This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json) Hash identifier: ja3ZyOHo1LqujUlbeFXfGfMitnsE5PbH79ft/5zItBc= Subject key identifier: 6B:FF:22:84:AD:49:55:7F:8A:0C:92:03:5A:43:92:E5:96:8A:F1:6F Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft Manifest number: 0A Signing time: Fri 05 Dec 2025 05:51:20 +0000 Manifest this update: Fri 05 Dec 2025 05:51:20 +0000 Manifest next update: Fri 12 Dec 2025 05:51:20 +0000 Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: GMhK+URtBltmqoB4MaXGV6HctJ4zOU/3anxaByLgNuo=) 2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: fOXOHVjQ9RI3kOSpNULXLjaNneDbA6Y3Pouw4CS3E00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Validity Not Before: Dec 5 05:51:20 2025 GMT Not After : Dec 12 05:51:20 2025 GMT Subject: CN=693272d8-b397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:fa:34:67:87:62:a3:38:d9:1e:45:e0:ad: 0f:03:6a:13:45:8d:3d:b9:11:90:c3:ed:2f:9d:be: 07:eb:2c:75:2c:6e:06:36:f1:cc:a0:ec:31:04:64: 45:26:a2:9d:f4:e3:9d:19:41:08:22:91:ea:0e:2a: fb:da:a4:b7:90:65:bf:b5:76:91:54:14:dd:1e:b6: 12:f1:44:ad:69:b7:d1:cc:46:a6:db:da:f6:7e:ab: 4e:ae:fb:ef:07:20:30:2d:7b:7d:12:8a:d1:af:2b: 7a:04:9b:58:03:6c:db:85:14:e1:ef:45:11:c8:7a: 97:94:ba:85:a7:a9:1d:b2:52:23:d2:21:72:47:d1: b5:de:c1:ce:bc:71:3c:64:f6:a8:23:9f:a3:3a:8d: ac:f7:23:1a:85:15:92:7c:92:07:2e:5e:af:19:2f: 9f:fd:c2:f9:e2:b7:42:10:ff:fc:08:08:67:4d:91: 05:87:5b:f4:e8:a3:e5:2b:9f:37:0b:e9:51:b9:b4: b9:f7:79:ab:14:79:5f:d7:97:ba:9a:61:6c:67:06: 66:9e:d8:68:7d:e1:27:17:13:89:05:8e:84:25:89: 09:72:cb:78:34:d7:1f:f0:77:d8:d0:1b:76:e9:df: 6d:d5:7a:09:36:c8:d3:84:95:36:f2:73:b3:5d:9f: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FF:22:84:AD:49:55:7F:8A:0C:92:03:5A:43:92:E5:96:8A:F1:6F X509v3 Authority Key Identifier: keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ab:cf:91:5f:71:dd:02:a8:a1:47:cb:53:b9:3d:a7:c7:c3: c3:32:18:fb:42:5e:50:c7:33:8a:6d:fc:e2:7c:2b:dc:3a:46: df:2f:2b:a4:05:ed:ea:c3:3c:0f:11:5d:be:e9:a7:76:49:45: 14:8f:43:b1:6e:34:10:bb:f5:07:06:ea:38:9a:b3:a7:66:cf: be:3c:f9:7c:31:25:93:22:2f:e9:04:20:e2:8a:8a:dd:02:a7: d0:fc:22:a0:6c:d3:3e:78:0d:8a:07:ce:ec:b6:7c:ca:ef:e0: 32:7a:39:12:8c:76:b7:01:2d:57:b7:4b:2a:0c:da:5f:7b:0b: a4:63:8a:1c:8e:3e:67:1d:a1:c2:39:35:1e:0b:7b:09:17:b7: 58:f0:f3:d6:cf:70:01:0b:bc:7c:cd:03:47:9f:c3:7a:cf:24: 58:65:20:f7:34:d0:2e:95:b8:db:90:c9:55:48:6a:aa:3c:7d: 25:e2:93:0b:7e:27:0f:1a:aa:80:be:6c:22:c3:8d:ab:13:c0: e1:aa:7e:92:43:df:d3:61:fd:eb:04:d6:94:e1:0e:6f:84:26: 70:2c:6d:39:5a:19:8e:af:71:81:fb:af:dd:09:1f:b4:ea:bd: c4:13:3a:84:cd:83:5e:43:33:04:8c:8a:60:85:58:df:74:70: ba:7e:d3:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OThCMTExMC8GA1UEBRMoRTMyNjVGNDExRENCQjBGMTE3NDg1MjM4NkU4MTdGRTI3 OEQyRjkwRTAeFw0yNTEyMDUwNTUxMjBaFw0yNTEyMTIwNTUxMjBaMBgxFjAUBgNV BAMTDTY5MzI3MmQ4LWIzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpefo0Z4diozjZHkXgrQ8DahNFjT25EZDD7S+dvgfrLHUsbgY28cyg7DEEZEUm op30450ZQQgikeoOKvvapLeQZb+1dpFUFN0ethLxRK1pt9HMRqbb2vZ+q06u++8H IDAte30SitGvK3oEm1gDbNuFFOHvRRHIepeUuoWnqR2yUiPSIXJH0bXewc68cTxk 9qgjn6M6jaz3IxqFFZJ8kgcuXq8ZL5/9wvnit0IQ//wICGdNkQWHW/Too+UrnzcL 6VG5tLn3easUeV/Xl7qaYWxnBmae2Gh94ScXE4kFjoQliQlyy3g01x/wd9jQG3bp 323Vegk2yNOElTbyc7Ndn/tFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa/8ihK1J VX+KDJIDWkOS5ZaK8W8wHwYDVR0jBBgwFoAU4yZfQR3LsPEXSFI4boF/4njS+Q4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OEIxLzcyMDI3NkIwQzY2 NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BFWFNGSTRib0ZfNG5qUy1R NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHlaZlFSM0xzUEVYU0ZJNGJvRl80bmpTLVE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OEIxLzcyMDI3NkIwQzY2NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BF WFNGSTRib0ZfNG5qUy1RNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGrz5Ffcd0CqKFHy1O5PafHw8MyGPtCXlDHM4pt/OJ8K9w6Rt8vK6QF 7erDPA8RXb7pp3ZJRRSPQ7FuNBC79QcG6jias6dmz748+XwxJZMiL+kEIOKKit0C p9D8IqBs0z54DYoHzuy2fMrv4DJ6ORKMdrcBLVe3SyoM2l97C6RjihyOPmcdocI5 NR4LewkXt1jw89bPcAELvHzNA0efw3rPJFhlIPc00C6VuNuQyVVIaqo8fSXikwt+ Jw8aqoC+bCLDjasTwOGqfpJD39Nh/esE1pThDm+EJnAsbTlaGY6vcYH7r90JH7Tq vcQTOoTNg15DMwSMimCFWN90cLp+01s= -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:28 2025 by rpki-client