This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: w4Lw+8qu8qfMTWZoW1XqTSxa0QKaH0MlijkchIiD7aM= Subject key identifier: F8:C9:CD:4D:06:8A:AA:52:26:60:23:75:D0:6F:5B:BE:73:92:B3:DC Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 63 Signing time: Sun 07 Dec 2025 05:06:25 +0000 Manifest this update: Sun 07 Dec 2025 05:06:24 +0000 Manifest next update: Sun 14 Dec 2025 05:06:24 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: v+hu5yW9QdYLuQ43qStQSGSauRWcHzHqJdH7hbC5uPw=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Dec 7 05:06:24 2025 GMT Not After : Dec 14 05:06:24 2025 GMT Subject: CN=69350b50-340a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:48:ae:8e:41:d8:85:17:0f:5c:c1:e1:c1:ab: b9:1a:be:9d:9e:b2:db:40:cc:82:8b:44:77:c3:78: b2:eb:d1:cd:a7:8d:0f:c4:a1:39:33:6d:e3:da:24: 14:d2:45:7e:95:9f:9b:50:f7:19:e7:28:3d:a1:fc: 42:79:80:8e:a5:86:53:11:9b:c3:c1:54:cb:37:6f: 02:28:39:e6:e2:26:6e:0f:a8:cd:e8:76:50:1f:36: e2:e6:5e:b1:47:69:74:a3:a2:84:e7:2a:78:3a:b3: e3:f1:cf:06:d3:c7:a0:f8:99:d9:4c:cc:5a:6d:42: 36:ca:32:74:78:79:ed:ca:bf:f8:0f:e7:e1:7e:33: 84:34:2b:fd:91:53:1d:20:30:67:76:f6:f5:1c:cd: 61:65:6c:fa:91:82:dc:cf:43:00:d3:eb:81:08:1f: da:e0:f5:79:d3:b7:da:d7:7d:79:be:1a:ec:e7:15: 18:52:69:b8:c3:92:00:7f:a5:24:3a:82:1a:60:93: f8:88:e5:1a:48:76:a8:ae:e8:d4:ef:29:2c:db:a4: 31:c0:aa:52:e9:0f:c2:90:59:31:ad:95:da:1b:e3: 19:d1:e5:97:f2:a3:6d:5a:71:62:4e:9a:33:70:ec: 5a:1b:63:c2:af:48:ac:47:c7:d0:be:0c:5c:31:a4: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C9:CD:4D:06:8A:AA:52:26:60:23:75:D0:6F:5B:BE:73:92:B3:DC X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b1:7b:6c:fd:94:16:7b:13:bc:51:58:b2:b4:d5:09:6d:cf: e6:b3:7b:e3:87:2b:dd:0d:e6:b4:52:7e:6b:62:6a:86:28:fd: b0:a6:91:ef:a6:67:a8:9a:91:3b:b9:cc:0e:75:9c:b7:f4:ee: b0:0b:12:a3:d9:c1:ef:7f:e3:32:df:1a:7b:a0:c5:b9:42:95: ee:58:55:e3:8d:32:88:4a:4a:92:23:18:ed:43:86:64:b4:6e: 30:28:96:3a:0a:9b:8d:49:d4:dc:e5:3a:71:7c:a0:6b:d2:a1: d8:21:95:23:42:29:63:cf:cd:20:7b:2a:3a:ca:f8:1a:51:af: 51:66:93:84:76:07:86:65:1f:a1:d7:aa:b7:0b:b8:f1:f2:97: dc:55:9a:4e:36:06:9c:46:ae:2a:da:20:3d:01:fd:52:2e:6d: 11:b3:91:0f:9d:40:8e:a8:33:6c:c8:1c:15:12:c9:cb:e4:40: 4b:1f:b7:dc:c3:2d:62:64:e0:ac:ba:3b:12:b1:7d:e7:58:b0: 62:02:ca:32:d8:97:c4:ab:ec:7c:b1:22:67:e1:27:7e:0f:c8: 8a:09:d8:cb:fa:a9:e3:6c:f4:a7:2e:50:b2:c6:8e:2b:91:89: 94:3b:be:77:50:e1:72:9f:64:cc:dc:b4:63:2a:69:2a:7e:4e: d1:54:56:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTEyMDcwNTA2MjRaFw0yNTEyMTQwNTA2MjRaMBgxFjAUBgNV BAMTDTY5MzUwYjUwLTM0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1SK6OQdiFFw9cweHBq7kavp2esttAzIKLRHfDeLLr0c2njQ/EoTkzbePaJBTS RX6Vn5tQ9xnnKD2h/EJ5gI6lhlMRm8PBVMs3bwIoOebiJm4PqM3odlAfNuLmXrFH aXSjooTnKng6s+PxzwbTx6D4mdlMzFptQjbKMnR4ee3Kv/gP5+F+M4Q0K/2RUx0g MGd29vUczWFlbPqRgtzPQwDT64EIH9rg9XnTt9rXfXm+GuznFRhSabjDkgB/pSQ6 ghpgk/iI5RpIdqiu6NTvKSzbpDHAqlLpD8KQWTGtldob4xnR5Zfyo21acWJOmjNw 7FobY8KvSKxHx9C+DFwxpO2FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+MnNTQaK qlImYCN10G9bvnOSs9wwHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADKxe2z9lBZ7E7xRWLK01Qltz+aze+OHK90N5rRSfmtiaoYo/bCmke+m Z6iakTu5zA51nLf07rALEqPZwe9/4zLfGnugxblCle5YVeONMohKSpIjGO1DhmS0 bjAoljoKm41J1NzlOnF8oGvSodghlSNCKWPPzSB7KjrK+BpRr1Fmk4R2B4ZlH6HX qrcLuPHyl9xVmk42BpxGriraID0B/VIubRGzkQ+dQI6oM2zIHBUSycvkQEsft9zD LWJk4Ky6OxKxfedYsGICyjLYl8Sr7HyxImfhJ34PyIoJ2Mv6qeNs9KcuULLGjiuR iZQ7vndQ4XKfZMzctGMqaSp+TtFUVvY= -----END CERTIFICATE-----Generated at Mon Dec 8 09:31:33 2025 by rpki-client