This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: /WsYDmO/DDqRYHWOE9/+6cy3I07Ccb5oURnZgHttqXs= Subject key identifier: 21:9F:05:E2:44:8E:45:26:D0:CC:E3:02:73:9A:C3:48:8B:D8:0F:46 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 0924 Signing time: Sat 06 Dec 2025 19:26:22 +0000 Manifest this update: Sat 06 Dec 2025 19:26:21 +0000 Manifest next update: Sat 13 Dec 2025 19:26:21 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: uBbPguZom4fz0KlvoUxoZohL4tEwejLMG+exQrZ/Oq4=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Dec 6 19:26:21 2025 GMT Not After : Dec 13 19:26:21 2025 GMT Subject: CN=6934835e-3162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:04:60:9f:86:21:da:15:2f:7a:89:63:cf: 8e:26:66:88:3b:2a:a9:8c:81:51:d8:21:16:ab:97: 7b:c2:4f:65:5e:97:78:e2:89:7d:f0:cc:68:c7:ee: 98:16:23:13:ec:9e:6a:62:e9:14:f6:34:d6:1f:d0: 34:10:c7:1c:69:9a:c2:59:80:a1:24:ab:1e:00:58: 8b:e4:f4:da:3c:65:78:34:1d:d9:72:24:0b:2f:fd: ab:c2:24:ce:e8:62:18:63:00:f0:bd:50:0a:f0:32: f7:9e:ab:78:e0:88:0b:e5:05:de:77:29:3f:d2:3b: 3b:32:98:89:20:1d:5f:3c:75:1d:7f:8c:d3:67:42: 25:d5:85:fd:e5:b6:4b:88:02:9f:ae:dc:94:22:aa: 62:bc:4c:5e:4b:3b:06:a7:d2:ec:6e:aa:e5:6c:1d: 84:da:20:e4:68:c4:3f:61:c1:34:bc:88:67:cd:e8: cd:a4:2b:29:ea:cc:fc:ca:d8:be:25:31:a6:b6:6d: a3:9c:28:55:7e:7c:ed:2f:8a:a2:2f:2e:82:65:8c: c7:5c:7f:54:2e:b0:38:98:a8:4d:e6:ee:c4:19:ec: bc:73:9d:0a:31:0c:54:35:71:c3:46:4e:09:52:9b: 6f:75:86:62:ae:86:26:87:77:2a:07:33:be:a5:7d: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:05:E2:44:8E:45:26:D0:CC:E3:02:73:9A:C3:48:8B:D8:0F:46 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:52:f0:67:b3:b0:e4:53:bb:31:54:e6:04:28:14:8b:05:1c: 61:7d:91:42:62:4e:eb:aa:17:6e:92:39:72:e3:5b:2a:45:01: 7c:50:e0:66:f9:c9:4c:8c:9c:07:1b:e8:99:d0:30:5d:6d:d7: dd:64:6f:16:82:b6:b3:5f:7e:11:e0:d1:ba:0b:0b:0f:7c:71: bc:48:5d:e4:3f:a3:95:b2:5c:93:d7:23:48:d9:26:9a:af:d8: 50:48:bd:07:42:12:53:38:39:87:fb:6b:1a:1b:d4:ef:46:58: 04:d3:08:ad:3c:16:bd:37:16:fe:41:ef:ac:72:5d:e2:6b:81: 5b:90:b2:57:e3:19:19:53:53:36:02:19:41:06:49:08:f3:96: 0a:c6:eb:75:ef:fd:65:9a:ee:bc:b7:53:87:9b:ad:6a:13:aa: 47:92:cf:1c:24:f1:a9:55:18:60:f2:ce:8e:15:95:63:68:30: 33:cb:11:af:49:84:df:2a:58:2c:2f:f8:c2:59:6c:7d:57:a7: ea:09:6c:8b:1e:18:85:17:1a:4f:40:5b:28:a0:d5:4e:01:f1: 2e:c5:02:f0:6b:7e:ad:7e:3b:d6:85:1c:65:86:67:5e:a7:6e: 84:b1:2a:7a:f4:fb:ac:fb:2a:2e:32:43:c3:cc:3c:ff:40:7c: 75:4e:27:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUxMjA2MTkyNjIxWhcNMjUxMjEzMTkyNjIxWjAYMRYwFAYD VQQDEw02OTM0ODM1ZS0zMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gcEYJ+GIdoVL3qJY8+OJmaIOyqpjIFR2CEWq5d7wk9lXpd44ol98Mxox+6Y FiMT7J5qYukU9jTWH9A0EMccaZrCWYChJKseAFiL5PTaPGV4NB3ZciQLL/2rwiTO 6GIYYwDwvVAK8DL3nqt44IgL5QXedyk/0js7MpiJIB1fPHUdf4zTZ0Il1YX95bZL iAKfrtyUIqpivExeSzsGp9LsbqrlbB2E2iDkaMQ/YcE0vIhnzejNpCsp6sz8yti+ JTGmtm2jnChVfnztL4qiLy6CZYzHXH9ULrA4mKhN5u7EGey8c50KMQxUNXHDRk4J UptvdYZiroYmh3cqBzO+pX3+LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGfBeJE jkUm0MzjAnOaw0iL2A9GMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2UvBns7DkU7sxVOYEKBSLBRxhfZFCYk7rqhdukjly41sqRQF8UOBm +clMjJwHG+iZ0DBdbdfdZG8WgrazX34R4NG6CwsPfHG8SF3kP6OVslyT1yNI2Saa r9hQSL0HQhJTODmH+2saG9TvRlgE0witPBa9Nxb+Qe+scl3ia4FbkLJX4xkZU1M2 AhlBBkkI85YKxut17/1lmu68t1OHm61qE6pHks8cJPGpVRhg8s6OFZVjaDAzyxGv SYTfKlgsL/jCWWx9V6fqCWyLHhiFFxpPQFsooNVOAfEuxQLwa36tfjvWhRxlhmde p26EsSp69Pus+youMkPDzDz/QHx1TifM -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:44 2025 by rpki-client