This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: dCFZq0DXzTHZiQj8vBGkmkCe5gG18YRz5ECwecptte4= Subject key identifier: 04:DB:93:74:5A:82:9B:02:7D:7B:13:DF:84:51:59:E9:ED:B7:1E:37 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B6C Signing time: Sat 06 Dec 2025 18:23:52 +0000 Manifest this update: Sat 06 Dec 2025 18:23:51 +0000 Manifest next update: Sat 13 Dec 2025 18:23:51 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: B3qtkSnpLpi/I1J4LgdwCnHdrOjA1zQ6DWSw5VUGuEs=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Dec 6 18:23:51 2025 GMT Not After : Dec 13 18:23:51 2025 GMT Subject: CN=693474b8-2a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:c4:9b:ae:b2:c8:31:ad:d7:91:cc:13:ac: 58:d6:63:89:b3:8b:5c:bd:65:a2:2f:12:c3:e1:c9: e8:6d:70:06:66:34:9a:cb:ce:62:3f:9c:5f:a7:aa: 1e:ac:c9:92:b2:13:69:12:67:ad:39:36:d8:9a:42: be:9a:7b:2b:70:3d:73:a5:b1:46:fc:d3:69:63:90: f7:8d:c5:98:26:30:37:00:9c:78:f7:c3:22:54:e1: 44:c9:a3:2f:e0:84:88:39:6f:f7:9e:dc:a6:eb:7c: e3:c1:3c:cd:eb:c7:63:30:df:da:c0:88:34:c9:1a: 16:3c:06:52:ba:42:b3:b8:f8:db:78:e8:c8:2a:4b: 54:17:0d:ff:da:a8:0d:62:69:75:c3:73:c0:c5:55: 71:4c:41:8f:7b:83:cb:ec:a6:81:80:43:dc:23:4c: be:a5:ba:85:0c:ab:62:07:2d:32:e9:d0:f4:cf:fb: 28:85:cd:aa:ac:2a:af:c8:32:c3:13:fd:22:cb:22: 2a:11:d0:0e:5c:81:44:bb:e6:10:31:ea:29:6c:17: 82:2b:8f:dd:fb:84:f2:78:78:39:6c:73:25:dd:de: 36:f0:58:80:56:98:76:f7:05:ef:a4:cc:c0:30:b7: 82:0d:91:3f:ca:4c:49:c5:1e:37:8a:4d:b1:92:1e: 43:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:93:74:5A:82:9B:02:7D:7B:13:DF:84:51:59:E9:ED:B7:1E:37 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fd:7e:de:bb:6d:33:d0:63:51:2a:5e:6a:50:2d:92:cd:32: 93:cc:e4:16:2d:c6:84:49:79:87:1c:81:55:22:6c:99:a7:c0: 12:51:8a:54:75:ba:3d:00:b3:93:58:e2:6f:d6:a7:6f:fc:39: f9:7d:68:75:51:f7:5a:f9:3a:49:d0:ea:4f:2d:af:ce:34:63: 87:05:f8:de:5c:70:56:8a:d5:30:a0:37:ca:bb:e9:20:dd:34: 58:bc:1d:59:27:6c:ae:34:58:d1:ee:bd:d4:01:06:00:a5:0c: e7:49:dd:67:e5:33:1d:06:e1:52:b0:f9:13:f6:8f:04:f4:65: 49:c0:da:80:71:84:be:c1:85:42:f7:27:3b:33:55:89:24:18: 5c:b5:80:c3:c1:96:3c:96:2e:27:e2:1a:97:6c:9a:91:2e:5e: ca:4a:46:2b:16:f1:97:14:ae:7d:81:0a:9b:12:74:15:f5:38: fc:85:f0:8a:71:95:f0:24:4c:2a:e9:c0:03:56:97:21:4f:42: d2:3c:8f:01:e6:c2:4b:ac:14:45:09:b6:b2:16:bd:54:5c:a1: b4:71:44:99:91:74:fa:b4:b0:c2:84:22:c7:46:b8:dc:1e:19: 89:d4:c4:18:b0:54:fb:35:d9:ba:d1:a5:86:14:92:cd:7a:05: 0d:9c:95:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUxMjA2MTgyMzUxWhcNMjUxMjEzMTgyMzUxWjAYMRYwFAYD VQQDEw02OTM0NzRiOC0yYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoL/Em66yyDGt15HME6xY1mOJs4tcvWWiLxLD4cnobXAGZjSay85iP5xfp6oe rMmSshNpEmetOTbYmkK+mnsrcD1zpbFG/NNpY5D3jcWYJjA3AJx498MiVOFEyaMv 4ISIOW/3ntym63zjwTzN68djMN/awIg0yRoWPAZSukKzuPjbeOjIKktUFw3/2qgN Yml1w3PAxVVxTEGPe4PL7KaBgEPcI0y+pbqFDKtiBy0y6dD0z/sohc2qrCqvyDLD E/0iyyIqEdAOXIFEu+YQMeopbBeCK4/d+4TyeHg5bHMl3d428FiAVph29wXvpMzA MLeCDZE/ykxJxR43ik2xkh5DpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATbk3Ra gpsCfXsT34RRWenttx43MB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF/X7eu20z0GNRKl5qUC2SzTKTzOQWLcaESXmHHIFVImyZp8ASUYpU dbo9ALOTWOJv1qdv/Dn5fWh1Ufda+TpJ0OpPLa/ONGOHBfjeXHBWitUwoDfKu+kg 3TRYvB1ZJ2yuNFjR7r3UAQYApQznSd1n5TMdBuFSsPkT9o8E9GVJwNqAcYS+wYVC 9yc7M1WJJBhctYDDwZY8li4n4hqXbJqRLl7KSkYrFvGXFK59gQqbEnQV9Tj8hfCK cZXwJEwq6cADVpchT0LSPI8B5sJLrBRFCbayFr1UXKG0cUSZkXT6tLDChCLHRrjc HhmJ1MQYsFT7Ndm60aWGFJLNegUNnJUo -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:57 2025 by rpki-client