This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: fkQLmbDoh4i3ZxKyTwwgjo18N1+PPPxtdo9VGIP/kzY= Subject key identifier: 88:C8:73:71:F0:20:AC:EF:5F:E2:5C:00:E4:F2:63:37:8C:F9:AC:72 Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 4C Signing time: Fri 05 Dec 2025 05:10:55 +0000 Manifest this update: Fri 05 Dec 2025 05:10:55 +0000 Manifest next update: Fri 12 Dec 2025 05:10:55 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: mMisjDP3jynJU7Iwq6Q0Rx7zftd2ckhp27rMxzAIAnA=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Dec 5 05:10:55 2025 GMT Not After : Dec 12 05:10:55 2025 GMT Subject: CN=6932695f-85d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:0a:30:8d:18:de:47:a3:4e:05:f0:c0:41: 18:25:56:32:8a:53:e1:78:2f:c3:39:ef:d4:4d:90: 1e:68:b4:72:08:1e:84:a3:33:81:85:28:fa:ed:f5: 2f:83:e1:7c:e5:8d:61:22:11:17:e6:02:d2:77:13: cb:91:47:b0:74:ad:a0:5d:c9:76:9d:33:c9:a3:c4: 2e:3c:96:8d:24:49:9f:e5:f8:93:ef:19:f4:60:c0: e3:64:9d:b4:57:57:07:e2:0e:6b:a0:5c:ab:73:96: 7b:86:63:86:1b:01:19:63:35:00:d6:21:12:2c:8e: b1:5d:cf:3e:72:c3:28:9d:a8:01:6b:65:99:19:d0: 85:b9:19:01:5d:13:d3:e7:63:59:f2:be:70:bb:56: 97:a0:78:82:36:ff:7f:97:94:b3:7a:d0:26:13:d7: ef:23:70:31:7a:39:00:e7:35:bf:18:25:a4:b6:c0: cb:56:cc:5a:20:a6:27:72:8c:3b:80:89:b1:5f:04: 11:20:b6:cb:66:17:91:40:bc:c6:d7:60:59:be:37: 78:d7:80:54:ce:b1:bc:33:eb:33:a9:f7:4b:75:de: a4:a1:a4:b3:d1:a7:cb:31:3d:54:9a:44:3b:07:b5: 46:b1:34:85:62:ab:4e:dc:72:22:da:7b:11:2c:eb: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:73:71:F0:20:AC:EF:5F:E2:5C:00:E4:F2:63:37:8C:F9:AC:72 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:66:ba:31:88:9d:fd:d4:a0:7f:b9:b6:29:3a:a2:69:9e:17: 34:b9:04:e6:9c:55:0b:41:80:e4:b6:ed:9b:47:c8:d4:1b:5c: 89:1b:46:ae:a3:b3:87:2f:3a:ed:86:a4:ad:cc:8e:40:d3:dc: a7:e0:3f:33:79:ff:d9:e9:b9:98:dd:5d:57:7f:3d:81:e1:54: f2:a3:df:57:45:a3:c1:ab:6b:76:45:6e:8d:76:c1:6a:86:25: da:2a:c3:9d:0d:d9:bf:bb:42:56:5e:24:e3:21:1f:8b:de:9c: 16:8e:8e:80:bf:3f:f7:86:7d:fe:c3:bf:cb:3c:9e:e9:59:8b: 9e:d5:93:a1:03:ff:5f:23:73:85:70:6d:fb:a0:ce:e9:9f:43: 9c:ba:43:63:4d:d0:b6:08:bb:8c:9c:b6:98:c3:9f:64:23:75: a8:07:5d:2e:e5:bb:35:e3:b3:50:1c:38:26:26:df:96:44:eb: b0:37:0a:70:98:6a:85:5c:25:02:7d:81:4e:d9:cb:27:84:bb: 6f:88:1c:e1:56:4c:4d:cf:95:25:12:69:ab:4f:d7:0d:95:b6: 51:76:e9:8a:e5:53:6f:0e:66:ee:9e:65:42:f4:e2:44:88:0f: a1:af:1e:12:ff:4e:4d:bc:c8:2b:3b:56:18:24:3f:ae:8c:33: 1f:42:39:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTEyMDUwNTEwNTVaFw0yNTEyMTIwNTEwNTVaMBgxFjAUBgNV BAMTDTY5MzI2OTVmLTg1ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwJwowjRjeR6NOBfDAQRglVjKKU+F4L8M579RNkB5otHIIHoSjM4GFKPrt9S+D 4XzljWEiERfmAtJ3E8uRR7B0raBdyXadM8mjxC48lo0kSZ/l+JPvGfRgwONknbRX VwfiDmugXKtzlnuGY4YbARljNQDWIRIsjrFdzz5ywyidqAFrZZkZ0IW5GQFdE9Pn Y1nyvnC7VpegeII2/3+XlLN60CYT1+8jcDF6OQDnNb8YJaS2wMtWzFogpidyjDuA ibFfBBEgtstmF5FAvMbXYFm+N3jXgFTOsbwz6zOp90t13qShpLPRp8sxPVSaRDsH tUaxNIViq07cciLaexEs64mNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiMhzcfAg rO9f4lwA5PJjN4z5rHIwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALlmujGInf3UoH+5tik6ommeFzS5BOacVQtBgOS27ZtHyNQbXIkbRq6j s4cvOu2GpK3MjkDT3KfgPzN5/9npuZjdXVd/PYHhVPKj31dFo8Gra3ZFbo12wWqG Jdoqw50N2b+7QlZeJOMhH4venBaOjoC/P/eGff7Dv8s8nulZi57Vk6ED/18jc4Vw bfugzumfQ5y6Q2NN0LYIu4yctpjDn2QjdagHXS7luzXjs1AcOCYm35ZE67A3CnCY aoVcJQJ9gU7ZyyeEu2+IHOFWTE3PlSUSaatP1w2VtlF26YrlU28OZu6eZUL04kSI D6GvHhL/Tk28yCs7VhgkP66MMx9CORo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:04 2025 by rpki-client