This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: 00x35SBqirVlqni2JvNxYkrHJEzydGcr4uVNTQ/UW2I= Subject key identifier: 11:50:69:15:7D:72:D1:51:07:51:41:50:36:C0:1B:F1:CB:20:2B:75 Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: 01D9 Signing time: Fri 05 Dec 2025 01:01:49 +0000 Manifest this update: Fri 05 Dec 2025 01:01:49 +0000 Manifest next update: Fri 12 Dec 2025 01:01:49 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: m77jtpQfUqZw4k2lDWrVsQNdPaeIjwe4fYoqaKMgJHw=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: Dec 5 01:01:49 2025 GMT Not After : Dec 12 01:01:49 2025 GMT Subject: CN=69322efd-d302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:bf:33:d6:fc:00:17:a7:6c:39:54:82:ee: b7:3c:f8:72:26:8e:ba:bf:eb:16:17:a4:0f:d1:cc: 61:c6:97:9b:7d:ff:dd:a3:59:27:fd:e8:af:57:4e: bd:a9:d5:40:3d:cf:a3:c5:5b:f5:99:3e:e6:e7:81: 39:37:af:cb:a3:ef:5f:72:54:21:d3:07:d8:de:83: 58:62:d3:d0:56:e1:f8:7d:d3:af:48:c8:62:33:b1: b5:5b:57:4c:b3:35:79:ab:a3:c9:4e:0a:4b:27:fd: 6b:00:fd:e5:05:c7:71:00:10:af:28:87:e5:26:4a: 59:1a:48:06:55:12:82:0d:b2:45:5c:1e:ee:55:fb: b1:1a:2f:26:67:24:78:10:2f:0e:98:69:95:a1:2b: 94:77:29:aa:c1:db:f1:18:34:af:07:6f:44:cf:e4: cd:25:de:d1:91:c9:11:77:0a:62:19:66:ee:78:29: f3:07:52:d8:1b:3f:68:c3:6f:98:91:43:c7:5d:c7: e3:dc:3b:80:b1:19:60:70:19:7f:0d:67:48:84:61: 27:61:23:a8:d6:2c:0f:de:cb:ce:60:f9:23:b3:dc: e3:35:fd:f1:b2:7d:ef:00:0c:5e:89:ba:5a:39:48: 59:9b:da:3e:bf:71:38:dc:9e:dc:7a:aa:10:eb:23: 87:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:50:69:15:7D:72:D1:51:07:51:41:50:36:C0:1B:F1:CB:20:2B:75 X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:13:1d:ab:9d:42:c7:1b:5d:dd:a6:62:53:4a:82:07:d6:0c: ea:a7:5b:5a:5a:a1:74:f4:f2:1c:02:c6:2d:92:34:f9:76:31: 91:cb:01:f1:c7:20:8d:cf:7f:fa:0e:5d:ec:5c:54:9c:04:34: c3:ba:8b:b6:db:c0:62:a5:20:9b:00:ad:28:17:a2:8d:01:be: d9:f6:c5:b9:55:f0:9a:d9:c3:ba:ab:34:32:b6:6a:75:54:67: 44:0a:1a:6c:3b:e6:d3:a5:c4:09:85:a1:47:c5:a6:f0:24:73: 59:ed:56:72:b5:b6:70:9f:83:2f:a6:0f:0a:d5:c7:17:f6:27: 12:78:07:eb:81:bf:a7:66:c2:97:68:26:15:e9:d9:ed:2b:16: a1:fa:e2:1a:61:17:a5:ef:05:a8:57:24:ab:bb:a4:6e:d4:0e: cf:15:60:c3:35:cf:0a:08:1e:77:08:81:94:93:07:06:e0:60: b1:6f:07:b6:30:7d:4f:cf:e1:b6:c9:5a:78:d6:5f:89:86:cc: e1:33:b8:54:9d:c1:23:9c:33:42:22:43:5c:ef:76:10:e0:38: 6d:d7:3f:dd:fc:5c:5a:6f:cd:64:5b:20:fd:d1:bb:d3:ef:eb: 74:f8:a2:9e:f6:2b:bc:ce:c3:ae:33:0c:4b:55:53:14:99:cd: 98:ff:08:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjUxMjA1MDEwMTQ5WhcNMjUxMjEyMDEwMTQ5WjAYMRYwFAYD VQQDEw02OTMyMmVmZC1kMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxq/M9b8ABenbDlUgu63PPhyJo66v+sWF6QP0cxhxpebff/do1kn/eivV069 qdVAPc+jxVv1mT7m54E5N6/Lo+9fclQh0wfY3oNYYtPQVuH4fdOvSMhiM7G1W1dM szV5q6PJTgpLJ/1rAP3lBcdxABCvKIflJkpZGkgGVRKCDbJFXB7uVfuxGi8mZyR4 EC8OmGmVoSuUdymqwdvxGDSvB29Ez+TNJd7RkckRdwpiGWbueCnzB1LYGz9ow2+Y kUPHXcfj3DuAsRlgcBl/DWdIhGEnYSOo1iwP3svOYPkjs9zjNf3xsn3vAAxeibpa OUhZm9o+v3E43J7ceqoQ6yOH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFQaRV9 ctFRB1FBUDbAG/HLICt1MB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Ex2rnULHG13dpmJTSoIH1gzqp1taWqF09PIcAsYtkjT5djGRywHx xyCNz3/6Dl3sXFScBDTDuou228BipSCbAK0oF6KNAb7Z9sW5VfCa2cO6qzQytmp1 VGdEChpsO+bTpcQJhaFHxabwJHNZ7VZytbZwn4Mvpg8K1ccX9icSeAfrgb+nZsKX aCYV6dntKxah+uIaYRel7wWoVySru6Ru1A7PFWDDNc8KCB53CIGUkwcG4GCxbwe2 MH1Pz+G2yVp41l+JhszhM7hUncEjnDNCIkNc73YQ4Dht1z/d/Fxab81kWyD90bvT 7+t0+KKe9iu8zsOuMwxLVVMUmc2Y/wgv -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:04 2025 by rpki-client