This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: PGCDyb/mqG2M0/RGso70f3neaXe3ybZPt5zXXipDQno= Subject key identifier: 15:AA:01:59:5B:21:31:33:01:0A:41:89:F1:32:71:3F:92:B2:D6:89 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 0410 Signing time: Sat 06 Dec 2025 23:04:57 +0000 Manifest this update: Sat 06 Dec 2025 23:04:57 +0000 Manifest next update: Sat 13 Dec 2025 23:04:57 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: 26uKa6Jpc8fnLeyKf1C9uiIMHjnAwL/QjUcJkP0ldPw=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Dec 6 23:04:57 2025 GMT Not After : Dec 13 23:04:57 2025 GMT Subject: CN=6934b699-39b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:6d:1d:ee:2b:75:85:40:a8:8d:95:0e:4a: 8d:81:27:b5:7c:ad:00:33:18:cd:70:50:e3:2a:b5: 01:fb:a6:ae:7f:1c:12:b1:77:bd:a0:31:ed:a0:16: 87:79:b9:65:a5:4a:a1:97:71:6f:85:e9:3c:b1:62: 33:e7:17:95:de:55:0d:bf:5b:3c:a8:00:e0:5c:fd: 57:5c:5c:d6:a7:7f:14:fd:58:5d:6a:0c:6a:e8:64: 71:61:e3:56:ac:ed:57:14:ea:32:09:8f:f7:a5:a5: 21:90:38:46:50:1a:00:0b:a8:02:78:82:b3:05:59: 8b:4f:11:3c:0d:87:0c:1c:b0:71:60:55:0b:e3:ec: a3:50:00:61:1e:c1:a4:f6:eb:96:60:51:bb:1f:af: e8:ad:65:a5:41:80:52:5e:ee:d3:55:45:1b:b2:8b: 3f:2b:cc:de:27:c3:f5:20:53:ae:84:db:23:7c:42: 53:7c:56:bc:c6:f3:9a:01:ef:0b:40:e4:3b:db:e8: d6:35:35:7b:97:a2:fb:87:b5:26:8c:47:8c:5b:25: 58:33:2d:d8:d6:1a:29:c7:4d:1d:fa:46:f7:46:1f: 07:c2:d9:e7:96:1a:3c:c7:ec:d4:98:d2:6b:51:55: 48:5d:91:f8:d4:91:9d:d8:49:72:15:56:91:7f:4f: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AA:01:59:5B:21:31:33:01:0A:41:89:F1:32:71:3F:92:B2:D6:89 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:97:46:77:c8:56:71:8e:04:70:be:dc:04:fc:e3:21:01: 06:b9:d3:80:3c:98:c4:48:89:a1:63:8b:ac:a0:34:cd:f6:9a: e0:62:73:0d:5f:28:b4:ce:06:c2:0f:93:62:6d:ff:2c:84:0e: 74:59:a4:81:71:29:4a:85:0f:42:61:62:36:60:00:76:67:d1: 11:95:06:eb:be:0f:a3:9b:b2:1a:42:2c:fa:80:71:15:e4:b7: 58:1b:6c:47:74:42:50:1b:62:7e:1a:a6:4b:2b:39:ad:4f:d0: 7f:5a:6e:b7:43:3f:e4:5e:75:af:03:13:2e:7c:89:26:80:b8: 9d:59:77:c8:17:4b:cf:ac:46:70:a4:a1:89:8e:62:5d:eb:ce: b3:8c:0b:dd:52:90:b4:48:eb:d9:e6:7b:6a:2c:d0:46:ee:e1: 1a:0f:97:14:f5:a0:8a:ab:1f:3a:2d:a0:56:d9:15:99:c2:02: c8:50:69:ff:99:e5:ce:00:44:f2:ea:9e:4b:f1:93:7a:91:b0: 54:68:64:0f:bc:e2:cd:67:3b:6b:26:57:e6:c6:f5:93:ac:82: e0:5b:7c:e6:94:2e:2f:fe:db:2f:ab:7c:37:3c:58:8e:7f:87: c4:68:64:23:af:40:39:c9:6f:a1:a9:3e:de:0f:0e:cf:74:aa: 01:22:8f:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUxMjA2MjMwNDU3WhcNMjUxMjEzMjMwNDU3WjAYMRYwFAYD VQQDEw02OTM0YjY5OS0zOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKdtHe4rdYVAqI2VDkqNgSe1fK0AMxjNcFDjKrUB+6aufxwSsXe9oDHtoBaH ebllpUqhl3Fvhek8sWIz5xeV3lUNv1s8qADgXP1XXFzWp38U/Vhdagxq6GRxYeNW rO1XFOoyCY/3paUhkDhGUBoAC6gCeIKzBVmLTxE8DYcMHLBxYFUL4+yjUABhHsGk 9uuWYFG7H6/orWWlQYBSXu7TVUUbsos/K8zeJ8P1IFOuhNsjfEJTfFa8xvOaAe8L QOQ72+jWNTV7l6L7h7UmjEeMWyVYMy3Y1hopx00d+kb3Rh8Hwtnnlho8x+zUmNJr UVVIXZH41JGd2ElyFVaRf09QaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWqAVlb ITEzAQpBifEycT+SstaJMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQpZdGd8hWcY4EcL7cBPzjIQEGudOAPJjESImhY4usoDTN9prgYnMN Xyi0zgbCD5Nibf8shA50WaSBcSlKhQ9CYWI2YAB2Z9ERlQbrvg+jm7IaQiz6gHEV 5LdYG2xHdEJQG2J+GqZLKzmtT9B/Wm63Qz/kXnWvAxMufIkmgLidWXfIF0vPrEZw pKGJjmJd686zjAvdUpC0SOvZ5ntqLNBG7uEaD5cU9aCKqx86LaBW2RWZwgLIUGn/ meXOAETy6p5L8ZN6kbBUaGQPvOLNZztrJlfmxvWTrILgW3zmlC4v/tsvq3w3PFiO f4fEaGQjr0A5yW+hqT7eDw7PdKoBIo/L -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:29 2025 by rpki-client