This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: XDUaJ5CV+RFpMnESKJQW0Q0WOTEsaZI3B9ZfT5akRoI= Subject key identifier: C2:A3:40:F2:64:04:08:6D:0A:70:DC:08:85:34:6A:A1:BB:D1:8D:C2 Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 1339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 1327 Signing time: Sat 06 Dec 2025 16:33:47 +0000 Manifest this update: Sat 06 Dec 2025 16:33:46 +0000 Manifest next update: Sat 13 Dec 2025 16:33:46 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: 9B+2QZcD+VaP3kDK6nCAbw8SHb80/W4970cj9ACbfbI=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: 0/XyD86MMGDFZWji3u5g4rHGi/klL7pxbtniJ4b3GEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4921 (0x1339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Dec 6 16:33:46 2025 GMT Not After : Dec 13 16:33:46 2025 GMT Subject: CN=69345aeb-e5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:68:c0:03:01:11:13:e0:16:83:26:cc:c7: 7a:23:5e:c0:1e:c9:37:14:ff:93:5a:78:6c:51:14: c1:2f:33:99:fa:f9:a8:01:50:84:95:3a:c8:4b:cd: a7:65:0c:73:2c:a1:fa:92:fa:c3:9f:ee:91:ee:1a: 40:0f:a2:64:0e:f3:d6:1f:f8:fc:59:68:fc:47:e4: b9:a9:21:4e:e2:0a:f4:86:4d:96:40:6c:61:3f:5f: 77:68:3b:80:c6:39:2c:73:f5:de:be:0b:8e:55:68: b9:c7:8b:da:16:86:24:c8:c1:d8:28:35:a8:dc:1e: 61:6a:2c:2c:b7:fd:28:e4:c1:1f:51:96:7f:ca:ff: bf:96:32:d4:fb:df:b4:91:7f:42:6a:d1:94:ce:1d: 2e:86:8e:96:89:45:61:c6:83:8e:86:0f:2c:72:60: dc:02:7a:ad:ff:5c:06:3e:3f:9a:23:84:e5:0b:e9: 1f:f0:e3:01:43:6f:1f:82:50:95:e2:18:4e:f1:ad: c0:6d:d4:f7:24:6c:dc:44:59:7f:a3:a7:fe:76:1d: 8b:ea:65:9d:d7:9c:21:9e:35:7b:c5:f9:9a:ea:f2: aa:ad:0d:f6:e0:de:64:83:f8:97:c0:c5:08:ad:90: 0f:1e:1c:ca:68:a6:83:b0:1a:61:c7:22:89:2a:8d: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:40:F2:64:04:08:6D:0A:70:DC:08:85:34:6A:A1:BB:D1:8D:C2 X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:48:98:80:1a:c1:ef:a0:d6:7b:ec:47:53:85:f1:4e:93:ba: e2:00:0b:c3:a3:cc:d2:bf:9d:ed:a9:19:28:4a:40:54:53:dd: 5d:46:a6:6c:8d:45:d1:50:ae:4f:9e:a1:2a:82:27:91:e1:f0: 63:1c:2c:2d:ac:de:72:ac:34:00:70:d2:27:26:0b:a2:7c:83: b4:df:ce:34:0b:30:13:b1:32:9b:11:8f:4b:6f:09:bd:d7:8f: 8f:d1:b1:cb:8d:6b:29:47:28:34:e6:c4:24:7c:19:e1:34:26: 45:cc:32:7b:1a:f5:8e:3d:f2:8b:fd:84:ec:b0:fb:53:cd:c8: 09:93:ea:23:7e:0a:4a:cd:5b:f2:76:b2:fb:b5:8b:a4:cf:6a: 28:b2:4a:22:50:e5:b4:24:12:98:b7:69:a0:73:5b:a2:4a:e1: ec:a2:fe:00:fd:21:4f:d5:23:89:ee:65:82:30:07:59:ee:0d: 55:b2:7e:03:ab:6d:14:25:a3:66:b2:9c:50:c3:9d:0f:71:fc: d5:5b:23:19:cb:6a:62:90:82:ff:3a:68:3a:54:7b:ec:85:24: a9:7e:9b:4d:e2:b1:c9:8d:6e:45:b9:11:18:2c:96:a6:e1:69: 82:b2:39:b8:12:0d:9b:8b:cc:69:c4:b7:a6:38:ec:29:b2:fd: 9f:e1:7e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjUxMjA2MTYzMzQ2WhcNMjUxMjEzMTYzMzQ2WjAYMRYwFAYD VQQDEw02OTM0NWFlYi1lNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iVowAMBERPgFoMmzMd6I17AHsk3FP+TWnhsURTBLzOZ+vmoAVCElTrIS82n ZQxzLKH6kvrDn+6R7hpAD6JkDvPWH/j8WWj8R+S5qSFO4gr0hk2WQGxhP193aDuA xjksc/XevguOVWi5x4vaFoYkyMHYKDWo3B5haiwst/0o5MEfUZZ/yv+/ljLU+9+0 kX9CatGUzh0uho6WiUVhxoOOhg8scmDcAnqt/1wGPj+aI4TlC+kf8OMBQ28fglCV 4hhO8a3AbdT3JGzcRFl/o6f+dh2L6mWd15whnjV7xfma6vKqrQ324N5kg/iXwMUI rZAPHhzKaKaDsBphxyKJKo1cEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKjQPJk BAhtCnDcCIU0aqG70Y3CMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmSJiAGsHvoNZ77EdThfFOk7riAAvDo8zSv53tqRkoSkBUU91dRqZs jUXRUK5PnqEqgieR4fBjHCwtrN5yrDQAcNInJguifIO03840CzATsTKbEY9Lbwm9 14+P0bHLjWspRyg05sQkfBnhNCZFzDJ7GvWOPfKL/YTssPtTzcgJk+ojfgpKzVvy drL7tYukz2ooskoiUOW0JBKYt2mgc1uiSuHsov4A/SFP1SOJ7mWCMAdZ7g1Vsn4D q20UJaNmspxQw50PcfzVWyMZy2pikIL/Omg6VHvshSSpfptN4rHJjW5FuREYLJam 4WmCsjm4Eg2bi8xpxLemOOwpsv2f4X5e -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:26 2025 by rpki-client