This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: r4MMFWeDe54voHfB776oAaUZmteZ3prhtmc/iyBN+P0= Subject key identifier: 49:12:1B:FC:F9:F6:22:CD:C1:32:47:59:20:0E:46:69:3E:5F:B3:B3 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: C4 Signing time: Sun 07 Dec 2025 04:46:27 +0000 Manifest this update: Sun 07 Dec 2025 04:46:26 +0000 Manifest next update: Sun 14 Dec 2025 04:46:26 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: rigIFcsNwsCBPgWFZ6BK66hqFFYyldQLzACyWLZ+cDI=) 2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) 3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 4: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) 5: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: EzdO0E9s+3cgAs/ZEX/Wfo2/4xk/HK6LBfwW3sjjoC0=) 6: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Dec 7 04:46:26 2025 GMT Not After : Dec 14 04:46:26 2025 GMT Subject: CN=693506a2-e805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:23:a4:4d:9a:a2:c7:2c:74:49:bc:98:6d: c6:08:9c:2d:fe:9f:70:92:fb:5c:fb:54:ea:0c:38: 0a:56:c5:ac:30:78:c6:59:3c:ca:fe:d3:44:4c:55: c1:75:f7:d3:56:09:62:8d:6f:82:f5:1f:3e:22:c0: 67:4f:8b:b8:3d:40:7f:29:6a:2c:97:69:51:3d:71: 71:aa:16:f6:0b:20:a2:ec:be:15:ed:8e:e5:26:42: 98:2f:0b:28:e8:75:d8:cb:98:a3:19:fa:76:c0:29: 8f:cb:35:d1:10:ba:84:af:7a:f4:e2:e4:6e:a3:d3: 17:1b:3e:82:9c:20:10:e1:71:2b:2e:54:c8:79:cd: 91:26:cd:0e:3b:cc:02:49:24:ec:8d:36:7f:f0:7f: d9:ff:be:c1:05:e4:66:8c:03:c3:bd:65:31:18:37: 5a:07:9c:94:5e:b3:d6:ee:19:f3:a5:e8:c8:81:0e: 19:38:b2:ea:7f:a4:20:9e:95:1c:e4:fd:b5:a1:92: b4:ac:99:d0:8d:94:5c:0f:b8:71:6a:12:06:6a:e7: 80:ac:75:e0:98:11:76:3d:74:f8:f2:fe:3f:24:b0: 63:87:5d:8e:bb:dc:1f:81:79:ce:59:6e:83:28:d7: f1:35:f3:0a:49:b5:35:77:3c:4f:1d:a8:b1:73:ba: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:12:1B:FC:F9:F6:22:CD:C1:32:47:59:20:0E:46:69:3E:5F:B3:B3 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:06:e8:03:12:60:f2:91:6f:b5:8c:ff:0e:04:01:7d:77:3d: 39:ac:d2:de:8d:ed:6e:38:0d:4d:2e:37:e8:69:12:a7:43:37: 98:d4:61:fb:46:21:01:34:66:34:51:7c:2d:08:12:4f:61:e7: a3:f1:6f:2f:7e:55:d4:95:2e:1c:49:7f:2b:53:f4:85:e2:5a: 7d:da:e5:57:bf:35:b9:b9:6d:2f:b9:5c:73:1a:a8:cc:66:6c: 8f:8a:dc:49:cd:56:7e:1a:b2:af:62:2f:44:19:b0:d8:22:12: 3e:c1:de:04:7e:3a:4d:ad:c2:05:a2:07:e3:29:d4:57:58:04: 31:5d:a0:3a:d4:4e:68:4f:e8:f5:dd:0a:d5:4c:36:ac:5e:13: d7:bd:e7:4f:6e:ec:ad:12:d6:5f:e4:95:84:82:f0:15:fe:92: e4:c4:fe:56:08:39:b3:b2:d8:e1:75:89:90:bb:9f:8f:6e:4c: 4d:8c:2e:4e:9b:b0:96:1c:93:df:5c:b8:df:43:d8:0e:9c:9c: c6:b6:8e:95:27:92:a7:20:a8:01:9a:da:15:45:68:54:9e:f4: 2b:b6:1e:44:e9:d4:a3:d9:f1:9d:1d:7a:ff:0b:7b:01:f2:c8: dc:a9:d5:9b:35:72:a6:52:ee:4a:f2:8f:a1:fb:36:cc:84:57: 29:b1:31:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUxMjA3MDQ0NjI2WhcNMjUxMjE0MDQ0NjI2WjAYMRYwFAYD VQQDEw02OTM1MDZhMi1lODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ8jpE2aoscsdEm8mG3GCJwt/p9wkvtc+1TqDDgKVsWsMHjGWTzK/tNETFXB dffTVglijW+C9R8+IsBnT4u4PUB/KWosl2lRPXFxqhb2CyCi7L4V7Y7lJkKYLwso 6HXYy5ijGfp2wCmPyzXRELqEr3r04uRuo9MXGz6CnCAQ4XErLlTIec2RJs0OO8wC SSTsjTZ/8H/Z/77BBeRmjAPDvWUxGDdaB5yUXrPW7hnzpejIgQ4ZOLLqf6QgnpUc 5P21oZK0rJnQjZRcD7hxahIGaueArHXgmBF2PXT48v4/JLBjh12Ou9wfgXnOWW6D KNfxNfMKSbU1dzxPHaixc7rA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkSG/z5 9iLNwTJHWSAORmk+X7OzMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdo OVJtYjBNZ25ZT2p0dVBoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOBugDEmDykW+1jP8OBAF9dz05rNLeje1uOA1NLjfoaRKnQzeY1GH7 RiEBNGY0UXwtCBJPYeej8W8vflXUlS4cSX8rU/SF4lp92uVXvzW5uW0vuVxzGqjM ZmyPitxJzVZ+GrKvYi9EGbDYIhI+wd4EfjpNrcIFogfjKdRXWAQxXaA61E5oT+j1 3QrVTDasXhPXvedPbuytEtZf5JWEgvAV/pLkxP5WCDmzstjhdYmQu5+PbkxNjC5O m7CWHJPfXLjfQ9gOnJzGto6VJ5KnIKgBmtoVRWhUnvQrth5E6dSj2fGdHXr/C3sB 8sjcqdWbNXKmUu5K8o+h+zbMhFcpsTGo -----END CERTIFICATE-----Generated at Mon Dec 8 05:45:22 2025 by rpki-client