This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: e1Y6ceL5z0aNTjxK8AKxwLlFHCvHxCPS1MrZbo6+aus= Subject key identifier: 12:C1:0D:9B:42:87:AD:40:B3:D0:39:81:E5:4C:BD:CA:06:26:D6:1D Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: F6 Signing time: Wed 03 Dec 2025 03:38:05 +0000 Manifest this update: Wed 03 Dec 2025 03:38:04 +0000 Manifest next update: Wed 10 Dec 2025 03:38:04 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: MuEqFQtJBrrZVfZpX+CNxaiDBtuP4EV9nIYhiWV14Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Dec 3 03:38:04 2025 GMT Not After : Dec 10 03:38:04 2025 GMT Subject: CN=692fb09d-3bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:86:64:b8:39:30:4d:dc:46:ab:c2:3b:9b: 60:b9:a1:50:bd:d2:b5:53:c5:fc:6c:60:c4:ff:59: 91:98:a4:5a:31:d1:cf:79:a4:0e:cc:a3:26:87:20: 91:92:ad:7d:e7:ad:08:df:dc:5c:6d:df:b8:7f:15: dd:8e:42:64:0d:5f:4d:8f:7f:f7:9b:f3:3e:38:28: 08:66:a9:98:5a:87:e4:2e:9e:1e:99:f5:15:cd:3d: e1:95:36:1c:d5:0b:45:0e:7f:c1:e1:97:af:38:f2: 09:86:36:6c:e4:94:8a:a5:2a:e3:27:49:26:d5:8d: 66:f3:9d:44:08:7e:c7:4e:35:7e:4b:2d:e8:0b:c2: 31:a4:65:3e:32:d0:75:3f:3c:dc:48:f1:6c:5d:fd: 81:e9:eb:3b:be:d7:85:6f:45:f9:61:19:e0:2a:9b: fc:0e:64:cd:40:11:02:c6:c1:e1:fe:59:67:43:26: 16:99:a2:8f:c7:2f:54:e4:c4:45:9f:08:43:42:f3: 2c:ab:73:33:f1:96:43:40:f6:b0:f6:ba:ac:a3:fb: 0b:b2:08:3e:55:08:6e:df:66:5d:b8:22:7a:2f:c4: 41:ff:71:61:2b:c8:61:cc:03:6a:8b:6e:27:59:e5: 9b:47:23:f5:22:76:02:a9:c4:4f:f9:f7:ea:43:5f: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:0D:9B:42:87:AD:40:B3:D0:39:81:E5:4C:BD:CA:06:26:D6:1D X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:87:54:e8:b4:f8:e8:3a:b1:e4:19:56:96:56:64:75:cb:66: 12:c2:b9:10:b2:24:16:d6:53:64:dd:d1:a6:5e:1b:b0:0f:31: 80:fa:fa:0f:dc:32:cc:06:82:4d:2c:92:66:52:a8:c5:fb:d2: a5:04:95:b0:b9:a1:6a:15:16:e1:3e:97:22:ae:fa:bb:fe:ab: 81:5e:72:9c:a0:62:95:95:7a:3b:56:7b:4d:f8:35:c6:d7:76: 22:b2:35:6c:10:61:63:fc:59:a1:da:c6:5b:16:b5:72:19:8f: 2e:25:b6:5f:93:e6:41:48:70:7e:2a:c7:48:ef:c4:9a:74:fa: 7f:92:b4:05:54:c0:4b:54:d4:c2:8f:1d:5c:51:10:0d:63:70: b5:3d:38:5e:73:22:92:fc:90:14:8b:d2:49:ac:de:a2:56:1c: ed:62:64:20:06:36:69:b6:5f:8b:72:ab:e9:76:61:ad:67:83: 2d:ae:cb:e8:3b:78:8f:3a:14:f4:71:85:d7:f0:be:71:33:d9: 4b:f1:d0:1b:28:41:d9:f5:65:11:33:5f:99:c4:2c:c5:f3:8c: 23:bc:af:62:e2:a4:33:a1:de:c8:9e:33:d2:0b:39:32:7f:3d: c9:68:2e:7b:2f:18:9c:2e:7a:4a:2d:3b:f7:f0:50:d6:43:ae: 55:41:78:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUxMjAzMDMzODA0WhcNMjUxMjEwMDMzODA0WjAYMRYwFAYD VQQDEw02OTJmYjA5ZC0zYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUiGZLg5ME3cRqvCO5tguaFQvdK1U8X8bGDE/1mRmKRaMdHPeaQOzKMmhyCR kq19560I39xcbd+4fxXdjkJkDV9Nj3/3m/M+OCgIZqmYWofkLp4emfUVzT3hlTYc 1QtFDn/B4ZevOPIJhjZs5JSKpSrjJ0km1Y1m851ECH7HTjV+Sy3oC8IxpGU+MtB1 PzzcSPFsXf2B6es7vteFb0X5YRngKpv8DmTNQBECxsHh/llnQyYWmaKPxy9U5MRF nwhDQvMsq3Mz8ZZDQPaw9rqso/sLsgg+VQhu32ZduCJ6L8RB/3FhK8hhzANqi24n WeWbRyP1InYCqcRP+ffqQ1/OTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLBDZtC h61As9A5geVMvcoGJtYdMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUh1TotPjoOrHkGVaWVmR1y2YSwrkQsiQW1lNk3dGmXhuwDzGA+voP 3DLMBoJNLJJmUqjF+9KlBJWwuaFqFRbhPpcirvq7/quBXnKcoGKVlXo7VntN+DXG 13YisjVsEGFj/Fmh2sZbFrVyGY8uJbZfk+ZBSHB+KsdI78SadPp/krQFVMBLVNTC jx1cURANY3C1PThecyKS/JAUi9JJrN6iVhztYmQgBjZptl+LcqvpdmGtZ4Mtrsvo O3iPOhT0cYXX8L5xM9lL8dAbKEHZ9WURM1+ZxCzF84wjvK9i4qQzod7InjPSCzky fz3JaC57LxicLnpKLTv38FDWQ65VQXhD -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:20 2025 by rpki-client