This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: KR/hu5QHB1MXXcml6WLnG6TnLBMbTnxSPsguy0vLtSI= Subject key identifier: A8:CE:48:3F:54:0D:A2:92:38:FE:51:B3:65:32:C9:2E:55:BF:36:ED Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 19A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 1990 Signing time: Mon 22 Dec 2025 16:09:59 +0000 Manifest this update: Mon 22 Dec 2025 16:09:59 +0000 Manifest next update: Mon 29 Dec 2025 16:09:59 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: b60Ky+riv9qxUPeZd0FCFub6bMcBzy5qWHytRVtMxNU=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: BZMo2s4ILhSYw+N337H+VSwNBVHfcjC9wdr+2hur79I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6560 (0x19a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Dec 22 16:09:59 2025 GMT Not After : Dec 29 16:09:59 2025 GMT Subject: CN=69496d57-e544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:c6:b2:05:6e:aa:40:45:a2:7c:ab:07:96: c8:8b:ea:53:ba:5c:92:bf:89:44:6a:f0:3d:35:df: 76:c4:06:31:a0:c3:2a:65:8d:6e:3e:23:e2:5e:69: 8e:93:3b:c4:ed:3e:2e:1a:3a:9c:1e:cc:15:8c:36: 4e:37:a4:7c:2d:32:2a:bf:b4:1f:d3:03:c2:79:01: 84:dd:b2:ab:4a:c0:40:72:59:b7:f5:32:bf:a5:51: 95:b4:8b:c2:3f:fd:ee:60:99:e0:50:3a:1d:58:ab: df:4a:6d:7b:ac:5c:39:3b:2a:54:b0:09:e3:84:5f: 50:d4:52:87:3c:94:11:94:bc:a4:1d:65:1c:70:bf: 41:07:c1:cf:ab:52:08:58:4b:26:e7:66:96:e2:bb: b5:b2:ac:6c:17:78:93:7d:da:12:cc:9b:94:b2:c0: 10:89:2d:95:ab:1e:95:8c:c9:49:b1:37:5a:71:01: 48:f0:eb:80:8b:b1:71:7a:1d:16:3f:43:eb:ed:fc: 4f:4c:ed:42:0f:08:ec:33:3c:73:84:6a:7a:1e:b1: 2b:34:ad:8a:bf:90:1c:28:7f:3a:e6:1f:3e:10:c7: e9:11:1c:b5:98:db:7b:bd:28:81:01:d7:fe:67:09: d3:d9:39:3a:5a:7b:a7:13:9b:df:e3:d5:85:da:ce: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:48:3F:54:0D:A2:92:38:FE:51:B3:65:32:C9:2E:55:BF:36:ED X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3e:4d:f8:8c:3c:1e:ee:43:10:ad:d0:a3:02:cc:f5:f6:b9: a8:88:3d:33:cf:76:1c:1c:23:d8:cd:7c:8f:6f:ad:56:67:b1: b6:eb:2b:3b:50:d8:11:1e:a5:1f:51:ed:b2:90:d6:ea:b8:96: 52:c3:37:ad:71:a4:f2:23:8f:6d:ae:13:c4:72:e4:ea:ca:50: 2e:0c:54:59:52:f1:09:87:5d:df:d3:a2:83:6e:a7:f5:d3:d9: 30:61:b4:7b:0b:ff:bc:34:05:07:25:a3:06:ff:6f:04:5f:49: 1f:0f:11:4b:bb:84:d1:92:15:24:48:71:a0:f2:dd:b1:eb:23: 66:f8:55:c2:ef:72:9c:85:61:86:03:dc:ba:e1:b8:f4:11:c4: 19:f4:99:68:24:87:bc:68:47:36:03:4f:3b:42:a7:03:e4:84: 12:20:9e:7b:33:55:cf:f1:90:ec:ff:7f:5e:c1:f3:5f:98:3f: a4:52:03:a8:49:c4:a3:14:f3:df:91:79:ea:29:46:11:c3:5f: 44:ce:78:88:72:34:1d:07:08:c5:b2:e3:17:fc:e7:f8:71:dc: 1f:be:82:11:c5:eb:97:2c:11:39:23:40:37:94:a5:04:4c:97: 0f:e2:02:9a:39:95:3a:7d:7c:a5:61:49:81:99:14:56:8c:8d: b3:5f:d4:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUxMjIyMTYwOTU5WhcNMjUxMjI5MTYwOTU5WjAYMRYwFAYD VQQDDA02OTQ5NmQ1Ny1lNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodHGsgVuqkBFonyrB5bIi+pTulySv4lEavA9Nd92xAYxoMMqZY1uPiPiXmmO kzvE7T4uGjqcHswVjDZON6R8LTIqv7Qf0wPCeQGE3bKrSsBAclm39TK/pVGVtIvC P/3uYJngUDodWKvfSm17rFw5OypUsAnjhF9Q1FKHPJQRlLykHWUccL9BB8HPq1II WEsm52aW4ru1sqxsF3iTfdoSzJuUssAQiS2Vqx6VjMlJsTdacQFI8OuAi7Fxeh0W P0Pr7fxPTO1CDwjsMzxzhGp6HrErNK2Kv5AcKH865h8+EMfpERy1mNt7vSiBAdf+ ZwnT2Tk6WnunE5vf49WF2s5iFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjOSD9U DaKSOP5Rs2UyyS5VvzbtMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Pk34jDwe7kMQrdCjAsz19rmoiD0zz3YcHCPYzXyPb61WZ7G26ys7 UNgRHqUfUe2ykNbquJZSwzetcaTyI49trhPEcuTqylAuDFRZUvEJh13f06KDbqf1 09kwYbR7C/+8NAUHJaMG/28EX0kfDxFLu4TRkhUkSHGg8t2x6yNm+FXC73KchWGG A9y64bj0EcQZ9JloJIe8aEc2A087QqcD5IQSIJ57M1XP8ZDs/39ewfNfmD+kUgOo ScSjFPPfkXnqKUYRw19EzniIcjQdBwjFsuMX/Of4cdwfvoIRxeuXLBE5I0A3lKUE TJcP4gKaOZU6fXylYUmBmRRWjI2zX9TB -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:00 2025 by rpki-client