This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: keFkWmtiPF8kszfRLeoqUgR/WYV23ZTLxuXdOMcm64A= Subject key identifier: D4:01:65:B0:8F:BF:7C:3E:7E:29:46:B4:B3:F7:28:25:AB:B2:5B:28 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 442292DB420F23EF5C09B0AC04449BB35130A46B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 0368 Signing time: Sat 06 Dec 2025 19:06:29 +0000 Manifest this update: Sat 06 Dec 2025 19:01:29 +0000 Manifest next update: Sun 07 Dec 2025 20:08:29 +0000 Files and hashes: 1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=) 4: 4B1987D5160068092602529871C93EA320045A75.crl (hash: z7PKBng7MoIVC9Irq0bipimP02SiFuqSw7pZmqYvEYE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 20:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:92:db:42:0f:23:ef:5c:09:b0:ac:04:44:9b:b3:51:30:a4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Dec 6 19:01:29 2025 GMT Not After : Dec 7 20:08:29 2025 GMT Subject: CN=D40165B08FBF7C3E7E2946B4B3F72825ABB25B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:7d:72:05:e6:46:48:92:06:09:cb:2e:d5: 1d:22:60:6a:17:c1:47:11:16:ab:98:ac:d2:84:3c: 27:97:c0:a4:8a:b1:05:de:1e:d8:c2:be:49:40:e6: 2d:82:04:2a:47:91:43:66:f3:33:1b:02:f0:92:fd: 79:03:45:34:cf:8a:07:c7:da:ce:da:41:de:12:cc: f6:9d:ef:fe:4f:28:7c:0a:ec:75:59:aa:39:a4:1c: 53:69:9f:e9:3a:44:3f:4f:d7:06:0b:86:ed:49:18: a3:24:4d:77:fc:e5:0b:41:12:2f:85:00:e1:39:6e: 17:60:b6:94:7f:95:05:a4:18:a9:84:47:74:a3:e7: 0a:f7:af:7f:1a:ed:13:19:6a:84:f7:db:65:92:ac: df:0a:73:10:d6:b2:46:a6:3a:4c:2c:22:f9:ec:fb: 3c:e3:7e:33:8d:3d:b3:5f:5d:f1:d6:9d:df:6c:c9: ce:0f:db:c5:7e:9c:d3:5f:dc:5a:57:0f:6a:54:3e: f8:53:24:8c:00:b7:b7:86:f4:9d:10:ea:9a:fd:7a: 47:62:25:da:f3:35:60:f0:dd:55:63:2f:12:09:8f: a1:a1:af:68:de:37:5d:ab:d8:e6:79:e7:c8:48:7a: 5b:49:79:f6:0a:e1:75:d5:cf:63:1c:d1:6d:74:a8: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:01:65:B0:8F:BF:7C:3E:7E:29:46:B4:B3:F7:28:25:AB:B2:5B:28 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b9:d2:94:f4:63:4b:62:d4:1c:b5:74:c4:2b:91:da:4b:2f: d8:fd:55:77:f4:ba:45:77:8a:b9:ba:f4:00:e4:77:d0:56:30: c1:7f:a0:91:12:fb:00:cc:bd:bc:11:61:a7:ca:d5:3d:5d:3d: e3:d7:84:b6:58:f3:8d:19:43:f4:8c:0f:c2:06:a9:8b:d7:c1: ba:1c:4f:98:c2:70:e4:88:d8:6a:3e:dc:65:bf:4a:2c:5b:3c: b2:67:6c:a7:23:91:cb:ac:c6:03:3a:7c:1d:85:cc:a1:b0:17: 1c:c5:c8:7b:38:fc:fd:4f:e0:d3:8a:ac:84:40:26:49:24:51: 25:63:64:61:c5:17:7a:b2:9e:e6:6a:8a:ed:0a:0e:8d:0d:d1: f3:46:ed:4d:89:bb:63:e2:c9:92:e9:66:66:6f:f8:71:36:e4: de:76:28:9c:d2:79:1f:da:19:8f:bb:87:67:4c:3f:9e:1a:80: 7a:5a:52:70:8a:84:28:38:df:a1:6c:e5:b9:2b:c1:bf:55:d2: ea:36:b8:bb:01:28:cf:d4:98:db:ae:d0:04:ab:b5:42:7a:12: c7:ea:93:c4:6f:62:3e:07:2b:11:34:82:f2:d0:c8:78:79:11: 8f:42:c2:bd:fa:98:4f:93:4d:27:14:8b:4d:2c:06:36:22:ea: e8:c5:0d:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURCKS20IPI+9cCbCsBESbs1EwpGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MTIwNjE5MDEyOVoX DTI1MTIwNzIwMDgyOVowMzExMC8GA1UEAxMoRDQwMTY1QjA4RkJGN0MzRTdFMjk0 NkI0QjNGNzI4MjVBQkIyNUIyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2JfXIF5kZIkgYJyy7VHSJgahfBRxEWq5is0oQ8J5fApIqxBd4e2MK+SUDm LYIEKkeRQ2bzMxsC8JL9eQNFNM+KB8faztpB3hLM9p3v/k8ofArsdVmqOaQcU2mf 6TpEP0/XBguG7UkYoyRNd/zlC0ESL4UA4TluF2C2lH+VBaQYqYRHdKPnCvevfxrt ExlqhPfbZZKs3wpzENayRqY6TCwi+ez7PON+M409s19d8dad32zJzg/bxX6c01/c WlcPalQ++FMkjAC3t4b0nRDqmv16R2Il2vM1YPDdVWMvEgmPoaGvaN43XavY5nnn yEh6W0l59grhddXPYxzRbXSo0UkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTUAWWw j798Pn4pRrSz9yglq7JbKDAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAmrnSlPRjS2LUHLV0xCuR2ksv2P1Vd/S6RXeKubr0AOR30FYw wX+gkRL7AMy9vBFhp8rVPV0949eEtljzjRlD9IwPwgapi9fBuhxPmMJw5IjYaj7c Zb9KLFs8smdspyORy6zGAzp8HYXMobAXHMXIezj8/U/g04qshEAmSSRRJWNkYcUX erKe5mqK7QoOjQ3R80btTYm7Y+LJkulmZm/4cTbk3nYonNJ5H9oZj7uHZ0w/nhqA elpScIqEKDjfoWzluSvBv1XS6ja4uwEoz9SY267QBKu1QnoSx+qTxG9iPgcrETSC 8tDIeHkRj0LCvfqYT5NNJxSLTSwGNiLq6MUNow== -----END CERTIFICATE-----Generated at Sun Dec 7 02:37:59 2025 by rpki-client