This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: p+mzgrjw2bR9gvsQV4HoA7WppOgLKLsdb4ltm2AySHU= Subject key identifier: B0:62:5E:A1:C9:37:5A:73:C7:2E:57:40:23:A8:59:D0:8B:CD:D9:86 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 017E Signing time: Fri 05 Dec 2025 01:51:38 +0000 Manifest this update: Fri 05 Dec 2025 01:51:38 +0000 Manifest next update: Fri 12 Dec 2025 01:51:38 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: 6DeK6SAUPW5ol6KSATCZHYwnhTbEFkfZMUYzLPof/5c=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Dec 5 01:51:38 2025 GMT Not After : Dec 12 01:51:38 2025 GMT Subject: CN=69323aaa-1b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:1d:e6:09:ce:6d:b9:e6:3c:3a:93:bf:26: 37:bf:5a:84:22:f0:cf:d6:ee:3c:e8:3c:5a:f1:57: 41:a1:06:51:79:a9:d0:75:e0:df:a5:bf:74:db:82: 34:89:25:6e:51:51:1c:b5:59:8e:b1:47:75:9b:26: 75:67:2a:7e:7a:8f:14:03:02:c2:32:8e:86:ef:d6: 94:71:c0:d3:ab:c9:4a:06:19:e4:47:b5:f4:8d:cb: 76:bc:c8:17:33:30:db:25:28:97:3a:86:6b:b0:3c: 91:09:4f:fc:1f:a4:f4:00:76:2e:70:80:ca:a2:a4: ad:61:18:e8:7b:f5:8d:8b:13:b5:f6:60:98:b0:8c: 7b:8c:7d:6b:72:6b:0d:08:8d:ca:71:4d:3e:68:9d: 2a:1d:61:86:76:13:f8:2a:75:b9:6b:1e:df:1d:08: 20:16:e7:87:1a:b4:e7:58:39:54:34:ef:12:24:6e: d8:d0:7e:be:1e:f3:26:5e:6b:e2:69:11:77:2b:fc: 33:71:77:b3:35:f5:a1:da:e5:b2:dd:81:a7:73:de: 38:0c:eb:fa:1d:57:16:6e:3b:3e:3a:53:11:13:82: 3b:d7:61:80:99:0d:51:9a:f7:82:23:43:8f:b6:00: 54:eb:18:90:5c:07:a1:f7:88:80:3b:49:07:ce:af: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:62:5E:A1:C9:37:5A:73:C7:2E:57:40:23:A8:59:D0:8B:CD:D9:86 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4d:c5:79:0e:2e:d1:63:aa:d8:32:b5:48:23:ae:4b:94:8a: 4a:d2:03:ad:05:10:cb:42:db:90:f4:84:d9:9e:d4:56:3a:e2: 73:d8:3e:bf:13:97:cd:2e:45:50:91:58:c3:67:16:3b:f2:c3: 2f:73:f9:19:05:b1:20:c2:f7:ad:c7:98:37:32:00:03:e1:7a: 55:f4:ef:2c:51:2b:e0:6c:58:2d:ea:74:35:a9:f7:70:bd:b0: a3:03:1a:e7:5e:f8:a6:59:48:fb:c6:1d:a5:47:61:c6:10:7a: 53:fc:35:70:5e:bf:71:d5:9d:61:1a:f9:8b:cd:b7:36:86:59: 1e:5b:ca:54:3e:0a:0d:ec:e9:72:51:08:96:51:4e:b4:3b:cc: aa:5e:a6:88:c3:d5:7b:76:56:84:4f:bb:15:82:be:d2:f9:35: 95:50:2f:d6:97:c6:eb:b8:02:6c:16:58:d6:10:eb:45:98:27: af:20:61:7a:be:27:d7:56:56:55:2c:40:fb:3a:81:75:c5:7d: ac:23:d8:d9:30:ce:38:63:32:a1:17:03:de:f1:7e:8f:8e:a2: 7b:1e:54:b6:88:4d:b1:3b:3e:22:cc:e0:27:95:c3:4a:e8:0e: 8a:3c:86:47:62:90:c2:3e:04:08:e5:f0:61:e6:4a:a5:3f:79: 23:e7:2d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUxMjA1MDE1MTM4WhcNMjUxMjEyMDE1MTM4WjAYMRYwFAYD VQQDEw02OTMyM2FhYS0xYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkEd5gnObbnmPDqTvyY3v1qEIvDP1u486Dxa8VdBoQZReanQdeDfpb9024I0 iSVuUVEctVmOsUd1myZ1Zyp+eo8UAwLCMo6G79aUccDTq8lKBhnkR7X0jct2vMgX MzDbJSiXOoZrsDyRCU/8H6T0AHYucIDKoqStYRjoe/WNixO19mCYsIx7jH1rcmsN CI3KcU0+aJ0qHWGGdhP4KnW5ax7fHQggFueHGrTnWDlUNO8SJG7Y0H6+HvMmXmvi aRF3K/wzcXezNfWh2uWy3YGnc944DOv6HVcWbjs+OlMRE4I712GAmQ1RmveCI0OP tgBU6xiQXAeh94iAO0kHzq8N7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBiXqHJ N1pzxy5XQCOoWdCLzdmGMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHTcV5Di7RY6rYMrVII65LlIpK0gOtBRDLQtuQ9ITZntRWOuJz2D6/ E5fNLkVQkVjDZxY78sMvc/kZBbEgwvetx5g3MgAD4XpV9O8sUSvgbFgt6nQ1qfdw vbCjAxrnXvimWUj7xh2lR2HGEHpT/DVwXr9x1Z1hGvmLzbc2hlkeW8pUPgoN7Oly UQiWUU60O8yqXqaIw9V7dlaET7sVgr7S+TWVUC/Wl8bruAJsFljWEOtFmCevIGF6 vifXVlZVLED7OoF1xX2sI9jZMM44YzKhFwPe8X6PjqJ7HlS2iE2xOz4izOAnlcNK 6A6KPIZHYpDCPgQI5fBh5kqlP3kj5y0o -----END CERTIFICATE-----Generated at Sat Dec 6 18:49:02 2025 by rpki-client