This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft File: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json) Hash identifier: dM4SibE4LtPoNBGiq4CvyxFdLUHDkRcPtgF0FvBwwTk= Subject key identifier: 0A:08:87:67:7B:5C:28:B3:17:15:26:81:26:9D:15:A1:C4:75:8E:E1 Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF Certificate issuer: /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft Manifest number: 0102 Signing time: Tue 23 Dec 2025 04:02:10 +0000 Manifest this update: Tue 23 Dec 2025 04:02:10 +0000 Manifest next update: Tue 30 Dec 2025 04:02:10 +0000 Files and hashes: 1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: jJxg2FYsOSKKwpPR4s7+sfF3WSqJzavZe4L6rOWW+1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Validity Not Before: Dec 23 04:02:10 2025 GMT Not After : Dec 30 04:02:10 2025 GMT Subject: CN=694a1442-375d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:5a:ca:b8:ad:8e:f1:14:b1:82:74:bc:d6: b9:8c:e3:86:8b:19:24:22:51:a2:41:8a:d6:6c:c0: a8:7f:fd:81:56:aa:12:27:07:c9:43:fb:37:27:1e: 0f:c3:4b:06:e2:9c:26:65:61:32:02:a8:da:85:4d: 41:68:01:1a:a7:80:46:e1:03:b8:db:35:10:e1:3c: 3b:db:6a:f2:13:dd:74:de:fe:5a:f0:98:0e:d3:50: d6:ba:b7:b2:0c:c5:18:d1:58:a6:e8:3f:8e:a9:33: 96:fd:5c:5d:b2:41:d0:7f:80:b5:86:94:8a:93:dd: 59:12:89:1c:69:9a:e2:4b:b4:f4:af:0c:2d:ab:7d: f5:a1:85:3d:a2:1d:aa:f8:95:f7:6f:4b:16:4b:f8: 71:ae:83:60:f0:49:56:e5:4d:c3:88:78:ae:b2:7c: f4:13:64:07:a3:f5:39:01:7e:45:db:ec:a4:7b:e5: 42:9f:e1:b1:49:62:44:08:42:0d:0d:f9:bb:47:ac: 19:a6:d0:48:58:d9:f5:db:59:4c:0b:3d:1a:7b:14: 95:60:f7:0a:2e:03:b5:4e:db:c2:3f:b5:11:05:de: ed:f4:a5:c9:01:a3:a0:77:62:c4:5e:e6:7c:de:fa: 4a:a8:a5:c9:fd:23:95:32:a6:1b:cd:87:40:1c:84: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:87:67:7B:5C:28:B3:17:15:26:81:26:9D:15:A1:C4:75:8E:E1 X509v3 Authority Key Identifier: keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8b:50:8d:52:d5:7e:f1:06:5d:3f:84:fb:95:9d:d5:d1:ed: 88:78:10:44:26:f6:ff:e9:52:b9:52:2e:27:94:c8:c0:cc:71: 94:07:b7:07:cc:6d:31:4d:f8:30:76:62:5e:6e:51:bb:25:36: 2e:26:b5:87:4e:55:57:92:90:08:04:be:9f:ce:af:27:f4:d6: 1b:41:87:51:1e:db:12:52:cc:03:91:97:59:64:90:bb:e6:08: 12:17:02:72:be:66:d8:95:1c:68:da:b1:85:e8:be:dd:33:3e: 72:7d:42:46:5f:e9:d5:60:cb:ef:f1:ca:e6:37:3d:d0:e9:eb: ce:70:db:41:15:9f:f6:9e:e8:7d:02:91:b1:3d:2f:bd:28:90: 82:b4:7b:5b:a6:49:aa:e5:c3:7b:83:c8:55:cc:30:df:ef:76: 46:d4:75:2e:57:b0:88:f5:6f:99:fb:ce:66:a3:18:a5:d7:2c: 67:c1:5c:63:87:98:b5:b2:0e:c8:1d:d8:78:2d:3d:ba:4b:f2: 9e:19:fb:d8:d8:0c:94:05:69:06:43:7e:de:84:76:11:c6:7b: bc:dc:66:f9:23:e2:ca:b7:62:33:7f:3f:25:db:f7:88:aa:e7: c0:a2:d1:7f:45:3e:6f:69:cd:8d:1b:9b:7e:4d:6c:51:7c:5d: 3b:08:1e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBFNjUxMTAvBgNVBAUTKEUxRDMzMDMxNkMzQTI2ODQyNEQ3MTk3QUJGMzQxMkY3 MjMxMTQxREYwHhcNMjUxMjIzMDQwMjEwWhcNMjUxMjMwMDQwMjEwWjAYMRYwFAYD VQQDDA02OTRhMTQ0Mi0zNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUJayritjvEUsYJ0vNa5jOOGixkkIlGiQYrWbMCof/2BVqoSJwfJQ/s3Jx4P w0sG4pwmZWEyAqjahU1BaAEap4BG4QO42zUQ4Tw722ryE9103v5a8JgO01DWurey DMUY0Vim6D+OqTOW/VxdskHQf4C1hpSKk91ZEokcaZriS7T0rwwtq331oYU9oh2q +JX3b0sWS/hxroNg8ElW5U3DiHiusnz0E2QHo/U5AX5F2+yke+VCn+GxSWJECEIN Dfm7R6wZptBIWNn121lMCz0aexSVYPcKLgO1TtvCP7URBd7t9KXJAaOgd2LEXuZ8 3vpKqKXJ/SOVMqYbzYdAHIRKCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoIh2d7 XCizFxUmgSadFaHEdY7hMB8GA1UdIwQYMBaAFOHTMDFsOiaEJNcZer80EvcjEUHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEU2NS9DRTIxNkY4NjUz ODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3NkpvUWsxeGw2dnpRUzl5TVJR ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkTXdNV3c2Sm9RazF4bDZ2elFTOXlNUlFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEU2NS9DRTIxNkY4NjUzODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3Nkpv UWsxeGw2dnpRUzl5TVJRZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2i1CNUtV+8QZdP4T7lZ3V0e2IeBBEJvb/6VK5Ui4nlMjAzHGUB7cH zG0xTfgwdmJeblG7JTYuJrWHTlVXkpAIBL6fzq8n9NYbQYdRHtsSUswDkZdZZJC7 5ggSFwJyvmbYlRxo2rGF6L7dMz5yfUJGX+nVYMvv8crmNz3Q6evOcNtBFZ/2nuh9 ApGxPS+9KJCCtHtbpkmq5cN7g8hVzDDf73ZG1HUuV7CI9W+Z+85moxil1yxnwVxj h5i1sg7IHdh4LT26S/KeGfvY2AyUBWkGQ37ehHYRxnu83Gb5I+LKt2Izfz8l2/eI qufAotF/RT5vac2NG5t+TWxRfF07CB5+ -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:20 2025 by rpki-client