgiLdt2taVQ7j36g6tXPl2jFfHXiF0el Up1ZqPgiHcRkZlYuxXodZPOMzuDWNV7WVPaSLwqDxpFw3iYwm3aMLolzrzi2qufv bQLVNa64a6LD7Kjiuwd3ecZQUK3ilJ78fUsXmmvFMeu0ag7WPo+VIiqKIu7QZHBD N3e6U8rzwVDo1GKIIMlfHyK9P+SyyQM+gEFIWeBdt5CtBN3/ObC60nXRA/ZTPuEG uWlYsUzBybTJXTmjAFk7tiH+DSTjG+FeEvPdYUjZRPkivPmyoD8PtriXmcvENFxm A4eqd4bC9aygPkQ8/W3fc48nKoiVFFw9 -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:51 2025 by rpki-client