This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft File: 4WfcTVfF__boFwUeksBgF1urHR0.mft (raw, json) Hash identifier: QQ/j3A1aJXd1zxdEAdFcBd7m+DRbLNCTEyyYI6Po59E= Subject key identifier: C7:8A:A1:C8:57:AF:34:B8:DC:9A:E1:89:92:3C:F5:FA:E7:06:5D:A3 Authority key identifier: E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D Certificate issuer: /CN=A9147150/serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft Manifest number: 4F Signing time: Tue 23 Dec 2025 06:09:48 +0000 Manifest this update: Tue 23 Dec 2025 06:09:48 +0000 Manifest next update: Tue 30 Dec 2025 06:09:48 +0000 Files and hashes: 1: 4WfcTVfF__boFwUeksBgF1urHR0.crl (hash: +tdd1Bcc7VFo/PBM4bcwyvdo/rI3tu5uGj0SYh7GUFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Validity Not Before: Dec 23 06:09:48 2025 GMT Not After : Dec 30 06:09:48 2025 GMT Subject: CN=694a322c-d9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:4b:23:b8:82:bd:84:81:10:0a:54:68:d6: 68:41:2b:be:a3:3b:9e:58:af:11:57:fd:e4:e0:24: 92:e3:df:82:f7:67:5b:68:0e:b4:2d:d3:f0:3a:f3: ea:24:de:f2:df:da:8f:47:4b:01:1e:bb:fa:b2:5a: 23:50:d4:95:f3:87:3a:e5:72:c0:bd:85:15:0a:39: 59:72:ab:55:ef:f9:e5:74:c5:45:47:da:9d:6e:9c: 4a:bc:e4:12:5e:de:a7:bb:e0:e1:06:54:48:88:db: f1:59:69:1c:de:cc:f6:3f:b1:d4:72:5a:cd:89:78: f1:ba:65:17:23:2c:21:68:5a:50:83:27:4f:37:4c: f8:80:8f:c8:30:54:6d:3f:ee:b4:16:01:d6:da:ee: 8a:da:e9:fd:22:f6:9c:ae:67:ba:d0:28:d0:eb:10: cb:5b:5d:0b:06:c7:d1:70:e4:6b:0e:37:91:2b:2b: c3:1b:8e:de:e8:a7:07:0b:30:15:f1:f9:88:50:f1: 22:72:68:e1:8e:0b:ef:29:44:a4:17:6b:59:ef:4c: 03:b8:dc:78:b4:89:59:af:37:3d:7d:7e:5e:0c:52: b0:09:4c:a6:68:cd:43:dc:06:51:8c:26:c9:b3:e4: 44:2e:cb:f6:fa:9e:ce:4f:e9:df:37:df:08:f9:f7: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8A:A1:C8:57:AF:34:B8:DC:9A:E1:89:92:3C:F5:FA:E7:06:5D:A3 X509v3 Authority Key Identifier: keyid:E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b1:c2:07:0b:62:b3:ad:d4:dd:9a:3f:5e:74:93:8c:b9:c4: 3c:8c:62:fd:bf:bd:b3:c1:4f:46:c2:bf:51:c9:31:dd:4b:08: 95:0c:d1:7a:65:b7:7f:fa:a1:db:c5:bb:49:4e:50:1e:54:f8: ed:d7:18:5f:62:78:38:1b:9a:f9:f0:4f:e7:0f:6a:3c:59:82: dc:d5:73:dd:03:d9:18:31:02:9d:a6:62:4b:f9:5d:4a:39:8a: 3c:30:97:ff:5b:e4:ba:49:9f:80:5f:0f:ad:3d:61:8c:d0:2c: 65:70:4d:cb:34:60:a6:43:7a:ab:5b:9c:51:f1:65:a2:18:e7: ab:ea:82:f8:fa:6b:37:ad:94:47:56:a2:9a:41:c8:a5:68:29: 86:bf:7f:2d:9c:ee:aa:c6:a6:17:95:8c:64:a8:4f:1b:92:ec: f1:dc:d8:71:4c:72:05:c2:01:b3:08:0f:f7:47:a3:bc:fb:f9: 77:07:23:d9:0b:cc:3f:ef:cb:de:f0:78:87:9c:d7:e0:5e:2b: 42:70:b1:c4:03:25:38:7f:20:c2:ec:04:f3:4c:56:e3:27:a0: 2b:92:a6:c5:50:2e:fe:13:50:44:d8:09:b1:d6:fe:6f:67:4c: 1e:d1:e0:d6:3e:f7:c1:f2:12:59:1f:6e:58:ef:21:66:65:f0: 66:a9:91:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoRTE2N0RDNEQ1N0M1RkZGNkU4MTcwNTFFOTJDMDYwMTc1 QkFCMUQxRDAeFw0yNTEyMjMwNjA5NDhaFw0yNTEyMzAwNjA5NDhaMBgxFjAUBgNV BAMMDTY5NGEzMjJjLWQ5YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCfUsjuIK9hIEQClRo1mhBK76jO55YrxFX/eTgJJLj34L3Z1toDrQt0/A68+ok 3vLf2o9HSwEeu/qyWiNQ1JXzhzrlcsC9hRUKOVlyq1Xv+eV0xUVH2p1unEq85BJe 3qe74OEGVEiI2/FZaRzezPY/sdRyWs2JePG6ZRcjLCFoWlCDJ083TPiAj8gwVG0/ 7rQWAdba7ora6f0i9pyuZ7rQKNDrEMtbXQsGx9Fw5GsON5ErK8Mbjt7opwcLMBXx +YhQ8SJyaOGOC+8pRKQXa1nvTAO43Hi0iVmvNz19fl4MUrAJTKZozUPcBlGMJsmz 5EQuy/b6ns5P6d833wj593SFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx4qhyFev NLjcmuGJkjz1+ucGXaMwHwYDVR0jBBgwFoAU4WfcTVfF//boFwUeksBgF1urHR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzEyMDQ5MjI2Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19ib0Z3VWVrc0JnRjF1ckhS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdmY1RWZkZfX2JvRndVZWtzQmdGMXVySFIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzEyMDQ5MjI2Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19i b0Z3VWVrc0JnRjF1ckhSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6xwgcLYrOt1N2aP150k4y5xDyMYv2/vbPBT0bCv1HJMd1LCJUM0Xpl t3/6odvFu0lOUB5U+O3XGF9ieDgbmvnwT+cPajxZgtzVc90D2RgxAp2mYkv5XUo5 ijwwl/9b5LpJn4BfD609YYzQLGVwTcs0YKZDeqtbnFHxZaIY56vqgvj6azetlEdW oppByKVoKYa/fy2c7qrGpheVjGSoTxuS7PHc2HFMcgXCAbMID/dHo7z7+XcHI9kL zD/vy97weIec1+BeK0JwscQDJTh/IMLsBPNMVuMnoCuSpsVQLv4TUETYCbHW/m9n TB7R4NY+98HyElkfbljvIWZl8GapkYI= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:31 2025 by rpki-client