This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json) Hash identifier: CKrZdSfnJzMivxVecFoUsjSYpPYxx9EfcQYwGBukkBw= Subject key identifier: 1D:9C:0E:12:AD:65:3A:8F:C3:B8:FC:77:9D:D7:E7:41:5E:3E:23:D2 Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 27AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft Manifest number: 2759 Signing time: Sat 20 Dec 2025 15:32:11 +0000 Manifest this update: Sat 20 Dec 2025 15:32:11 +0000 Manifest next update: Sat 27 Dec 2025 15:32:11 +0000 Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: mxAQgqNw55rAnszoo97D8DBAOqqGLlQVLdE7AFgx6K0=) 2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: YRyAIa+9kqjeJON/+m339DSD36eJAdvbC6dlw8cArb0=) 3: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=) 4: 79393030926D11F0B792FC45C4F9AE02.roa (hash: LAJwoHFi1knzvwPobu0BMg/1M9+So7vYWniJ7ToNNUE=) 5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 5DmpgkEHXaDkkR9mgpZabmssGePTrFoLLGp9YTKRdHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10155 (0x27ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: Dec 20 15:32:11 2025 GMT Not After : Dec 27 15:32:11 2025 GMT Subject: CN=6946c17b-4d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:35:16:9b:03:84:e9:3c:b7:c5:03:3e:17: 97:ff:38:f4:41:43:19:2f:e4:8b:10:be:6a:b9:1e: ed:d6:90:6f:cc:84:db:e4:b7:fb:67:29:94:e3:5c: c2:b1:37:13:ff:a1:36:8a:f1:0d:e6:30:f3:0f:3d: 7a:56:3f:2c:0a:57:e0:0a:db:e2:8a:31:f6:4e:5b: 5b:e8:9c:86:30:01:84:17:bd:77:8f:e7:55:16:96: 1b:a4:fc:57:1e:14:32:87:bc:d5:38:8b:26:58:f7: 2c:3e:00:bc:dc:d4:20:16:10:d4:42:4e:2f:5e:07: f9:90:df:e1:03:05:40:93:4d:11:77:ca:0c:14:39: e5:fb:0f:a5:0f:da:10:90:5a:ff:a9:ea:f6:c8:e9: 10:be:8f:b1:c8:c8:22:49:3b:08:8c:61:fb:e9:d1: 5c:b0:3b:af:ce:45:51:c8:42:da:17:50:f1:52:aa: a9:32:94:1c:77:9e:ab:7f:b5:54:a9:54:09:26:dc: ee:1f:e6:5b:02:6a:96:c7:84:a9:a7:35:8f:8f:a9: b4:58:55:3e:49:05:eb:c9:3a:28:ca:07:64:c2:49: e6:8f:b6:85:48:ae:35:e4:20:91:3d:6c:0d:09:23: 6b:ff:c3:3e:6f:32:f9:db:a4:20:c4:01:25:80:6d: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:0E:12:AD:65:3A:8F:C3:B8:FC:77:9D:D7:E7:41:5E:3E:23:D2 X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:97:25:19:fe:c3:38:e7:80:cb:73:d9:a3:30:ec:81:8f:3d: f5:f8:4e:a7:79:05:7e:b1:44:41:1b:21:c2:bb:a6:a0:18:0e: d0:06:a8:43:1c:0b:c8:7c:33:2c:29:e3:f9:01:ff:59:a5:27: 67:6a:d8:c9:16:63:32:f6:a0:a6:f1:a9:50:ad:cc:55:54:ae: b9:85:25:c9:3f:9e:f7:4d:82:72:42:87:e4:03:90:2d:7b:50: ae:83:93:a0:c2:4b:e0:93:89:d4:05:77:c3:75:52:98:a3:28: 14:da:f0:e4:55:d1:a6:79:99:d0:43:56:9b:6b:2e:a8:aa:9d: dd:a6:e8:d7:47:c8:9c:6f:f3:d4:dd:34:68:19:a7:92:a3:55: 6e:49:b4:ee:36:bd:77:72:17:fa:2b:4e:a9:a8:c7:24:25:a8: cf:1f:f5:7f:bd:76:75:61:74:a9:6b:05:cf:cf:d3:28:40:2f: 12:53:9c:04:69:3d:e3:41:76:1d:2a:d9:56:8a:a9:a9:e2:6f: 60:80:cc:e4:18:ca:fa:ec:f3:32:35:34:95:4f:f4:6b:11:2e: 5a:8c:cf:aa:d0:22:d5:61:af:07:45:8c:c2:1e:f1:43:b2:f3: d3:16:61:e4:2e:6d:29:f6:20:7f:fe:e1:b6:18:62:1c:16:da: a7:ea:6c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjUxMjIwMTUzMjExWhcNMjUxMjI3MTUzMjExWjAYMRYwFAYD VQQDDA02OTQ2YzE3Yi00ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ow1FpsDhOk8t8UDPheX/zj0QUMZL+SLEL5quR7t1pBvzITb5Lf7ZymU41zC sTcT/6E2ivEN5jDzDz16Vj8sClfgCtviijH2Tltb6JyGMAGEF713j+dVFpYbpPxX HhQyh7zVOIsmWPcsPgC83NQgFhDUQk4vXgf5kN/hAwVAk00Rd8oMFDnl+w+lD9oQ kFr/qer2yOkQvo+xyMgiSTsIjGH76dFcsDuvzkVRyELaF1DxUqqpMpQcd56rf7VU qVQJJtzuH+ZbAmqWx4SppzWPj6m0WFU+SQXryTooygdkwknmj7aFSK415CCRPWwN CSNr/8M+bzL526QgxAElgG0DEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2cDhKt ZTqPw7j8d53X50FePiPSMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8lyUZ/sM454DLc9mjMOyBjz31+E6neQV+sURBGyHCu6agGA7QBqhD HAvIfDMsKeP5Af9ZpSdnatjJFmMy9qCm8alQrcxVVK65hSXJP573TYJyQofkA5At e1Cug5Ogwkvgk4nUBXfDdVKYoygU2vDkVdGmeZnQQ1abay6oqp3dpujXR8icb/PU 3TRoGaeSo1VuSbTuNr13chf6K06pqMckJajPH/V/vXZ1YXSpawXPz9MoQC8SU5wE aT3jQXYdKtlWiqmp4m9ggMzkGMr67PMyNTSVT/RrES5ajM+q0CLVYa8HRYzCHvFD svPTFmHkLm0p9iB//uG2GGIcFtqn6mz2 -----END CERTIFICATE-----Generated at Sun Dec 21 08:37:45 2025 by rpki-client