This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft File: 4-ABdWjohx9OiHmxBiqu1yw08jo.mft (raw, json) Hash identifier: G2dUO7LbNHljHvJ3+WULQWRggKO6/QtmkcQWvH3iU9I= Subject key identifier: 0A:F7:F5:86:46:09:58:F4:0C:3E:04:44:3F:81:72:A1:C4:DC:A2:0C Authority key identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A Certificate issuer: /CN=A91A05BF/serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft Manifest number: 19 Signing time: Fri 05 Dec 2025 05:41:57 +0000 Manifest this update: Fri 05 Dec 2025 05:41:56 +0000 Manifest next update: Fri 12 Dec 2025 05:41:56 +0000 Files and hashes: 1: 4-ABdWjohx9OiHmxBiqu1yw08jo.crl (hash: +3INDfDZaaCMYAzna+cxnQEqDElpsD/A5hUAAnPfYXg=) 2: 5FC8CD04B3B511F0BF1A0B54C4F9AE02.roa (hash: NcL+J1oXA1oh3xoPJMoQRrIZs5vXjNVk2410Ro/0xzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05BF, serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Validity Not Before: Dec 5 05:41:56 2025 GMT Not After : Dec 12 05:41:56 2025 GMT Subject: CN=693270a4-e154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:b0:27:bd:a6:f8:58:7a:64:50:14:8f:0d: b6:f7:e5:ec:b1:ca:28:cd:3b:28:d6:ae:01:6e:72: 81:e4:1f:f2:74:9d:3b:cc:1d:c5:cf:6f:72:46:24: 52:42:7e:c3:55:4f:1e:24:48:d2:7e:50:16:12:94: 09:03:aa:62:eb:60:79:e5:ed:17:60:e9:c9:79:06: e8:28:6e:e2:23:9f:ca:5e:06:cf:d2:2d:21:2f:76: 83:bb:b8:2a:85:90:cf:9e:09:a8:8f:6c:0f:c7:3e: 4b:63:1b:f3:1e:c9:51:55:93:b6:c6:f9:ce:1a:cd: 07:db:8e:9f:7f:17:71:59:16:a1:35:c2:b5:13:3c: ae:47:f3:7d:b8:28:a6:9b:a8:fa:e6:09:77:8c:f5: ff:bc:91:29:7d:c7:39:f4:85:e4:63:1d:13:b2:d4: 24:c1:d7:5c:07:a6:6b:b2:f4:08:7a:ef:56:ed:3b: d7:01:1b:0b:23:b0:2e:09:82:d7:57:be:8d:8b:24: 50:e5:60:9e:da:14:9c:5c:1c:3c:09:91:39:f0:95: 7e:71:9e:e8:31:df:e0:bc:77:1a:ab:74:89:09:2a: c1:e0:a8:3d:10:2e:90:65:5c:dc:77:ac:9d:82:68: 1f:b7:fb:cc:71:c6:00:53:b4:08:1b:81:50:1e:30: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:F5:86:46:09:58:F4:0C:3E:04:44:3F:81:72:A1:C4:DC:A2:0C X509v3 Authority Key Identifier: keyid:E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e3:27:5a:8e:92:ed:8f:1c:aa:48:62:b0:db:a5:1f:21:09: d6:cc:13:3b:68:3b:6c:2d:66:aa:74:3d:47:d6:1c:f0:23:0f: b3:3e:13:cc:31:9a:51:57:26:48:08:e5:8b:c6:be:d4:fb:03: 65:95:dc:73:88:a3:48:f1:1f:23:b4:c7:f0:29:3c:d1:bd:33: 95:b7:b9:d7:4b:88:87:4b:06:d3:0c:68:9d:34:08:b3:0a:ef: 13:13:e2:49:e0:c6:99:a7:bb:36:6d:78:0f:fb:72:c7:1d:39: e6:c5:74:1d:4a:ab:3f:96:40:a7:ed:ca:32:18:b4:6f:c2:e1: f9:cf:fe:a9:f6:b4:6f:72:70:cc:cd:1f:3d:42:58:22:30:13: 00:0e:62:1b:b9:fe:94:72:d1:6f:6d:9d:a7:1b:3d:07:d9:ae: ce:c8:97:d8:1b:de:06:9a:77:ad:05:65:f7:96:aa:72:dd:37: f4:bc:1d:4e:7c:21:c2:d3:3d:b7:72:27:6a:27:f9:a0:3a:88: e7:84:c4:54:e7:27:1f:87:79:71:4b:74:f0:2f:50:ff:c4:63: 7c:da:e2:38:55:07:00:b0:9d:ac:b1:fa:eb:b9:0a:41:16:f0: 61:04:48:6d:8b:b1:91:9a:60:05:59:a5:13:b6:57:5b:22:db: eb:6e:66:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVCRjExMC8GA1UEBRMoRTNFMDAxNzU2OEU4ODcxRjRFODg3OUIxMDYyQUFFRDcy QzM0RjIzQTAeFw0yNTEyMDUwNTQxNTZaFw0yNTEyMTIwNTQxNTZaMBgxFjAUBgNV BAMTDTY5MzI3MGE0LWUxNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjpbAnvab4WHpkUBSPDbb35eyxyijNOyjWrgFucoHkH/J0nTvMHcXPb3JGJFJC fsNVTx4kSNJ+UBYSlAkDqmLrYHnl7Rdg6cl5BugobuIjn8peBs/SLSEvdoO7uCqF kM+eCaiPbA/HPktjG/MeyVFVk7bG+c4azQfbjp9/F3FZFqE1wrUTPK5H8324KKab qPrmCXeM9f+8kSl9xzn0heRjHROy1CTB11wHpmuy9Ah671btO9cBGwsjsC4JgtdX vo2LJFDlYJ7aFJxcHDwJkTnwlX5xnugx3+C8dxqrdIkJKsHgqD0QLpBlXNx3rJ2C aB+3+8xxxgBTtAgbgVAeMJk7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCvf1hkYJ WPQMPgREP4FyocTcogwwHwYDVR0jBBgwFoAU4+ABdWjohx9OiHmxBiqu1yw08jow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUJGLzE4MTM2RDhBQjNC NDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pvaHg5T2lIbXhCaXF1MXl3MDhq by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNC1BQmRXam9oeDlPaUhteEJpcXUxeXcwOGpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUJGLzE4MTM2RDhBQjNCNDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pvaHg5 T2lIbXhCaXF1MXl3MDhqby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7jJ1qOku2PHKpIYrDbpR8hCdbMEztoO2wtZqp0PUfWHPAjD7M+E8wx mlFXJkgI5YvGvtT7A2WV3HOIo0jxHyO0x/ApPNG9M5W3uddLiIdLBtMMaJ00CLMK 7xMT4kngxpmnuzZteA/7cscdOebFdB1Kqz+WQKftyjIYtG/C4fnP/qn2tG9ycMzN Hz1CWCIwEwAOYhu5/pRy0W9tnacbPQfZrs7Il9gb3gaad60FZfeWqnLdN/S8HU58 IcLTPbdyJ2on+aA6iOeExFTnJx+HeXFLdPAvUP/EY3za4jhVBwCwnayx+uu5CkEW 8GEESG2LsZGaYAVZpRO2V1si2+tuZqA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:00:24 2025 by rpki-client