This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: mChoafAW92YNBgbSGRHbFIgttJZU4Rh96TnbgijIGJ8= Subject key identifier: 1E:31:66:25:20:1B:8D:47:86:EF:2B:9C:F3:CE:8B:F7:BE:6F:EE:A9 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 05 Signing time: Fri 19 Dec 2025 07:01:57 +0000 Manifest this update: Fri 19 Dec 2025 07:01:57 +0000 Manifest next update: Fri 26 Dec 2025 07:01:57 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: i+Z170BB7daDhiVZ0FF3/AyYvnaFklMUJKULrrJAsnU=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: mc23TLWcQpileDQlx1e7FDTUox4NNol25hSA6IP7+MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Dec 19 07:01:57 2025 GMT Not After : Dec 26 07:01:57 2025 GMT Subject: CN=6944f865-549e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:21:b4:8e:6c:a8:21:7d:87:66:0b:8e:79: 65:47:d6:a5:5d:7a:1a:dc:06:0c:56:36:21:fb:f5: 74:e8:c2:fe:05:e3:50:bb:51:01:43:63:f2:48:fb: 60:3a:3e:80:d5:73:19:7a:b8:61:b9:da:88:51:4e: a1:82:57:f8:f8:c7:47:6c:ed:71:85:e5:b4:8c:e3: 89:62:7a:18:91:21:93:11:cc:b8:46:55:7e:f5:92: f3:ad:54:c8:e1:ce:60:72:97:28:68:5a:6b:bf:62: 28:b4:29:27:15:d8:90:9c:16:aa:d9:58:2b:aa:04: e8:53:08:3f:a3:ae:fd:e2:8d:df:ad:dc:cd:6e:1a: a5:95:f9:0d:57:a5:e4:2e:5c:53:a2:77:6a:7f:d7: 53:cf:5e:0b:a9:e5:87:93:6a:6f:1d:78:24:98:24: e0:c8:eb:38:a5:e8:9f:b2:c0:f1:74:25:59:65:cf: 6b:92:1e:2c:83:d5:11:d1:51:a3:51:64:51:24:cb: 14:f1:ae:4d:14:e8:8d:53:b2:ba:d7:c3:20:20:e3: 58:6b:97:5d:67:07:c4:c9:1b:c0:88:31:fb:14:a1: 23:16:6f:8e:56:18:9a:d8:9c:b6:10:be:61:72:d1: 95:00:99:a0:f5:69:96:7e:2d:8a:d5:93:33:ff:36: 2b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:31:66:25:20:1B:8D:47:86:EF:2B:9C:F3:CE:8B:F7:BE:6F:EE:A9 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:44:65:a3:ce:67:fb:77:b5:c6:c6:58:6e:8f:a6:60:2f:ef: 43:64:6d:b8:85:48:94:61:6b:26:e7:84:64:c8:f6:34:be:02: 02:2e:cc:f5:38:0a:0d:97:0e:55:38:b0:c1:d9:2c:1f:9e:46: c1:1d:1b:cb:c1:1a:ea:0b:6e:fc:11:de:2e:d7:c1:5d:26:ce: 69:31:8c:c2:80:3c:e4:69:7a:36:70:1c:58:68:ad:72:6d:82: 5e:da:25:6c:44:e1:b4:4c:66:d9:5e:12:26:6b:b8:7f:ea:0d: 27:e0:af:ae:3c:f5:8f:b6:c3:1e:68:0a:11:1d:d2:a8:36:99: 41:d9:a4:0b:9b:83:5c:1a:9b:00:34:f7:df:87:b0:79:98:5d: 9d:4d:82:6f:64:56:5c:ca:0f:84:36:46:51:61:59:42:40:01: d9:81:9f:e5:95:5f:11:2a:33:63:0d:fd:64:0c:7c:b0:7f:a6: 77:7f:74:eb:0e:a4:ea:62:b7:55:8a:77:ef:41:bb:fb:98:85: 60:ed:54:41:d2:49:68:44:bf:44:05:53:18:e0:bf:49:3b:53: 36:1e:ca:eb:1b:2d:88:d2:de:69:3b:67:36:ef:fa:00:03:7c: 70:79:f5:38:c9:bc:14:b1:d2:e0:d3:da:e4:ed:c6:3e:97:96: d4:33:07:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNTEyMTkwNzAxNTdaFw0yNTEyMjYwNzAxNTdaMBgxFjAUBgNV BAMMDTY5NDRmODY1LTU0OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy/yG0jmyoIX2HZguOeWVH1qVdehrcBgxWNiH79XTowv4F41C7UQFDY/JI+2A6 PoDVcxl6uGG52ohRTqGCV/j4x0ds7XGF5bSM44liehiRIZMRzLhGVX71kvOtVMjh zmBylyhoWmu/Yii0KScV2JCcFqrZWCuqBOhTCD+jrv3ijd+t3M1uGqWV+Q1XpeQu XFOid2p/11PPXgup5YeTam8deCSYJODI6zil6J+ywPF0JVllz2uSHiyD1RHRUaNR ZFEkyxTxrk0U6I1TsrrXwyAg41hrl11nB8TJG8CIMfsUoSMWb45WGJrYnLYQvmFy 0ZUAmaD1aZZ+LYrVkzP/NisBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHjFmJSAb jUeG7yuc886L975v7qkwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFREZaPOZ/t3tcbGWG6PpmAv70NkbbiFSJRhaybnhGTI9jS+AgIuzPU4 Cg2XDlU4sMHZLB+eRsEdG8vBGuoLbvwR3i7XwV0mzmkxjMKAPORpejZwHFhorXJt gl7aJWxE4bRMZtleEiZruH/qDSfgr6489Y+2wx5oChEd0qg2mUHZpAubg1wamwA0 99+HsHmYXZ1Ngm9kVlzKD4Q2RlFhWUJAAdmBn+WVXxEqM2MN/WQMfLB/pnd/dOsO pOpit1WKd+9Bu/uYhWDtVEHSSWhEv0QFUxjgv0k7UzYeyusbLYjS3mk7Zzbv+gAD fHB59TjJvBSx0uDT2uTtxj6XltQzB0g= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:03 2025 by rpki-client