This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json) Hash identifier: vgF7+v+wbrIXooWruaTvTvLi56oT4leVwlykaXB4LjA= Subject key identifier: AB:80:A1:84:41:AF:47:DD:2D:03:33:BC:A4:13:B0:95:D2:AA:5C:FC Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Certificate serial: 0DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft Manifest number: 0DF7 Signing time: Sat 06 Dec 2025 17:16:43 +0000 Manifest this update: Sat 06 Dec 2025 17:16:42 +0000 Manifest next update: Sat 13 Dec 2025 17:16:42 +0000 Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: vp0qQkg9KZD+O6gETEm8RrwaQwDmbmlEGCfj6dAPu9Y=) 2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: H10nxhyS/VwDB93m2/HXj3BoCowkULE1EpiVOf28AL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Validity Not Before: Dec 6 17:16:42 2025 GMT Not After : Dec 13 17:16:42 2025 GMT Subject: CN=693464fa-64b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:45:95:02:2a:0f:9a:96:dd:f6:fd:43:89:43: a3:dc:a9:cf:35:29:7d:05:81:29:a2:e3:80:54:50: 5f:a9:fc:9f:fb:00:78:15:11:a3:47:46:d8:72:a5: 9b:7a:f0:2b:04:35:d2:7a:67:68:9e:65:11:ec:7e: e4:d0:a8:da:54:10:1c:d4:47:47:d6:6e:3c:57:45: 83:b5:9f:f5:d9:5e:15:2a:d2:20:37:bd:45:89:75: 64:41:bf:6b:e4:56:0b:51:5c:e3:aa:91:58:7c:f6: f5:7b:3e:5c:80:60:b2:a5:d4:f0:b0:7a:92:d4:ac: f2:cf:08:2e:e4:8e:7c:92:ed:d8:d5:08:5e:3a:7f: f3:45:05:30:2c:ae:14:c9:c9:6f:41:97:91:3f:06: 5c:d8:b5:1c:ac:c3:fb:f1:f7:0b:0e:c3:80:e3:df: a6:0f:22:ef:7e:ba:e2:38:e0:8f:d2:64:6d:b8:1c: 49:2c:71:4c:e6:85:dc:af:09:09:ef:fa:70:3a:67: cf:d3:52:89:96:5c:0b:89:27:1b:4b:b6:36:be:d8: 7c:81:74:51:26:1c:6a:ae:54:cd:f6:30:1b:b5:2e: 4c:85:a2:c3:27:bc:91:15:fc:0d:a9:dd:3f:50:f0: 19:07:4e:72:fc:5a:63:65:93:02:5b:48:25:3a:5b: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:80:A1:84:41:AF:47:DD:2D:03:33:BC:A4:13:B0:95:D2:AA:5C:FC X509v3 Authority Key Identifier: keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3e:f3:c9:8c:0c:76:b2:9c:59:57:0f:4a:af:d6:21:49:c6: 97:8d:6e:b7:33:2c:db:df:62:18:5e:a5:09:d6:11:ee:16:2c: 2b:f9:93:bf:11:62:1d:8c:92:fc:f0:08:66:45:d8:cb:e3:a1: f0:4c:dc:00:9d:17:57:3d:f6:71:12:07:ec:a3:43:7b:bc:e0: 32:43:91:7c:4c:fe:a7:c2:f1:65:90:a7:23:b9:ad:a0:cf:cc: 8b:c6:a7:09:52:5c:d6:63:e1:0a:f7:39:88:c0:f9:13:f3:3c: e4:1d:40:58:e6:10:c6:43:93:96:7e:9a:52:1b:88:08:73:0b: b6:3c:b4:15:74:90:59:e0:10:af:07:6c:2a:57:75:fc:fd:8e: a1:e2:3b:f9:85:c0:a8:e2:31:b2:83:83:13:b5:8c:6d:cf:21: 81:d6:44:79:7d:50:d6:d8:ff:6b:4d:34:68:dd:31:95:45:49: cd:b2:87:d4:7c:24:ce:e3:25:83:b4:6a:6e:49:bc:5f:28:67: 6d:66:d2:57:0b:06:95:ea:d9:ea:bb:10:89:4f:68:88:4a:e8: 60:0d:c8:fa:92:43:bf:3e:88:e4:fd:4c:66:db:80:ba:b8:8e: 90:ca:62:fb:86:c1:14:75:a4:52:78:e7:d7:c5:df:9f:5b:b1: 2e:09:51:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG OEJEN0Y1OUEwHhcNMjUxMjA2MTcxNjQyWhcNMjUxMjEzMTcxNjQyWjAYMRYwFAYD VQQDEw02OTM0NjRmYS02NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70WVAioPmpbd9v1DiUOj3KnPNSl9BYEpouOAVFBfqfyf+wB4FRGjR0bYcqWb evArBDXSemdonmUR7H7k0KjaVBAc1EdH1m48V0WDtZ/12V4VKtIgN71FiXVkQb9r 5FYLUVzjqpFYfPb1ez5cgGCypdTwsHqS1Kzyzwgu5I58ku3Y1QheOn/zRQUwLK4U yclvQZeRPwZc2LUcrMP78fcLDsOA49+mDyLvfrriOOCP0mRtuBxJLHFM5oXcrwkJ 7/pwOmfP01KJllwLiScbS7Y2vth8gXRRJhxqrlTN9jAbtS5MhaLDJ7yRFfwNqd0/ UPAZB05y/FpjZZMCW0glOlsfmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuAoYRB r0fdLQMzvKQTsJXSqlz8MB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2Ny8wOEMzRDI4RUMyMjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4 eGJJWTZNVFBhZmI0dlg5Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdPvPJjAx2spxZVw9Kr9YhScaXjW63Myzb32IYXqUJ1hHuFiwr+ZO/ EWIdjJL88AhmRdjL46HwTNwAnRdXPfZxEgfso0N7vOAyQ5F8TP6nwvFlkKcjua2g z8yLxqcJUlzWY+EK9zmIwPkT8zzkHUBY5hDGQ5OWfppSG4gIcwu2PLQVdJBZ4BCv B2wqV3X8/Y6h4jv5hcCo4jGyg4MTtYxtzyGB1kR5fVDW2P9rTTRo3TGVRUnNsofU fCTO4yWDtGpuSbxfKGdtZtJXCwaV6tnquxCJT2iISuhgDcj6kkO/Pojk/Uxm24C6 uI6QymL7hsEUdaRSeOfXxd+fW7EuCVHH -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:13 2025 by rpki-client