This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: ZzM57oY/7mZ1tok/fUOzmZXkQssetQvI2ZZWBQWIWjo= Subject key identifier: 86:B9:F8:B9:FE:E1:D9:60:5C:33:DC:5F:3C:BF:AD:75:84:9A:37:3D Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0991 Signing time: Mon 22 Dec 2025 19:25:18 +0000 Manifest this update: Mon 22 Dec 2025 19:25:17 +0000 Manifest next update: Mon 29 Dec 2025 19:25:17 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: pQelqiDnzcqwuO2pgPZmHyhke0Mm6mbwHeqcDVxMI2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Dec 22 19:25:17 2025 GMT Not After : Dec 29 19:25:17 2025 GMT Subject: CN=69499b1e-e2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:8c:81:c4:38:58:2a:96:91:3e:8b:b6:a3: d1:3d:8a:f5:29:f3:ec:a6:82:a4:07:37:e3:97:f7: bf:4b:e8:e8:87:1a:75:ca:33:b0:28:d3:ba:15:cb: cb:97:3c:aa:e1:6d:d6:d5:3b:d3:8a:b6:76:2a:89: 37:45:1c:6d:b7:d3:fd:68:3a:b5:cf:63:d0:65:20: d1:bc:49:b1:fc:96:22:3e:9f:32:6f:3a:70:51:71: 5f:f3:64:da:a9:c4:e8:dc:54:61:76:11:54:ae:d2: 05:9e:c0:15:b3:f9:f2:26:36:cf:11:6d:64:63:af: 18:a1:a7:48:af:5e:5f:f9:cb:20:16:46:9b:b5:f4: 30:26:23:57:97:9f:ae:b6:c7:e9:0a:10:be:31:98: af:0e:52:64:69:16:46:91:83:ac:17:92:69:e4:30: ce:13:ac:d3:03:ef:54:da:ec:d6:43:a1:7c:6f:7e: 01:a1:6d:c1:41:13:77:5f:01:11:75:37:11:73:a0: 11:78:4a:ed:61:83:b6:10:c5:78:f7:a1:b2:22:6e: 82:ab:7f:76:39:e8:f8:4a:6c:7d:23:7e:b9:18:61: bc:93:d6:f9:7c:b8:5f:28:ea:04:79:27:52:9c:35: 71:e2:b3:b9:90:b3:d6:6b:6c:6a:4a:4f:bc:08:e1: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:F8:B9:FE:E1:D9:60:5C:33:DC:5F:3C:BF:AD:75:84:9A:37:3D X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1f:a5:d1:bc:b4:d5:2c:c2:af:31:ba:c7:c3:9d:27:6a:3a: b1:53:93:6b:94:05:99:08:72:bd:05:bc:7e:c8:2f:4d:1a:48: eb:32:54:3a:05:2d:a0:6e:49:87:9b:07:46:86:33:ff:09:ce: 6e:8c:19:ce:2d:0f:71:b8:7a:45:cc:28:62:be:5c:70:75:68: 96:33:a6:ce:07:3a:5d:a8:1d:3b:45:38:97:a8:3a:f6:42:d3: 64:27:f0:dd:21:9b:41:d2:dc:59:7b:26:a0:e4:d1:c1:bd:af: f5:b7:bd:a1:48:74:00:13:e5:0c:59:71:e4:7e:07:58:67:34: bf:4e:03:e9:35:b7:8a:b8:e5:ca:39:3a:e7:33:ac:c7:51:76: 8e:42:de:b6:a7:74:77:6f:8a:16:dd:fd:c6:69:b3:76:a3:8e: 5d:cd:51:9f:cb:24:bb:a1:3b:ab:48:62:84:3b:2a:f1:7a:74: 04:3f:22:65:49:05:0c:c8:bb:03:8a:74:d4:81:9c:df:4f:02: 3f:f7:6f:c9:96:ff:bb:a2:3e:a9:5c:e4:b9:cd:e4:d7:bd:6d: ee:e0:a4:56:72:aa:93:50:c9:2e:c0:32:aa:5c:06:73:59:25: d4:b9:3c:55:b1:32:bc:c0:b5:86:2e:4b:a6:40:c5:a4:90:d5: 41:da:c8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUxMjIyMTkyNTE3WhcNMjUxMjI5MTkyNTE3WjAYMRYwFAYD VQQDDA02OTQ5OWIxZS1lMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlyMgcQ4WCqWkT6LtqPRPYr1KfPspoKkBzfjl/e/S+johxp1yjOwKNO6FcvL lzyq4W3W1TvTirZ2Kok3RRxtt9P9aDq1z2PQZSDRvEmx/JYiPp8ybzpwUXFf82Ta qcTo3FRhdhFUrtIFnsAVs/nyJjbPEW1kY68YoadIr15f+csgFkabtfQwJiNXl5+u tsfpChC+MZivDlJkaRZGkYOsF5Jp5DDOE6zTA+9U2uzWQ6F8b34BoW3BQRN3XwER dTcRc6AReErtYYO2EMV496GyIm6Cq392Oej4Smx9I365GGG8k9b5fLhfKOoEeSdS nDVx4rO5kLPWa2xqSk+8COEfnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa5+Ln+ 4dlgXDPcXzy/rXWEmjc9MB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZH6XRvLTVLMKvMbrHw50najqxU5NrlAWZCHK9Bbx+yC9NGkjrMlQ6 BS2gbkmHmwdGhjP/Cc5ujBnOLQ9xuHpFzChivlxwdWiWM6bOBzpdqB07RTiXqDr2 QtNkJ/DdIZtB0txZeyag5NHBva/1t72hSHQAE+UMWXHkfgdYZzS/TgPpNbeKuOXK OTrnM6zHUXaOQt62p3R3b4oW3f3GabN2o45dzVGfyyS7oTurSGKEOyrxenQEPyJl SQUMyLsDinTUgZzfTwI/92/Jlv+7oj6pXOS5zeTXvW3u4KRWcqqTUMkuwDKqXAZz WSXUuTxVsTK8wLWGLkumQMWkkNVB2sjP -----END CERTIFICATE-----Generated at Tue Dec 23 18:06:12 2025 by rpki-client