This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: x03W33Gx8nVTGgvvVmc5LGSnxPGf2ffGOB3SGM1ufiI= Subject key identifier: 42:49:9A:F8:41:B6:62:B1:47:A7:1F:55:96:4D:BB:97:AA:C1:30:7E Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 02D9 Signing time: Fri 19 Dec 2025 00:34:19 +0000 Manifest this update: Fri 19 Dec 2025 00:34:18 +0000 Manifest next update: Fri 26 Dec 2025 00:34:18 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: h9GUR5puvJdKzrZ1QQuWtfseLB2n6ds74yv5cUr605Q=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Dec 19 00:34:18 2025 GMT Not After : Dec 26 00:34:18 2025 GMT Subject: CN=69449d8b-c3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:28:78:e9:55:b3:80:02:46:6e:6a:37:b6: 5f:eb:58:97:9d:9d:63:7c:a0:53:0a:fe:4a:59:9f: c5:4d:3b:95:42:d2:52:d2:c7:93:f5:59:d8:3f:72: 94:0a:30:c3:5c:89:56:17:9d:85:f4:ca:6f:25:b8: 93:ba:56:84:41:fe:da:2c:d6:26:a0:a1:7e:76:96: 47:ae:e6:70:ba:71:00:8a:a1:e1:fd:5e:db:b4:30: 64:49:96:cd:a8:0c:d5:6a:0a:a0:81:e0:36:7c:a1: ef:d4:c2:d3:b5:0a:b1:b0:70:46:6b:df:b2:42:20: 39:ec:b0:1f:75:1b:c3:d3:a5:58:95:c3:72:1f:4d: 5e:8b:f2:9e:5a:12:f8:70:d3:c0:cd:37:ae:89:b2: 81:de:da:90:d0:3b:e6:7d:57:42:1e:41:6d:6a:ed: 5a:3a:c5:97:2e:e3:14:7c:38:fa:89:e3:c0:29:8c: c4:a1:9e:b4:c9:6f:68:ff:0f:55:ed:03:b6:41:50: ee:a7:27:c6:2b:67:d4:02:82:c2:4b:79:05:3c:b4: 5d:d4:07:1a:d1:0a:51:be:09:fb:0f:6b:1b:be:64: 29:ee:f8:83:ae:27:a8:e7:c7:d9:8d:cc:14:09:95: 0d:e3:3d:85:8a:f0:a5:11:33:13:ef:ef:37:a2:1a: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:49:9A:F8:41:B6:62:B1:47:A7:1F:55:96:4D:BB:97:AA:C1:30:7E X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:34:c7:01:6a:65:92:95:d8:c9:1e:72:00:7e:5e:3b:ce: 2a:64:6c:fb:47:5d:eb:6b:48:4d:d0:3e:4e:8f:01:b1:f3:c9: 04:28:c7:74:1d:8f:11:25:57:7c:3b:76:ea:0f:da:0d:7b:d4: b5:01:b4:98:1d:29:f7:39:70:5a:f3:3c:ac:8d:80:7e:67:6b: d0:43:4b:c7:3f:d7:23:1f:79:dd:0b:a5:fc:9c:c9:52:78:b1: b2:0c:b8:9b:31:c2:1f:87:fa:6f:82:68:67:98:3e:48:ce:45: 75:36:cc:7c:b5:f4:b9:23:13:d2:e8:a3:f1:93:37:06:5d:10: b0:7a:95:fd:78:c1:09:c3:db:71:6a:d3:b0:d9:3d:87:6b:45: 8b:fc:44:65:5d:56:c1:bb:d8:4b:d0:21:b9:75:9b:ca:e6:62: 62:a2:0e:2b:3c:f7:fa:47:52:b5:1e:d1:13:bb:7d:4f:fe:e2: 4f:35:01:9c:77:fa:66:30:8e:b0:7d:fb:75:93:07:4c:09:85: 31:bf:8c:64:c7:3f:f2:4a:f7:40:ac:4b:3b:b9:0d:0b:de:f0: 01:b7:41:c6:c2:77:4c:7e:44:6f:37:e0:94:64:ff:50:13:36: e1:9a:5e:50:05:57:5d:67:73:38:a4:1c:c6:42:a3:7b:46:4c: 22:1c:64:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUxMjE5MDAzNDE4WhcNMjUxMjI2MDAzNDE4WjAYMRYwFAYD VQQDDA02OTQ0OWQ4Yi1jM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFcoeOlVs4ACRm5qN7Zf61iXnZ1jfKBTCv5KWZ/FTTuVQtJS0seT9VnYP3KU CjDDXIlWF52F9MpvJbiTulaEQf7aLNYmoKF+dpZHruZwunEAiqHh/V7btDBkSZbN qAzVagqggeA2fKHv1MLTtQqxsHBGa9+yQiA57LAfdRvD06VYlcNyH01ei/KeWhL4 cNPAzTeuibKB3tqQ0DvmfVdCHkFtau1aOsWXLuMUfDj6iePAKYzEoZ60yW9o/w9V 7QO2QVDupyfGK2fUAoLCS3kFPLRd1Aca0QpRvgn7D2sbvmQp7viDrieo58fZjcwU CZUN4z2FivClETMT7+83ohofIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJJmvhB tmKxR6cfVZZNu5eqwTB+MB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaDTHAWplkpXYyR5yAH5eO84qZGz7R13ra0hN0D5OjwGx88kEKMd0 HY8RJVd8O3bqD9oNe9S1AbSYHSn3OXBa8zysjYB+Z2vQQ0vHP9cjH3ndC6X8nMlS eLGyDLibMcIfh/pvgmhnmD5IzkV1Nsx8tfS5IxPS6KPxkzcGXRCwepX9eMEJw9tx atOw2T2Ha0WL/ERlXVbBu9hL0CG5dZvK5mJiog4rPPf6R1K1HtETu31P/uJPNQGc d/pmMI6wfft1kwdMCYUxv4xkxz/ySvdArEs7uQ0L3vABt0HGwndMfkRvN+CUZP9Q Ezbhml5QBVddZ3M4pBzGQqN7RkwiHGTf -----END CERTIFICATE-----Generated at Sat Dec 20 13:52:14 2025 by rpki-client