This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json) Hash identifier: +pIyp7/LzCBGB2y1w2BLkUgWME8u1ilZsdlP0yKSQ0w= Subject key identifier: D2:46:C5:52:8C:46:C4:F7:13:79:E5:C1:48:30:FB:75:C7:9A:96:25 Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft Manifest number: 01C1 Signing time: Sun 21 Dec 2025 02:13:39 +0000 Manifest this update: Sun 21 Dec 2025 02:13:39 +0000 Manifest next update: Sun 28 Dec 2025 02:13:39 +0000 Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: gpBH4AA6abT9du1SraLf0jCj4yX2iNyzohbd6I96H3k=) 2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: gPmbtMjtLenMFEAnNmFzzGl8ckVYYI4uHTkTnXpU64U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Validity Not Before: Dec 21 02:13:39 2025 GMT Not After : Dec 28 02:13:39 2025 GMT Subject: CN=694757d3-c695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:02:b1:89:0d:72:f8:84:de:53:fe:ee:3c:a4: af:81:42:b5:5c:2e:e2:83:c7:6d:f2:d3:6a:b2:84: ca:e4:4b:2c:5b:f3:ae:9e:5a:3a:4b:77:ca:9f:ec: b3:41:6d:97:9d:fa:1e:12:cb:19:1c:05:e6:6c:c2: 5d:c5:6e:0b:9a:4f:e1:4b:b2:88:9f:b0:05:07:9b: d2:75:53:0e:d1:a4:9c:33:cb:3f:98:e2:be:79:8e: 0b:cf:02:34:0f:36:3f:a2:61:df:2c:18:e1:30:d7: 89:4e:6c:97:80:75:99:21:79:c2:88:72:0f:b8:c1: 91:6e:af:dd:b8:a6:15:7b:3e:49:45:f7:b1:3d:32: 0c:c6:06:24:44:4e:cc:ec:00:a7:88:db:33:94:84: 13:d5:90:f4:5c:5a:7f:cd:f0:f9:f3:ec:a4:8a:8b: 83:d2:90:10:95:e8:4b:70:fb:5e:29:4e:77:eb:fd: e6:3c:68:a6:d9:0c:ff:0e:08:7f:80:8f:ac:fe:bf: 37:6a:35:f0:9d:16:c1:db:f6:53:72:b9:a3:3f:2d: 4f:82:98:e8:27:06:1d:90:24:6c:79:d7:da:51:eb: 66:f6:c0:57:f0:6f:75:4f:99:a6:d3:99:5b:2e:e4: f4:61:94:80:e2:70:ff:ec:16:3e:43:e2:5d:06:bc: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:46:C5:52:8C:46:C4:F7:13:79:E5:C1:48:30:FB:75:C7:9A:96:25 X509v3 Authority Key Identifier: keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a7:d1:e1:9c:bd:03:69:d8:f1:a3:2e:54:55:07:c3:e4:61: 11:b7:f9:62:ac:87:39:4e:d7:76:d9:75:a9:76:ab:35:88:d3: 26:7d:d4:4a:f4:76:db:7a:c3:64:f8:ec:02:c7:5f:d1:4a:74: 11:4b:e2:ae:57:e1:52:08:ee:65:89:6c:53:48:47:16:6b:8f: 87:e9:09:59:9f:1d:b8:16:9f:f2:1f:d4:10:87:72:1d:44:fa: 74:c9:13:92:02:5e:d0:b0:4f:95:04:82:d9:c9:61:e3:b6:24: 96:36:c3:c8:6b:60:97:f2:2c:03:13:96:79:f7:c5:9b:c6:72: 4f:62:df:48:3b:46:f1:b8:d3:f5:c8:82:fe:32:b7:ca:6b:c4: ef:c8:5e:5f:89:c7:48:a5:00:24:72:ab:29:37:6b:ad:17:c8: 04:6a:c4:23:75:ea:98:10:06:e0:3d:9e:2d:2a:1d:e7:94:7f: 0c:3e:3a:1f:b9:dd:8b:7c:5c:99:14:0b:1f:4d:2b:2f:95:a4: 64:ba:21:68:52:0c:39:21:bb:91:ef:b7:62:fa:a3:41:90:bf: fc:49:4d:c1:af:f9:1d:d3:0d:5f:17:a6:8c:81:7c:0b:ab:ee: 36:09:be:e8:ea:d6:66:07:fd:73:38:17:76:0d:ef:c4:30:28: 15:8d:82:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJGNzgyOUFCNkQ5 RDAzNDA5MDUwHhcNMjUxMjIxMDIxMzM5WhcNMjUxMjI4MDIxMzM5WjAYMRYwFAYD VQQDDA02OTQ3NTdkMy1jNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgwKxiQ1y+ITeU/7uPKSvgUK1XC7ig8dt8tNqsoTK5EssW/Ounlo6S3fKn+yz QW2XnfoeEssZHAXmbMJdxW4Lmk/hS7KIn7AFB5vSdVMO0aScM8s/mOK+eY4LzwI0 DzY/omHfLBjhMNeJTmyXgHWZIXnCiHIPuMGRbq/duKYVez5JRfexPTIMxgYkRE7M 7ACniNszlIQT1ZD0XFp/zfD58+ykiouD0pAQlehLcPteKU536/3mPGim2Qz/Dgh/ gI+s/r83ajXwnRbB2/ZTcrmjPy1PgpjoJwYdkCRsedfaUetm9sBX8G91T5mm05lb LuT0YZSA4nD/7BY+Q+JdBrxeyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJGxVKM RsT3E3nlwUgw+3XHmpYlMB8GA1UdIwQYMBaAFONfdBnVcqhvdtLr94KattnQNAkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGNS8zM0Y3MjU4NjJE MTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFHOTIwdXYzZ3BxMjJkQTBD UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxOTBHZFZ5cUc5MjB1djNncHEyMmRBMENRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFH OTIwdXYzZ3BxMjJkQTBDUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGp9HhnL0Dadjxoy5UVQfD5GERt/lirIc5Ttd22XWpdqs1iNMmfdRK 9HbbesNk+OwCx1/RSnQRS+KuV+FSCO5liWxTSEcWa4+H6QlZnx24Fp/yH9QQh3Id RPp0yROSAl7QsE+VBILZyWHjtiSWNsPIa2CX8iwDE5Z598WbxnJPYt9IO0bxuNP1 yIL+MrfKa8TvyF5ficdIpQAkcqspN2utF8gEasQjdeqYEAbgPZ4tKh3nlH8MPjof ud2LfFyZFAsfTSsvlaRkuiFoUgw5IbuR77di+qNBkL/8SU3Br/kd0w1fF6aMgXwL q+42Cb7o6tZmB/1zOBd2De/EMCgVjYKb -----END CERTIFICATE-----Generated at Sun Dec 21 17:28:13 2025 by rpki-client