This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: nvXIcZu3IoHQTLedIOF7P46qwfFJUex14Ab6GWXJ3ZA= Subject key identifier: 20:BE:87:0A:3A:0D:A2:91:0F:71:39:DF:CD:CA:21:A2:B1:03:D5:71 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 63 Signing time: Fri 05 Dec 2025 04:56:16 +0000 Manifest this update: Fri 05 Dec 2025 04:56:16 +0000 Manifest next update: Fri 12 Dec 2025 04:56:16 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: jL814mORHDXZ/7Ry20QgrTyT5QgqTZPMlGGFsul9Lk0=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Dec 5 04:56:16 2025 GMT Not After : Dec 12 04:56:16 2025 GMT Subject: CN=693265f0-2356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:08:c3:79:72:cd:44:30:ae:8b:e9:80:04: 43:3f:96:e1:05:68:8d:4a:cc:2f:cf:21:df:13:2d: 20:72:7d:51:60:a1:95:85:bf:99:85:01:91:00:80: bf:87:b9:35:b5:6f:97:aa:2c:f3:94:9d:51:ca:b5: 77:f5:5b:43:c2:1d:be:49:49:cb:c1:2b:56:23:eb: 9f:83:a1:f2:3c:ea:27:cd:a9:b5:57:f1:ad:12:01: 44:71:7c:75:a6:0d:19:2c:d2:ac:d1:a4:3e:bb:27: 38:3b:80:1f:10:cc:ce:c9:91:e8:3d:a2:6c:dd:62: 41:5c:38:60:67:f9:b4:72:bc:11:12:d8:dc:81:d1: 38:18:fa:ef:3c:fb:88:bc:fc:3a:a5:8e:8d:33:7a: 8c:2a:af:b1:7f:27:44:e6:67:44:f9:a5:a4:a6:b9: a9:99:34:ad:1c:5b:38:7e:b0:01:ab:51:ef:9c:bf: db:d4:53:ae:2e:67:af:69:61:69:ff:f8:d4:b7:28: ab:44:b4:aa:4d:33:68:56:75:d4:11:e8:c1:50:fd: 86:d9:c6:e9:78:6e:02:42:71:04:90:54:47:3c:94: 10:8a:1d:38:ac:5e:08:3d:fc:60:ff:64:aa:20:43: a2:71:b8:e5:19:07:1a:cb:7f:76:56:b8:3e:81:05: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BE:87:0A:3A:0D:A2:91:0F:71:39:DF:CD:CA:21:A2:B1:03:D5:71 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:20:1f:e1:69:e1:3d:c4:a1:40:24:4c:51:f4:00:7c:48:00: 35:37:a7:bf:39:46:5a:c1:e0:35:86:59:b8:c9:6c:7f:50:b0: b2:fe:5c:e0:9e:30:7b:34:f6:11:01:a1:d1:b0:31:36:3e:0c: 84:35:42:52:d1:65:c4:79:7e:3b:c2:39:44:91:08:5f:df:a8: 7f:08:15:e3:e9:71:3a:ae:92:dc:b3:a6:f0:e7:c4:54:30:fa: 5e:42:06:e6:89:72:88:e7:1c:68:40:07:09:8a:e3:cf:c7:a5: eb:e4:b4:7d:8b:f9:32:66:10:09:6c:94:14:11:cc:1e:04:d2: 37:73:e8:24:fb:5e:f8:de:bc:7e:6b:7c:7f:5a:b6:a2:29:2a: 02:d0:e9:22:63:ef:1e:ca:fe:07:5e:5c:fd:5b:08:e2:8f:de: 67:e5:4b:1e:e1:79:6d:4a:6a:c6:0a:19:59:59:b5:8a:34:7b: 73:2b:ff:52:ef:66:20:72:70:73:22:f0:85:d9:6d:7e:93:49: 1d:63:e0:8e:b9:d5:18:a5:dd:8a:5e:5e:fd:a6:95:68:36:9b: e4:c7:07:a6:37:dd:86:8c:86:13:d5:da:79:be:85:3f:dd:20: cb:e6:df:b8:3d:3f:1a:bc:99:40:1d:05:f9:e8:3f:13:b5:cf: b3:bd:fd:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTEyMDUwNDU2MTZaFw0yNTEyMTIwNDU2MTZaMBgxFjAUBgNV BAMTDTY5MzI2NWYwLTIzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCinQjDeXLNRDCui+mABEM/luEFaI1KzC/PId8TLSByfVFgoZWFv5mFAZEAgL+H uTW1b5eqLPOUnVHKtXf1W0PCHb5JScvBK1Yj65+DofI86ifNqbVX8a0SAURxfHWm DRks0qzRpD67Jzg7gB8QzM7Jkeg9omzdYkFcOGBn+bRyvBES2NyB0TgY+u88+4i8 /Dqljo0zeowqr7F/J0TmZ0T5paSmuamZNK0cWzh+sAGrUe+cv9vUU64uZ69pYWn/ +NS3KKtEtKpNM2hWddQR6MFQ/YbZxul4bgJCcQSQVEc8lBCKHTisXgg9/GD/ZKog Q6JxuOUZBxrLf3ZWuD6BBXY5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIL6HCjoN opEPcTnfzcohorED1XEwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGggH+Fp4T3EoUAkTFH0AHxIADU3p785RlrB4DWGWbjJbH9QsLL+XOCe MHs09hEBodGwMTY+DIQ1QlLRZcR5fjvCOUSRCF/fqH8IFePpcTquktyzpvDnxFQw +l5CBuaJcojnHGhABwmK48/HpevktH2L+TJmEAlslBQRzB4E0jdz6CT7XvjevH5r fH9atqIpKgLQ6SJj7x7K/gdeXP1bCOKP3mflSx7heW1KasYKGVlZtYo0e3Mr/1Lv ZiBycHMi8IXZbX6TSR1j4I651Ril3YpeXv2mlWg2m+THB6Y33YaMhhPV2nm+hT/d IMvm37g9Pxq8mUAdBfnoPxO1z7O9/Zc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:54 2025 by rpki-client