This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: 2JZPfiW4us+FkvwLZ4uqwQPZD7J9MggQHN/i3qxNFbc= Subject key identifier: 84:3C:14:53:09:7C:AF:E1:59:B7:F3:49:5B:EE:77:A5:1E:0D:47:5C Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 02DC Signing time: Thu 04 Dec 2025 23:42:47 +0000 Manifest this update: Thu 04 Dec 2025 23:42:47 +0000 Manifest next update: Thu 11 Dec 2025 23:42:47 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: W/9V0SZ39Ic0LssmnKjNO1Tbfx62KMeQJWrMiXT+FZU=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: F2S0rE1Y9B4FArTQsvdfbYCQLr8rncdJXIVpg1O66R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Dec 4 23:42:47 2025 GMT Not After : Dec 11 23:42:47 2025 GMT Subject: CN=69321c77-6b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:3a:46:85:40:c6:40:a7:92:d6:cf:06:83: b3:94:ea:1b:14:cc:56:3d:4a:bd:56:e2:c5:04:65: 26:5b:b8:d6:0a:c0:de:35:43:ba:bf:9b:ec:c9:c3: df:1d:3a:88:35:21:a5:49:bc:83:0a:c1:17:4c:78: 2b:99:d3:5b:cb:23:12:20:e3:35:21:e5:b4:e6:e6: 15:23:1b:0b:cf:59:24:d4:95:c8:c3:f2:ce:2f:77: b3:a6:88:bb:3d:6f:4f:e2:9a:f2:7b:e4:6b:00:59: c9:c5:70:6c:97:07:17:76:e9:6c:ed:b6:6c:32:4e: 25:1f:cc:70:32:99:e7:31:92:3f:90:4d:3b:10:f6: 37:7a:df:f4:65:fb:cd:7f:34:fb:5d:82:d3:16:aa: 7e:10:1a:03:ff:62:64:0f:0a:ca:47:0a:a3:48:0a: 25:ca:a2:d1:27:48:9b:c2:da:5d:54:cb:56:aa:e5: a1:26:fc:59:a0:e0:70:d3:84:93:09:f3:a7:cc:a2: 3a:21:cf:7f:9d:4f:2b:b1:a5:4d:fb:ad:71:5e:16: 86:9c:83:c0:0a:d9:31:0c:84:8f:81:8c:00:74:71: 1f:d2:3d:53:a8:57:08:cb:3c:23:a3:8e:aa:ca:a3: 3e:07:3a:55:f3:8f:39:d5:b0:a5:89:48:6b:bc:d1: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3C:14:53:09:7C:AF:E1:59:B7:F3:49:5B:EE:77:A5:1E:0D:47:5C X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ef:74:9b:d6:78:8e:c5:6f:96:b2:fa:8a:24:a4:af:84:0c: 1d:50:b3:49:0a:51:5c:86:87:ff:16:c0:b6:fe:6e:bc:00:70: 4c:cd:72:4b:10:8c:ce:45:4a:b3:55:05:be:9c:8d:92:1f:fe: 96:9e:29:5d:d2:0d:3c:aa:66:9a:71:c8:8c:6c:84:0d:5b:a6: 68:fa:e1:f4:fd:96:cb:68:1b:2c:74:fa:1e:c9:ad:38:c4:98: c4:84:8a:fb:74:35:ef:f3:63:13:5f:cf:76:fb:b0:06:0c:1a: 4f:73:39:13:78:8c:b5:32:2a:5c:1d:c6:aa:41:93:a7:42:3c: d0:37:26:e9:0e:4e:80:e7:8a:d2:b1:85:03:83:1d:73:3d:f8: 37:99:73:89:a5:5e:15:59:56:39:0d:4b:02:6e:f2:00:8f:29: 8e:4d:f9:89:72:3f:a8:65:65:1b:ec:89:4b:41:25:d7:f1:32: 2f:4c:92:2c:8b:e0:a7:70:8e:34:eb:7c:4e:1e:3d:66:4b:eb: d2:cf:60:9a:31:e6:36:3b:8d:3a:53:14:0a:82:c8:0b:a9:03: 21:bf:00:ad:a0:04:dc:5d:ce:3a:1f:7e:8a:9c:26:da:aa:bd: 56:07:2d:0d:cb:4b:88:ba:cf:03:87:33:8b:f9:54:35:36:4e: b5:d3:5a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUxMjA0MjM0MjQ3WhcNMjUxMjExMjM0MjQ3WjAYMRYwFAYD VQQDEw02OTMyMWM3Ny02Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fg6RoVAxkCnktbPBoOzlOobFMxWPUq9VuLFBGUmW7jWCsDeNUO6v5vsycPf HTqINSGlSbyDCsEXTHgrmdNbyyMSIOM1IeW05uYVIxsLz1kk1JXIw/LOL3ezpoi7 PW9P4prye+RrAFnJxXBslwcXduls7bZsMk4lH8xwMpnnMZI/kE07EPY3et/0ZfvN fzT7XYLTFqp+EBoD/2JkDwrKRwqjSAolyqLRJ0ibwtpdVMtWquWhJvxZoOBw04ST CfOnzKI6Ic9/nU8rsaVN+61xXhaGnIPACtkxDISPgYwAdHEf0j1TqFcIyzwjo46q yqM+BzpV84851bCliUhrvNGj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ8FFMJ fK/hWbfzSVvud6UeDUdcMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH73Sb1niOxW+WsvqKJKSvhAwdULNJClFchof/FsC2/m68AHBMzXJL EIzORUqzVQW+nI2SH/6Wnild0g08qmaacciMbIQNW6Zo+uH0/ZbLaBssdPoeya04 xJjEhIr7dDXv82MTX892+7AGDBpPczkTeIy1MipcHcaqQZOnQjzQNybpDk6A54rS sYUDgx1zPfg3mXOJpV4VWVY5DUsCbvIAjymOTfmJcj+oZWUb7IlLQSXX8TIvTJIs i+CncI4063xOHj1mS+vSz2CaMeY2O406UxQKgsgLqQMhvwCtoATcXc46H36KnCba qr1WBy0Ny0uIus8DhzOL+VQ1Nk6101rL -----END CERTIFICATE-----Generated at Sat Dec 6 21:59:33 2025 by rpki-client