This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: jGZi8JtofGbYcchYRgmLBZLKjE3OPDL0Olmn/0iLZsQ= Subject key identifier: C3:41:D5:78:76:B9:42:30:B1:D7:59:E3:3A:01:31:FE:F1:3C:EC:5B Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 066B Signing time: Sat 06 Dec 2025 21:27:31 +0000 Manifest this update: Sat 06 Dec 2025 21:27:31 +0000 Manifest next update: Sat 13 Dec 2025 21:27:31 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: 3AAMLGbOBOlvRfhd5sl6qq3Le6BVtgLIlOuCD4xxXE8=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Dec 6 21:27:31 2025 GMT Not After : Dec 13 21:27:31 2025 GMT Subject: CN=69349fc3-dfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:60:6d:55:cb:af:3d:99:d8:80:cc:aa:b5: 97:7b:29:1a:7d:5d:65:f2:ff:26:8a:98:af:c0:58: a0:34:ca:8a:a2:56:f5:1a:5e:d9:0b:6d:13:bf:4c: 75:de:3e:b8:70:b2:69:48:86:42:d4:b0:81:84:f8: 00:37:2c:0c:36:5c:e1:80:d1:69:f5:0d:68:30:34: e5:50:d3:8c:d4:c9:92:b9:e9:f3:02:7e:de:3d:2e: cb:06:df:94:e2:21:b3:3c:88:0e:e4:5d:8e:3d:23: b3:ce:e4:ed:89:00:a5:6d:41:60:9e:ec:04:e8:eb: ce:b2:63:3a:10:15:96:4f:c6:9e:2c:b9:e9:4b:bd: 12:57:73:14:2e:70:db:fe:f2:4a:08:b5:2e:93:20: b7:5e:df:c9:1f:75:3c:dc:77:84:fe:58:da:76:57: b7:40:53:35:e0:2b:66:3f:2b:4a:84:42:94:c9:ae: 58:38:7a:7b:6a:2b:c9:39:b2:48:e5:95:e9:37:b6: 5a:ea:00:9d:ad:42:90:3b:98:bd:fb:f8:b7:0c:70: e2:19:6c:73:9f:0b:6a:03:ce:3d:56:ea:70:f7:5d: 97:74:2c:fe:38:f2:8b:d5:52:44:29:1b:37:5a:19: 26:7f:e8:6f:41:cd:2e:5c:0d:88:31:8f:86:d4:45: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:41:D5:78:76:B9:42:30:B1:D7:59:E3:3A:01:31:FE:F1:3C:EC:5B X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:01:cb:dc:0b:e6:19:ce:88:3e:6c:53:88:c7:82:1e:56:15: 30:b0:f9:5b:4c:35:9f:37:07:5f:7f:1f:fd:3e:35:4e:c2:11: cb:db:58:2a:05:71:d8:7a:8f:1b:81:97:ed:48:2c:49:05:21: 57:6d:7b:d4:a5:36:25:69:dc:23:de:77:c4:a4:0c:9e:64:d6: ef:b3:e6:3b:95:db:a3:9c:5b:53:27:28:72:47:62:e9:e1:ad: c0:02:bc:d6:c4:c8:70:1d:ec:85:2e:3f:49:89:d3:1d:5f:8b: a2:8d:28:3e:21:8b:2c:66:63:4f:11:b4:80:7c:b2:c0:a2:fb: 02:3a:ac:f4:2c:6a:e0:b7:12:e3:3f:f7:67:1e:4c:d0:7e:a8: 05:0b:fd:88:a4:2a:da:b0:c8:14:b7:00:19:72:ca:a2:20:e3: 28:7b:4b:aa:d3:cf:9b:20:e7:aa:1b:92:16:aa:73:80:39:9f: 0f:bb:9d:32:26:89:e7:3d:fa:29:9c:a9:6b:c0:51:c9:c1:f1: 6b:a3:64:e1:de:12:d2:0e:00:60:d6:52:44:ef:24:d5:27:32: f9:30:e6:35:83:d0:37:70:4a:08:ba:34:18:40:4b:fe:96:00: 71:fb:71:5e:d2:17:fe:76:ba:d4:38:ae:4e:3f:da:17:6b:8d: 4b:a0:19:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUxMjA2MjEyNzMxWhcNMjUxMjEzMjEyNzMxWjAYMRYwFAYD VQQDEw02OTM0OWZjMy1kZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfJgbVXLrz2Z2IDMqrWXeykafV1l8v8mipivwFigNMqKolb1Gl7ZC20Tv0x1 3j64cLJpSIZC1LCBhPgANywMNlzhgNFp9Q1oMDTlUNOM1MmSuenzAn7ePS7LBt+U 4iGzPIgO5F2OPSOzzuTtiQClbUFgnuwE6OvOsmM6EBWWT8aeLLnpS70SV3MULnDb /vJKCLUukyC3Xt/JH3U83HeE/ljadle3QFM14CtmPytKhEKUya5YOHp7aivJObJI 5ZXpN7Za6gCdrUKQO5i9+/i3DHDiGWxznwtqA849Vupw912XdCz+OPKL1VJEKRs3 Whkmf+hvQc0uXA2IMY+G1EU0WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNB1Xh2 uUIwsddZ4zoBMf7xPOxbMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSAcvcC+YZzog+bFOIx4IeVhUwsPlbTDWfNwdffx/9PjVOwhHL21gq BXHYeo8bgZftSCxJBSFXbXvUpTYladwj3nfEpAyeZNbvs+Y7ldujnFtTJyhyR2Lp 4a3AArzWxMhwHeyFLj9JidMdX4uijSg+IYssZmNPEbSAfLLAovsCOqz0LGrgtxLj P/dnHkzQfqgFC/2IpCrasMgUtwAZcsqiIOMoe0uq08+bIOeqG5IWqnOAOZ8Pu50y JonnPfopnKlrwFHJwfFro2Th3hLSDgBg1lJE7yTVJzL5MOY1g9A3cEoIujQYQEv+ lgBx+3Fe0hf+drrUOK5OP9oXa41LoBlx -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:43 2025 by rpki-client