This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: SJcdqLGbcqyyIBi5PJjLyg6E45H+ESOo3josYQVpyMY= Subject key identifier: 10:86:D3:0F:16:E9:8B:D1:4A:E4:75:1F:BE:7D:53:95:EE:BB:9D:2A Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: D9 Signing time: Sun 07 Dec 2025 03:50:07 +0000 Manifest this update: Sun 07 Dec 2025 03:50:07 +0000 Manifest next update: Sun 14 Dec 2025 03:50:07 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: Cis5CTsE44+w8eq+kufRDV5o5HyFb61Yj9vbsNuoKu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Dec 7 03:50:07 2025 GMT Not After : Dec 14 03:50:07 2025 GMT Subject: CN=6934f96f-98d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:43:2f:c5:b1:c4:55:c9:bd:aa:45:a3:ed: 50:a3:b1:70:62:50:1f:d7:93:81:e2:18:9c:01:86: e8:e9:8f:0b:3e:40:47:ac:ed:e7:54:3a:e7:1a:d6: 8c:be:42:c2:3c:2e:a0:ff:10:3c:48:d3:fb:4d:c3: f9:1e:ff:5e:51:ef:16:a4:1d:8a:f4:08:17:2a:ad: c3:bd:eb:73:f2:5a:b1:3f:95:d9:c8:37:a7:9c:81: c6:69:ea:90:cc:9b:70:37:f9:02:28:7d:56:8b:bc: 7d:6c:4c:13:12:ba:5d:b9:05:5c:68:d0:d1:57:b1: 5c:bb:0d:1c:54:01:3d:f0:51:53:1f:6d:f0:5a:5a: a5:b4:2f:8a:c4:b1:21:c0:1b:cf:27:1c:83:05:eb: 52:87:c9:bd:9b:b4:5b:c6:c1:e1:5a:18:88:fd:56: c6:3d:80:ed:50:1d:b1:90:aa:84:f2:bb:4f:51:19: 51:3c:e6:e9:7e:ab:31:d0:00:01:68:f0:99:76:5d: b3:0d:3c:73:92:5d:81:dc:cc:6a:0b:bb:97:d3:1b: 90:eb:7b:e5:c2:ea:ac:fb:71:57:f7:51:48:95:63: d5:b1:40:0d:29:24:67:25:f5:32:62:b4:0b:ac:8f: f1:77:a7:97:93:87:af:fc:e8:c2:5d:6a:88:49:d2: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:86:D3:0F:16:E9:8B:D1:4A:E4:75:1F:BE:7D:53:95:EE:BB:9D:2A X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:46:4e:bb:63:14:11:d4:50:b9:7f:6c:ab:ff:fe:f7:42:39: e6:29:43:44:b3:96:36:86:09:38:3a:43:35:fe:06:df:09:02: 86:1a:2e:28:50:79:e3:aa:5d:06:14:7c:81:54:f6:ab:7f:87: 5b:55:bb:7e:5e:8d:ff:cb:38:df:1f:4f:32:d6:ef:cc:e4:26: ce:b6:f2:10:2a:df:84:93:68:12:56:06:75:ee:ce:ea:84:91: b2:82:2b:1f:78:c3:85:8c:e6:c9:c7:7a:7a:02:7c:05:7f:e5: 8c:ae:1d:ef:99:f5:ff:18:a7:b0:44:7b:f3:b4:4a:43:66:07: 4c:00:50:22:67:13:b6:8f:a0:6e:9a:b4:c4:fa:98:09:06:c1: 63:88:30:1f:3c:18:f7:9a:3e:61:93:fd:f9:bf:82:54:23:7b: 5f:c4:a7:f6:55:70:0a:19:d8:17:8d:12:a4:59:97:40:17:f6: 93:92:a6:57:5d:ae:18:f2:cf:ac:0d:41:f5:31:15:96:e5:f4: 98:44:e0:41:98:57:a0:58:b6:21:86:ba:43:4d:8f:5d:24:29: 7a:75:63:9a:69:45:dd:2c:10:2d:d5:2b:1c:3f:61:50:a1:c4: f9:0a:66:fd:f0:dd:23:07:55:52:81:92:6d:9b:d7:ef:c7:ec: fa:4a:71:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUxMjA3MDM1MDA3WhcNMjUxMjE0MDM1MDA3WjAYMRYwFAYD VQQDEw02OTM0Zjk2Zi05OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KRDL8WxxFXJvapFo+1Qo7FwYlAf15OB4hicAYbo6Y8LPkBHrO3nVDrnGtaM vkLCPC6g/xA8SNP7TcP5Hv9eUe8WpB2K9AgXKq3Dvetz8lqxP5XZyDennIHGaeqQ zJtwN/kCKH1Wi7x9bEwTErpduQVcaNDRV7Fcuw0cVAE98FFTH23wWlqltC+KxLEh wBvPJxyDBetSh8m9m7RbxsHhWhiI/VbGPYDtUB2xkKqE8rtPURlRPObpfqsx0AAB aPCZdl2zDTxzkl2B3MxqC7uX0xuQ63vlwuqs+3FX91FIlWPVsUANKSRnJfUyYrQL rI/xd6eXk4ev/OjCXWqISdKFCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCG0w8W 6YvRSuR1H759U5Xuu50qMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoRk67YxQR1FC5f2yr//73QjnmKUNEs5Y2hgk4OkM1/gbfCQKGGi4o UHnjql0GFHyBVParf4dbVbt+Xo3/yzjfH08y1u/M5CbOtvIQKt+Ek2gSVgZ17s7q hJGygisfeMOFjObJx3p6AnwFf+WMrh3vmfX/GKewRHvztEpDZgdMAFAiZxO2j6Bu mrTE+pgJBsFjiDAfPBj3mj5hk/35v4JUI3tfxKf2VXAKGdgXjRKkWZdAF/aTkqZX Xa4Y8s+sDUH1MRWW5fSYROBBmFegWLYhhrpDTY9dJCl6dWOaaUXdLBAt1SscP2FQ ocT5Cmb98N0jB1VSgZJtm9fvx+z6SnHD -----END CERTIFICATE-----Generated at Sun Dec 7 07:49:49 2025 by rpki-client