This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: /6q/M/vOI8NtQ8qotbfAopFLZWnP99TqZ9h5O9dG5xE= Subject key identifier: E4:C6:1D:F1:AC:A5:63:F6:82:49:C5:AF:3C:1E:DD:C2:A3:A1:E4:E1 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 63 Signing time: Fri 05 Dec 2025 04:56:39 +0000 Manifest this update: Fri 05 Dec 2025 04:56:39 +0000 Manifest next update: Fri 12 Dec 2025 04:56:39 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: 6I6VmOTTT2GeqHP/E8CYrSLe5SaOTB9P7nXuU58quCM=) 2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: o9G1A0FZfefSpw7tgiUoCNim5Wrwha6io4RXP/8s+W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Dec 5 04:56:39 2025 GMT Not After : Dec 12 04:56:39 2025 GMT Subject: CN=69326607-0f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:9a:d8:9a:61:f6:1d:15:c4:cd:69:69:80: 56:db:cd:3c:9a:a3:6f:58:49:ab:ea:b1:f7:14:d2: 72:f7:e9:90:0d:e0:58:e2:4e:09:1c:9f:70:fe:a1: 1c:ce:3c:68:83:1b:a9:ae:2c:dc:28:be:5a:72:1a: 46:d5:8a:4a:01:e9:bf:f9:aa:5e:d8:7b:6e:7d:08: e1:6e:93:10:12:5d:a0:f9:92:a0:37:23:98:4f:70: 82:ea:78:47:d6:e3:17:70:0a:ce:e9:47:a5:87:f5: 60:cd:f0:19:48:10:ca:b8:b8:28:28:36:7b:f4:72: f7:04:28:3c:c4:58:37:c0:01:62:c6:39:ba:5a:85: f5:ae:ad:cb:da:d7:61:a3:9b:e2:91:b0:19:e9:2f: ab:cb:00:7c:65:99:ed:42:d4:d6:28:91:34:bb:dc: e2:57:71:64:6b:ef:1c:d7:f0:4f:93:c4:8b:81:6a: 00:3f:ee:61:8a:e6:ce:cd:02:4c:a4:6d:84:7d:14: e0:5b:de:ff:5d:34:e0:99:6d:e0:77:19:2c:e3:ae: de:55:cc:bc:81:26:ff:a9:c6:54:da:bb:62:92:42: 02:7a:25:e2:5f:32:7e:be:3e:d7:14:79:0f:a9:af: 96:43:09:98:29:32:95:65:85:fc:a1:59:ee:28:c2: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:1D:F1:AC:A5:63:F6:82:49:C5:AF:3C:1E:DD:C2:A3:A1:E4:E1 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d0:22:60:57:96:e2:87:ec:65:e6:e3:9b:d3:1b:63:22:b0: 42:4a:8e:b6:9d:2c:52:70:e2:7a:90:e7:e4:cd:6c:2c:6b:f3: 6a:49:33:c5:4b:e9:80:60:3d:9e:ff:ff:03:58:13:fc:96:98: 27:8a:8d:2b:20:c9:ec:22:8a:59:46:90:d3:4a:cf:f6:f1:20: e6:25:bf:db:20:8a:bd:72:36:ce:c3:c9:83:96:ed:dd:0a:24: 81:96:48:33:ab:13:9d:5b:72:f6:ac:d8:15:4d:a2:0c:9d:81: 91:f7:db:de:e4:13:85:0d:d0:a7:99:57:1f:b8:25:f2:d8:ab: ba:5c:6a:3b:b4:fe:81:44:d3:6d:7d:ed:ee:86:fb:91:a1:f7: 2d:fd:7f:81:63:c2:cc:76:ee:09:59:7a:34:63:f9:b0:98:ea: 1b:1d:7c:42:2d:9a:a6:84:60:ad:06:73:4a:06:22:35:ff:56: f9:95:a9:f1:ef:f6:3f:31:b4:c5:92:68:eb:43:4a:20:ef:0c: c7:db:cb:04:7b:93:b4:b8:7e:0e:ba:63:b5:67:aa:ae:16:9b: 36:dc:aa:8e:64:b3:00:f0:6c:9f:cc:05:b5:cf:81:ee:04:e8: 7c:8f:8e:5d:ef:8f:5d:0e:e9:2d:9d:a6:f3:0c:d7:0e:66:1e: fc:4f:46:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTEyMDUwNDU2MzlaFw0yNTEyMTIwNDU2MzlaMBgxFjAUBgNV BAMTDTY5MzI2NjA3LTBmOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXzprYmmH2HRXEzWlpgFbbzTyao29YSavqsfcU0nL36ZAN4FjiTgkcn3D+oRzO PGiDG6muLNwovlpyGkbVikoB6b/5ql7Ye259COFukxASXaD5kqA3I5hPcILqeEfW 4xdwCs7pR6WH9WDN8BlIEMq4uCgoNnv0cvcEKDzEWDfAAWLGObpahfWurcva12Gj m+KRsBnpL6vLAHxlme1C1NYokTS73OJXcWRr7xzX8E+TxIuBagA/7mGK5s7NAkyk bYR9FOBb3v9dNOCZbeB3GSzjrt5VzLyBJv+pxlTau2KSQgJ6JeJfMn6+PtcUeQ+p r5ZDCZgpMpVlhfyhWe4owgH9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5MYd8ayl Y/aCScWvPB7dwqOh5OEwHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHQImBXluKH7GXm45vTG2MisEJKjradLFJw4nqQ5+TNbCxr82pJM8VL 6YBgPZ7//wNYE/yWmCeKjSsgyewiillGkNNKz/bxIOYlv9sgir1yNs7DyYOW7d0K JIGWSDOrE51bcvas2BVNogydgZH3297kE4UN0KeZVx+4JfLYq7pcaju0/oFE0219 7e6G+5Gh9y39f4Fjwsx27glZejRj+bCY6hsdfEItmqaEYK0Gc0oGIjX/VvmVqfHv 9j8xtMWSaOtDSiDvDMfbywR7k7S4fg66Y7Vnqq4Wmzbcqo5kswDwbJ/MBbXPge4E 6HyPjl3vj10O6S2dpvMM1w5mHvxPRgQ= -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:40 2025 by rpki-client