This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: UsJ+ncvun61SXAazSQxQ0ww6JIHJmc/ZS61xsRbBJL0= Subject key identifier: 9E:BC:51:60:20:BE:2C:ED:93:E8:AC:2D:33:8C:01:76:60:D4:1E:8A Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: 0162 Signing time: Tue 23 Dec 2025 03:01:55 +0000 Manifest this update: Tue 23 Dec 2025 03:01:55 +0000 Manifest next update: Tue 30 Dec 2025 03:01:55 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: T0rBdaalujz1qu9ZQQgcVTLfwxfh5ZW/XFQHWtOvbBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: Dec 23 03:01:55 2025 GMT Not After : Dec 30 03:01:55 2025 GMT Subject: CN=694a0623-f4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:76:19:60:57:a2:bb:1a:33:ab:35:40:60: 36:c3:34:20:ed:b9:13:5b:6d:96:de:5c:e2:92:02: 8d:cc:b8:6c:07:43:9f:99:b3:93:12:d0:7a:88:26: 58:a5:d3:b1:fb:be:e6:fe:bd:fc:ca:12:8a:1e:21: e2:88:4a:e3:8c:ed:6b:87:0e:32:b8:75:c0:43:d3: 83:4c:88:de:2b:37:49:a2:11:d1:8e:d1:ee:86:08: cb:b0:d5:5c:5c:20:a6:ba:c5:0d:b6:5b:e3:da:50: a3:2a:02:9e:fe:b8:ab:82:31:02:2d:58:f3:2b:08: a4:8d:e6:f9:d9:18:4a:b0:37:a8:76:1d:8e:94:d7: 46:18:e7:40:f8:ba:30:61:83:8b:45:ff:90:19:d5: ac:78:a9:ab:7a:39:82:19:99:7e:13:ea:17:ac:f2: 66:bf:46:da:5a:45:cd:e1:ee:15:64:ac:1d:3c:3d: 71:74:c7:17:c9:42:f5:d9:34:c1:84:f7:b4:29:d7: c0:00:97:36:c1:b1:de:c7:65:7d:11:4c:b5:8b:4a: 67:b9:21:86:de:c5:e7:3a:d6:df:a0:fb:db:34:3f: 50:12:c5:cd:5d:90:c0:53:39:6a:12:5a:71:91:81: 53:48:b6:1c:68:e0:07:9b:fd:c2:b0:fc:c6:8e:13: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BC:51:60:20:BE:2C:ED:93:E8:AC:2D:33:8C:01:76:60:D4:1E:8A X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cc:96:8c:eb:93:e9:8d:59:96:b4:4b:ab:93:26:84:63:c0: d0:95:1b:11:7b:45:3f:5e:e5:95:14:3d:b1:50:4d:f3:7b:5d: 70:2c:01:d1:00:88:08:e9:fa:a5:88:0f:7e:92:46:b5:3a:a2: b8:91:6a:a7:55:70:52:48:1a:5b:b2:3a:78:82:e6:14:39:45: 23:9d:2b:ed:78:a8:aa:90:bf:3b:6c:67:f9:fc:06:6a:c6:19: b1:63:ec:ed:7a:c0:a1:71:49:ba:b7:98:1e:ca:d2:39:2f:10: 8d:6d:88:16:88:59:7f:db:2e:26:7e:7d:d4:58:2e:09:c5:31: 71:0f:74:0a:d3:7f:14:80:87:52:15:53:06:8c:3a:ca:b4:68: d6:bd:4a:cf:76:e4:67:b1:c0:5e:f9:b0:08:45:6c:d7:2b:cd: 70:3b:f7:ad:8e:e2:87:ec:c6:90:bc:4a:1c:2f:1d:c4:71:de: 03:be:df:6a:33:fa:44:37:19:2f:be:e8:aa:38:dc:9d:de:23: 47:02:b7:12:e5:89:bc:cb:b9:60:47:3a:47:da:8b:35:92:1e: 9d:f4:fa:de:ea:1e:c4:45:13:d7:c7:e1:e6:ab:e8:4a:18:a4: c1:3f:bb:c2:05:a8:a5:65:e4:25:86:44:18:94:f3:5a:db:af: d4:11:85:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjUxMjIzMDMwMTU1WhcNMjUxMjMwMDMwMTU1WjAYMRYwFAYD VQQDDA02OTRhMDYyMy1mNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBd2GWBXorsaM6s1QGA2wzQg7bkTW22W3lzikgKNzLhsB0OfmbOTEtB6iCZY pdOx+77m/r38yhKKHiHiiErjjO1rhw4yuHXAQ9ODTIjeKzdJohHRjtHuhgjLsNVc XCCmusUNtlvj2lCjKgKe/rirgjECLVjzKwikjeb52RhKsDeodh2OlNdGGOdA+Low YYOLRf+QGdWseKmrejmCGZl+E+oXrPJmv0baWkXN4e4VZKwdPD1xdMcXyUL12TTB hPe0KdfAAJc2wbHex2V9EUy1i0pnuSGG3sXnOtbfoPvbND9QEsXNXZDAUzlqElpx kYFTSLYcaOAHm/3CsPzGjhN72QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ68UWAg viztk+isLTOMAXZg1B6KMB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBizJaM65PpjVmWtEurkyaEY8DQlRsRe0U/XuWVFD2xUE3ze11wLAHR AIgI6fqliA9+kka1OqK4kWqnVXBSSBpbsjp4guYUOUUjnSvteKiqkL87bGf5/AZq xhmxY+ztesChcUm6t5geytI5LxCNbYgWiFl/2y4mfn3UWC4JxTFxD3QK038UgIdS FVMGjDrKtGjWvUrPduRnscBe+bAIRWzXK81wO/etjuKH7MaQvEocLx3Ecd4Dvt9q M/pENxkvvuiqONyd3iNHArcS5Ym8y7lgRzpH2os1kh6d9Pre6h7ERRPXx+Hmq+hK GKTBP7vCBailZeQlhkQYlPNa26/UEYWg -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:52 2025 by rpki-client