This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft File: 4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json) Hash identifier: cr3L6kAscDrEmYvivoW+fyUtfmD2t2hXh9dWmmu9r/8= Subject key identifier: 4E:58:7E:FB:3B:F3:1A:5E:7D:56:69:20:15:0A:73:B6:D0:FD:C1:D8 Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9 Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft Manifest number: 04DE Signing time: Thu 04 Dec 2025 22:46:03 +0000 Manifest this update: Thu 04 Dec 2025 22:46:02 +0000 Manifest next update: Thu 11 Dec 2025 22:46:02 +0000 Files and hashes: 1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: +AutPf5p1/gxMFyzGzsPow40yzHGU8qRuoNsGRiBYEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9 Validity Not Before: Dec 4 22:46:02 2025 GMT Not After : Dec 11 22:46:02 2025 GMT Subject: CN=69320f2a-5802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:32:e8:48:27:b2:02:c2:7b:19:d6:b0:2a: 2d:d0:66:c9:78:b0:16:a1:d0:0b:8e:88:bb:27:50: 63:e4:63:24:21:ef:bd:96:f6:41:9d:a4:1f:97:2a: 02:55:ef:6d:47:04:e8:a3:e5:a3:ed:16:14:9a:bb: c3:ca:a4:d3:db:a7:cf:c8:08:bb:74:24:7b:1a:82: 47:35:7d:36:1b:27:14:aa:17:66:7e:0b:0e:76:74: f3:73:dd:a4:61:d0:f6:5c:17:e7:a2:32:6a:31:cf: 03:53:4c:86:24:8b:ea:d6:d8:fb:cb:bf:04:92:30: 52:d7:51:d5:69:36:4c:78:55:2d:c7:cc:a1:e2:ea: 95:48:cf:f3:da:aa:8b:44:6e:8a:7c:63:3f:22:55: 13:f4:0c:b2:4b:12:6c:a2:93:f3:20:93:38:b0:e1: 69:e3:92:86:e4:19:f4:ff:32:f9:90:42:17:0c:fc: 79:a5:bb:d0:8c:ad:d9:75:b1:40:f6:a8:2a:b9:5e: 02:0f:68:b2:b7:5f:df:d2:03:1e:20:92:eb:e7:0d: 6b:97:db:e4:98:95:57:32:d3:8f:98:e1:31:1a:5e: 89:b1:83:fb:fd:b7:5c:cf:ab:27:eb:65:ce:b4:f7: e3:7b:4a:ae:1f:3c:05:ce:a6:cd:a7:ba:dd:a9:84: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:7E:FB:3B:F3:1A:5E:7D:56:69:20:15:0A:73:B6:D0:FD:C1:D8 X509v3 Authority Key Identifier: keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:49:d6:75:01:88:47:81:27:b6:10:a5:62:bf:f0:a6:de:f7: 1b:fc:d2:df:47:ef:ee:a8:66:79:3d:2d:69:85:c7:57:82:a8: 84:10:ec:ce:d2:12:76:df:ea:ee:2f:91:6f:ea:20:ef:3c:af: ef:1e:72:18:4f:a9:48:bc:84:1a:50:d0:ef:32:ff:4b:40:95: 99:df:53:75:21:d5:06:38:b8:d0:cc:b8:7c:fa:93:ae:16:87: 85:32:44:fa:e6:12:c8:16:5e:45:0d:c2:bd:c3:45:79:c6:38: bd:c0:36:c6:e2:1d:ba:e9:dd:24:97:e2:5d:4a:25:91:b4:4d: b9:b6:9b:2f:8f:59:b5:04:4c:1d:66:d8:f3:a8:ff:e4:6d:3a: cb:3d:26:a0:28:ee:e2:f7:ea:55:76:68:64:1b:f9:2e:ef:c9: 15:e6:0c:a5:eb:3a:e5:d9:34:20:46:44:c8:41:6f:83:6d:6e: 8b:73:73:a7:ba:59:35:bc:d0:e5:d4:d4:fe:70:3c:be:c1:65: f8:33:ab:3e:f6:8c:56:bd:49:16:e0:14:94:8c:d7:b8:18:91: 2b:59:98:92:68:38:ed:de:7e:7c:0e:f6:fb:f9:7d:32:23:a4: 5e:8c:b5:21:3a:c0:6b:3a:06:79:45:c4:5d:cd:b4:fb:8d:1a: bb:1d:c0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlBOEQxMTAvBgNVBAUTKEUxOEY5RTg1NzQzQUJFQ0FDMDQ2MkI4RkRGNDNBN0RC NEE2MjhGRjkwHhcNMjUxMjA0MjI0NjAyWhcNMjUxMjExMjI0NjAyWjAYMRYwFAYD VQQDEw02OTMyMGYyYS01ODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2Yy6EgnsgLCexnWsCot0GbJeLAWodALjoi7J1Bj5GMkIe+9lvZBnaQflyoC Ve9tRwToo+Wj7RYUmrvDyqTT26fPyAi7dCR7GoJHNX02GycUqhdmfgsOdnTzc92k YdD2XBfnojJqMc8DU0yGJIvq1tj7y78EkjBS11HVaTZMeFUtx8yh4uqVSM/z2qqL RG6KfGM/IlUT9AyySxJsopPzIJM4sOFp45KG5Bn0/zL5kEIXDPx5pbvQjK3ZdbFA 9qgquV4CD2iyt1/f0gMeIJLr5w1rl9vkmJVXMtOPmOExGl6JsYP7/bdcz6sn62XO tPfje0quHzwFzqbNp7rdqYTibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5Yfvs7 8xpefVZpIBUKc7bQ/cHYMB8GA1UdIwQYMBaAFOGPnoV0Or7KwEYrj99Dp9tKYo/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUE4RC8zMkYxRjRDMjgz RTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZzckFSaXVQMzBPbjIwcGlq X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZLWVoWFE2dnNyQVJpdVAzME9uMjBwaWpfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUE4RC8zMkYxRjRDMjgzRTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZz ckFSaXVQMzBPbjIwcGlqX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPSdZ1AYhHgSe2EKViv/Cm3vcb/NLfR+/uqGZ5PS1phcdXgqiEEOzO 0hJ23+ruL5Fv6iDvPK/vHnIYT6lIvIQaUNDvMv9LQJWZ31N1IdUGOLjQzLh8+pOu FoeFMkT65hLIFl5FDcK9w0V5xji9wDbG4h266d0kl+JdSiWRtE25tpsvj1m1BEwd ZtjzqP/kbTrLPSagKO7i9+pVdmhkG/ku78kV5gyl6zrl2TQgRkTIQW+DbW6Lc3On ulk1vNDl1NT+cDy+wWX4M6s+9oxWvUkW4BSUjNe4GJErWZiSaDjt3n58Dvb7+X0y I6RejLUhOsBrOgZ5RcRdzbT7jRq7HcBK -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:47 2025 by rpki-client