This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: BrPzcVheHmXj6J4lsrvl8Mz9/3i1duLahLRsKXUUHBk= Subject key identifier: AE:D5:A6:10:B3:0B:4E:7E:74:22:45:8F:2B:50:58:2A:C2:BA:60:3F Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07F8 Signing time: Wed 17 Dec 2025 01:17:32 +0000 Manifest this update: Wed 17 Dec 2025 01:17:31 +0000 Manifest next update: Wed 24 Dec 2025 01:17:31 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: QoDufJWGxGbEwjfk11/COjmrbvbnE90bDHpzqX0ZR5Q=) 2: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) 3: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Dec 17 01:17:31 2025 GMT Not After : Dec 24 01:17:31 2025 GMT Subject: CN=694204ab-0bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d8:57:f9:70:ef:91:03:07:b5:a3:52:20:38: 7c:c4:19:16:ed:2e:2d:29:44:be:ab:11:25:db:8b: b3:28:14:e7:d0:8d:86:f0:d8:0e:8c:ea:cd:b5:de: 93:aa:0a:88:0f:a7:25:b0:a4:12:54:77:e8:36:65: 99:09:92:c9:f8:f4:ad:84:3c:3f:61:12:2a:68:b9: f8:a5:24:8c:ee:34:af:f5:92:2a:20:e9:b7:a6:7e: 8f:1d:78:6f:25:21:17:13:3c:57:df:69:7a:1e:fc: 1b:77:1c:72:88:a7:74:b7:95:61:6d:ab:ee:30:e0: d9:e2:ab:c7:9a:11:00:6f:db:69:f7:16:20:68:c9: 89:1d:c4:ee:f0:55:01:49:65:23:75:66:33:4a:39: 1b:4b:43:1a:96:9f:cf:17:e8:6a:21:97:05:a4:12: 8b:fa:49:45:35:f9:21:b1:e1:29:74:a8:44:0a:64: f0:7d:aa:f1:8c:7a:e0:4f:47:ae:43:09:b7:71:b0: 87:5c:ab:18:04:a2:a5:f8:ad:82:76:75:4f:89:98: 3f:72:9a:29:99:11:83:8c:6c:26:87:ac:6b:07:66: c2:0a:26:8a:c9:67:48:e9:62:21:6d:5f:ae:16:17: d4:5d:ec:d1:53:97:08:a4:12:f1:af:a6:d2:62:06: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:A6:10:B3:0B:4E:7E:74:22:45:8F:2B:50:58:2A:C2:BA:60:3F X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:a4:13:32:fc:9b:db:1b:c1:3e:92:55:d5:55:34:ec:fb: 80:7d:3d:3b:5d:c9:e1:cd:5a:f1:6c:69:38:c7:86:19:38:bc: 3b:b1:bc:f7:f1:85:57:29:95:a3:f2:54:fd:89:eb:1c:42:16: 90:a5:76:45:6e:02:f9:fb:bd:90:4b:c3:f0:4e:b8:3b:2b:ea: 9f:03:72:73:01:dd:b4:ad:22:a1:1f:4b:6b:6f:a7:f1:96:83: 3a:96:e7:8f:27:4a:7a:de:56:3f:89:8c:fb:84:6e:a5:32:03: 39:77:c3:91:84:70:c0:97:64:0b:ce:7c:61:f5:cc:70:d1:18: d6:46:90:37:34:83:43:12:29:44:37:a9:42:f1:b0:d8:05:1a: 54:3d:06:0d:b0:9d:c8:de:b2:fe:1d:cf:c8:98:dd:49:7f:1e: 12:63:af:28:de:a2:fd:f8:fd:c3:2d:c4:23:2b:ba:32:02:7c: a9:f3:87:8e:a4:7b:b4:a0:c9:13:54:22:4b:af:0f:f2:d8:b8: 82:44:5c:e8:c2:b6:41:8b:05:a5:a2:c1:ca:6d:ac:9e:4a:1e: 19:ab:e7:f4:16:1f:d7:e5:b9:63:3c:8b:88:8b:a3:e2:91:b0: 3b:cd:40:c7:b4:7d:84:dd:21:91:39:07:e6:4e:ce:eb:5e:dd: 66:70:25:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMjE3MDExNzMxWhcNMjUxMjI0MDExNzMxWjAYMRYwFAYD VQQDDA02OTQyMDRhYi0wYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9thX+XDvkQMHtaNSIDh8xBkW7S4tKUS+qxEl24uzKBTn0I2G8NgOjOrNtd6T qgqID6clsKQSVHfoNmWZCZLJ+PSthDw/YRIqaLn4pSSM7jSv9ZIqIOm3pn6PHXhv JSEXEzxX32l6HvwbdxxyiKd0t5VhbavuMODZ4qvHmhEAb9tp9xYgaMmJHcTu8FUB SWUjdWYzSjkbS0Malp/PF+hqIZcFpBKL+klFNfkhseEpdKhECmTwfarxjHrgT0eu Qwm3cbCHXKsYBKKl+K2CdnVPiZg/cpopmRGDjGwmh6xrB2bCCiaKyWdI6WIhbV+u FhfUXezRU5cIpBLxr6bSYgbBrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7VphCz C05+dCJFjytQWCrCumA/MB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAybKQTMvyb2xvBPpJV1VU07PuAfT07XcnhzVrxbGk4x4YZOLw7sbz3 8YVXKZWj8lT9iescQhaQpXZFbgL5+72QS8PwTrg7K+qfA3JzAd20rSKhH0trb6fx loM6luePJ0p63lY/iYz7hG6lMgM5d8ORhHDAl2QLznxh9cxw0RjWRpA3NINDEilE N6lC8bDYBRpUPQYNsJ3I3rL+Hc/ImN1Jfx4SY68o3qL9+P3DLcQjK7oyAnyp84eO pHu0oMkTVCJLrw/y2LiCRFzowrZBiwWlosHKbayeSh4Zq+f0Fh/X5bljPIuIi6Pi kbA7zUDHtH2E3SGROQfmTs7rXt1mcCVB -----END CERTIFICATE-----Generated at Wed Dec 17 21:58:40 2025 by rpki-client