This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: XBPGng/UJyAVj6otkGwUFmqg7tXgalfqVfl8eVQs2ks= Subject key identifier: 57:81:AF:F7:F4:2B:30:7A:20:7E:1C:61:05:8D:65:04:2C:D9:D4:2B Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1F40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1F39 Signing time: Sat 06 Dec 2025 15:43:49 +0000 Manifest this update: Sat 06 Dec 2025 15:43:49 +0000 Manifest next update: Sat 13 Dec 2025 15:43:49 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: jZQ3JErLuqnR3OT6AyUww8QisDE8bU/4qgadUSrsQ3g=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8000 (0x1f40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Dec 6 15:43:49 2025 GMT Not After : Dec 13 15:43:49 2025 GMT Subject: CN=69344f35-5bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:71:be:d7:8e:8a:a3:04:16:ce:15:e7:ac: bf:6a:c6:a9:86:df:3a:95:84:01:96:73:3c:b3:59: 8c:e0:cb:bf:39:36:a6:11:dc:08:32:42:62:a9:b9: 0a:33:70:68:00:8a:3d:61:9f:c7:af:b3:4c:24:70: f9:d0:37:a9:7d:ef:a1:6c:36:15:3b:0c:ff:17:74: bf:a0:3f:9f:67:02:3e:f7:14:2f:c0:4f:e5:e2:54: 8b:00:ff:ba:26:07:be:90:65:24:95:fb:a4:6e:e0: 8c:bf:58:0d:80:c4:55:7a:94:b9:e4:93:b3:1a:71: 1c:67:c7:07:7c:b1:c1:12:4e:c4:08:11:71:58:63: f6:5f:0e:5a:e2:3b:85:b9:10:a7:4c:b0:2f:fa:2c: 62:ec:a6:7e:91:13:1c:47:24:90:1d:8f:60:28:94: 2d:72:63:23:c5:52:8a:17:e7:52:e7:c0:bd:a8:eb: 66:76:ad:be:e1:94:a4:9f:ad:0d:07:1c:08:6a:5b: d7:4b:b5:0b:d3:0a:d7:b8:b9:f9:02:15:9e:d7:e7: 91:26:26:84:94:e7:5d:b9:fa:58:31:40:48:b0:15: 98:8f:ee:59:a4:2e:92:50:f2:a4:97:9c:ca:8c:c5: 41:2e:ac:5c:b3:59:60:b9:b3:fd:c8:2c:c1:b9:5f: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:81:AF:F7:F4:2B:30:7A:20:7E:1C:61:05:8D:65:04:2C:D9:D4:2B X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:41:ff:a1:a2:46:12:b8:5a:a5:c3:10:c1:97:c5:7b:e7: 0f:54:46:c9:6e:53:6e:59:48:35:7e:1b:c3:d6:63:f1:95:7d: 75:a8:fc:3f:45:3d:3c:e7:bc:93:34:bb:98:4b:3b:d1:93:8b: 6a:a4:07:0c:df:d5:40:2c:e8:95:5a:e1:f3:08:2a:f7:fe:41: c9:86:fc:e1:cd:5d:9d:f4:78:13:2c:b0:e8:dd:46:7f:dc:0e: 40:a0:40:10:3e:74:66:1b:4a:0b:cf:89:3b:81:22:d9:94:f6: 52:c5:8a:09:91:08:b1:1e:91:d2:1b:b4:30:33:9e:2f:ac:88: 7d:81:eb:74:fe:68:90:55:2e:d5:63:11:bc:d6:08:cd:60:85: 21:47:d0:6d:06:d1:24:6a:b6:d5:16:d1:5b:e9:5b:be:09:25: 63:08:ee:bd:1d:ef:4c:18:35:7c:d7:b7:94:5b:aa:92:46:dd: 80:aa:fc:fd:f4:8b:90:71:38:32:d4:d8:73:b1:5d:90:c4:36: 40:1b:4d:6f:15:3f:68:c1:ba:d6:bf:82:52:11:47:80:2b:64: a6:67:23:2e:cf:f0:7b:a9:57:2e:d4:05:7d:7b:b1:f9:b8:0c: ea:07:05:db:e5:c9:c7:37:1a:ff:ff:a3:d5:d5:88:e9:ad:6f: fd:d6:78:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUxMjA2MTU0MzQ5WhcNMjUxMjEzMTU0MzQ5WjAYMRYwFAYD VQQDEw02OTM0NGYzNS01YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+JxvteOiqMEFs4V56y/asapht86lYQBlnM8s1mM4Mu/OTamEdwIMkJiqbkK M3BoAIo9YZ/Hr7NMJHD50Depfe+hbDYVOwz/F3S/oD+fZwI+9xQvwE/l4lSLAP+6 Jge+kGUklfukbuCMv1gNgMRVepS55JOzGnEcZ8cHfLHBEk7ECBFxWGP2Xw5a4juF uRCnTLAv+ixi7KZ+kRMcRySQHY9gKJQtcmMjxVKKF+dS58C9qOtmdq2+4ZSkn60N BxwIalvXS7UL0wrXuLn5AhWe1+eRJiaElOddufpYMUBIsBWYj+5ZpC6SUPKkl5zK jMVBLqxcs1lgubP9yCzBuV8KuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeBr/f0 KzB6IH4cYQWNZQQs2dQrMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXzkH/oaJGErhapcMQwZfFe+cPVEbJblNuWUg1fhvD1mPxlX11qPw/ RT0857yTNLuYSzvRk4tqpAcM39VALOiVWuHzCCr3/kHJhvzhzV2d9HgTLLDo3UZ/ 3A5AoEAQPnRmG0oLz4k7gSLZlPZSxYoJkQixHpHSG7QwM54vrIh9get0/miQVS7V YxG81gjNYIUhR9BtBtEkarbVFtFb6Vu+CSVjCO69He9MGDV817eUW6qSRt2Aqvz9 9IuQcTgy1NhzsV2QxDZAG01vFT9owbrWv4JSEUeAK2SmZyMuz/B7qVcu1AV9e7H5 uAzqBwXb5cnHNxr//6PV1YjprW/91nj9 -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:02 2025 by rpki-client