This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: qUuCJ1YBzvs3/J4r0Vj7YHk/M4a6K4h8t3EhKktyhec= Subject key identifier: 56:7D:46:AC:66:2F:DE:84:D1:35:65:72:DE:68:81:F3:6F:83:E9:6E Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 0285 Signing time: Sun 07 Dec 2025 00:08:22 +0000 Manifest this update: Sun 07 Dec 2025 00:08:21 +0000 Manifest next update: Sun 14 Dec 2025 00:08:21 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: Tg2yvqBOaRFgZp9pGqx8+3SQGRa4YquO/TJ49xY7qx8=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: Dec 7 00:08:21 2025 GMT Not After : Dec 14 00:08:21 2025 GMT Subject: CN=6934c576-04bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ef:62:51:67:66:db:fb:54:2c:af:0c:34:95: a8:f4:34:4f:6c:ff:6d:e3:1b:f3:7a:53:ea:62:b7: 07:3a:ee:b3:bb:8b:84:da:22:4e:88:e0:df:81:38: 5c:0f:5f:45:a7:17:8a:dc:e5:78:15:eb:d1:dd:5b: 79:06:51:8f:56:48:a5:4e:85:ed:df:6e:d2:f6:c4: c4:bf:24:ff:74:5c:a4:38:8c:55:4a:e2:fc:28:0c: 39:9f:da:a9:b1:22:32:98:74:4c:71:d3:99:0b:4b: 85:58:50:a9:57:fd:fb:dd:f4:4c:af:a9:f7:1f:45: 26:61:d6:cb:e6:e1:69:3d:54:a8:3d:d0:fd:50:49: 39:aa:2f:2f:b8:6d:70:0c:f0:5a:7f:f4:d5:5f:29: b4:58:01:d2:a0:8e:03:f3:53:ed:53:2d:5e:70:1e: fb:59:26:62:1f:ab:63:89:a7:fb:71:ba:42:5c:e7: f8:61:fc:70:b5:64:59:57:88:4a:f0:0d:c9:d8:78: 9d:ec:a8:db:fe:c1:80:11:f3:8d:1b:18:56:27:37: 52:a4:4d:10:c0:a5:29:0c:1b:30:3a:ea:32:7f:f1: 0d:94:e0:1a:6c:4e:9d:71:c8:c1:78:3c:16:bf:8d: da:d7:c5:e7:fb:fc:09:fb:71:be:6b:89:fb:25:de: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:46:AC:66:2F:DE:84:D1:35:65:72:DE:68:81:F3:6F:83:E9:6E X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ed:39:4c:b0:7a:13:04:b4:f1:37:5c:3d:8e:93:a2:24:6f: 1a:09:5c:74:ee:27:c1:8b:58:f7:e9:8a:71:9f:90:64:2d:fe: 3d:9c:b5:5a:2b:ea:90:51:db:76:fe:3a:9b:e3:66:05:bc:24: 34:83:aa:d4:bd:8c:37:b2:fd:f4:2d:22:7c:9b:c8:67:d5:79: a9:dd:68:10:be:b7:d9:c8:fb:9a:3f:1a:59:db:e0:99:32:c3: 27:7a:fb:66:6d:18:80:eb:3f:6c:05:e6:a9:9b:ae:85:b1:14: 59:0d:c1:31:f5:32:4c:35:59:24:8a:b5:4c:10:c1:71:43:1b: dd:ec:50:d0:e6:28:cb:a7:27:49:9f:77:a7:5b:b5:27:b5:41: 5f:14:aa:51:07:cb:42:88:d1:d9:6e:87:8a:91:23:22:41:76: 0f:f5:8b:cd:d0:6a:d3:b8:71:b3:8b:2c:5f:1f:c9:3a:2c:d2: 83:f9:cd:d5:e4:0a:9a:a3:2d:e2:e1:fd:cc:ca:32:b2:76:61: 49:67:a8:ea:94:5d:eb:43:ac:5a:75:84:e0:6d:bf:ef:07:a7: ee:0a:5b:30:81:5c:ae:7a:0c:0a:d4:a4:6a:ad:ba:39:ea:5a: d9:3f:04:63:e8:ad:de:0f:68:b4:cf:61:7f:78:1a:d7:4f:41: c2:22:f8:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjUxMjA3MDAwODIxWhcNMjUxMjE0MDAwODIxWjAYMRYwFAYD VQQDEw02OTM0YzU3Ni0wNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5O9iUWdm2/tULK8MNJWo9DRPbP9t4xvzelPqYrcHOu6zu4uE2iJOiODfgThc D19FpxeK3OV4FevR3Vt5BlGPVkilToXt327S9sTEvyT/dFykOIxVSuL8KAw5n9qp sSIymHRMcdOZC0uFWFCpV/373fRMr6n3H0UmYdbL5uFpPVSoPdD9UEk5qi8vuG1w DPBaf/TVXym0WAHSoI4D81PtUy1ecB77WSZiH6tjiaf7cbpCXOf4YfxwtWRZV4hK 8A3J2Hid7Kjb/sGAEfONGxhWJzdSpE0QwKUpDBswOuoyf/ENlOAabE6dccjBeDwW v43a18Xn+/wJ+3G+a4n7Jd615wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ9Rqxm L96E0TVlct5ogfNvg+luMB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb7TlMsHoTBLTxN1w9jpOiJG8aCVx07ifBi1j36Ypxn5BkLf49nLVa K+qQUdt2/jqb42YFvCQ0g6rUvYw3sv30LSJ8m8hn1Xmp3WgQvrfZyPuaPxpZ2+CZ MsMnevtmbRiA6z9sBeapm66FsRRZDcEx9TJMNVkkirVMEMFxQxvd7FDQ5ijLpydJ n3enW7UntUFfFKpRB8tCiNHZboeKkSMiQXYP9YvN0GrTuHGziyxfH8k6LNKD+c3V 5Aqaoy3i4f3MyjKydmFJZ6jqlF3rQ6xadYTgbb/vB6fuClswgVyuegwK1KRqrbo5 6lrZPwRj6K3eD2i0z2F/eBrXT0HCIvg3 -----END CERTIFICATE-----Generated at Sun Dec 7 04:50:28 2025 by rpki-client