This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: Pi2IIzVuX8tPSgJGG5So9udWM0fEU0997e/Vi/vQKwc= Subject key identifier: 5A:1F:CD:D4:25:1A:D1:6B:61:2C:30:68:26:D8:7B:23:00:BC:DE:6F Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: EC Signing time: Fri 05 Dec 2025 03:27:57 +0000 Manifest this update: Fri 05 Dec 2025 03:27:57 +0000 Manifest next update: Fri 12 Dec 2025 03:27:57 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: v6FcI6YObeTXc0sVnlQovBthS9vZGbakfX0aXFU7HB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Dec 5 03:27:57 2025 GMT Not After : Dec 12 03:27:57 2025 GMT Subject: CN=6932513d-a870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:ca:bb:5c:10:2c:6f:c1:23:dd:0a:4e:ac: 99:57:77:2e:4f:34:54:f6:91:4f:9e:ab:9c:35:f9: 90:02:10:a5:bf:93:63:91:31:2b:7a:5a:6b:1d:e9: 9b:0f:f6:3c:ef:d9:35:41:85:a0:c5:f5:5b:5a:77: 08:32:fa:41:0c:28:3c:ae:33:f7:01:4a:97:1a:81: 82:bd:c4:1c:7a:e5:e7:31:75:19:be:76:87:d5:09: 5a:62:43:67:cf:32:50:d9:e6:42:6b:4a:89:34:ec: 09:e7:af:a9:db:d9:83:38:cc:3b:ff:e6:a0:1e:b6: 7a:41:ad:00:ff:29:f5:81:71:bc:95:dc:2d:78:2c: 4f:ed:0b:11:3e:0e:b3:17:e1:c6:b6:dd:44:5a:9d: 00:9d:0d:83:32:d0:e8:5f:21:b0:37:36:74:75:55: b2:5a:4a:b2:b0:e6:1c:b6:16:4e:0d:66:16:37:1e: 63:58:4e:74:d7:22:6c:26:96:9b:58:18:26:47:be: a5:bf:ec:8e:43:ba:d1:b5:cd:7c:bb:f0:eb:77:f6: 78:7b:3e:45:ce:ba:6b:a8:5f:5b:ca:85:49:53:8e: 2a:7c:70:f8:e3:b5:d2:b2:64:ba:61:66:4a:60:ec: 52:34:78:d4:9e:77:34:27:d8:d9:a2:b2:69:49:0d: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1F:CD:D4:25:1A:D1:6B:61:2C:30:68:26:D8:7B:23:00:BC:DE:6F X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d1:05:f4:02:2f:c3:6a:fe:fd:51:9a:65:2a:91:45:25:3b: e9:95:5c:6b:33:16:e5:25:26:5f:7b:b9:e3:36:e9:1c:76:43: 35:9d:70:18:f0:a5:9d:6c:61:35:fc:1b:44:aa:b2:40:ce:af: 44:c6:7f:db:c5:51:ad:b3:88:83:42:bd:de:7c:d3:ca:ad:0a: 3d:84:1a:4f:20:e2:9e:11:d4:7a:43:66:f0:14:40:13:91:63: 31:6c:6d:08:77:d9:18:cf:1e:69:1f:47:04:18:ac:12:4f:14: 33:2b:ee:a2:17:a7:1f:39:32:a0:50:26:f5:e0:8c:76:3e:8c: cc:0b:c8:d5:88:cc:46:c3:68:83:64:81:dc:42:9d:48:09:28: a1:28:44:7e:87:de:ae:49:2c:55:52:4e:86:1c:56:81:ed:94: 67:ab:f0:b2:9b:dc:f6:11:dc:82:a4:be:04:69:e9:f7:a4:ec: af:9e:95:ac:92:69:cc:26:88:cb:0c:0d:30:7f:e8:cc:c8:f8: ba:d1:c3:df:18:83:53:fc:8d:df:80:d4:c4:be:8c:dd:c9:3f: 03:af:03:7c:de:32:4e:1a:97:08:09:83:38:80:e4:99:7f:4e: 81:ba:d7:1f:7b:aa:8f:59:2a:ea:b4:a4:bd:0e:d6:fd:ea:c5: 34:17:be:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB MkJEMDQyNzIwHhcNMjUxMjA1MDMyNzU3WhcNMjUxMjEyMDMyNzU3WjAYMRYwFAYD VQQDEw02OTMyNTEzZC1hODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBzKu1wQLG/BI90KTqyZV3cuTzRU9pFPnqucNfmQAhClv5NjkTErelprHemb D/Y879k1QYWgxfVbWncIMvpBDCg8rjP3AUqXGoGCvcQceuXnMXUZvnaH1QlaYkNn zzJQ2eZCa0qJNOwJ56+p29mDOMw7/+agHrZ6Qa0A/yn1gXG8ldwteCxP7QsRPg6z F+HGtt1EWp0AnQ2DMtDoXyGwNzZ0dVWyWkqysOYcthZODWYWNx5jWE501yJsJpab WBgmR76lv+yOQ7rRtc18u/Drd/Z4ez5FzrprqF9byoVJU44qfHD447XSsmS6YWZK YOxSNHjUnnc0J9jZorJpSQ2F1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFofzdQl GtFrYSwwaCbYeyMAvN5vMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh VFJkUlpYaGdSMk9pdlFRbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy0QX0Ai/Dav79UZplKpFFJTvplVxrMxblJSZfe7njNukcdkM1nXAY 8KWdbGE1/BtEqrJAzq9Exn/bxVGts4iDQr3efNPKrQo9hBpPIOKeEdR6Q2bwFEAT kWMxbG0Id9kYzx5pH0cEGKwSTxQzK+6iF6cfOTKgUCb14Ix2PozMC8jViMxGw2iD ZIHcQp1ICSihKER+h96uSSxVUk6GHFaB7ZRnq/Cym9z2EdyCpL4Eaen3pOyvnpWs kmnMJojLDA0wf+jMyPi60cPfGINT/I3fgNTEvozdyT8DrwN83jJOGpcICYM4gOSZ f06Butcfe6qPWSrqtKS9Dtb96sU0F76E -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:36 2025 by rpki-client