This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: YXlBZC23unO/diiWIjqcKYQ/3smdpcwX5leUDeVnf9U= Subject key identifier: 7E:7C:B9:5F:0A:3E:97:73:3E:98:08:E5:85:52:E1:B7:91:C2:D1:CC Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 07D0 Signing time: Mon 08 Dec 2025 20:22:31 +0000 Manifest this update: Mon 08 Dec 2025 20:22:30 +0000 Manifest next update: Mon 15 Dec 2025 20:22:30 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: KqOYAMlvlJLA53W4LKTKsReGiw6u4Xsp5rlccZ3c2Bo=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: hFRxkLpFxynkLA+bgk7ZWKTxrIef2z810IITJ3Z3KSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 20:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Dec 8 20:22:30 2025 GMT Not After : Dec 15 20:22:30 2025 GMT Subject: CN=69373387-240e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:41:cb:90:d7:51:65:a3:1b:44:a6:40:e3: 80:b4:4c:f3:00:12:8a:1f:04:91:4d:0c:94:93:ba: ef:e8:96:ed:e7:1d:8b:9a:ed:96:b4:21:19:8d:93: 64:70:63:0a:2e:d4:b9:6f:34:a7:0b:44:3a:6f:cd: f7:b1:30:2f:16:61:68:f7:be:5d:bd:73:f8:8a:a2: d4:35:a7:e6:bc:b1:2b:a5:93:3c:79:53:c6:af:88: 27:45:11:f4:2d:86:0c:72:65:d8:4c:a7:85:bb:e9: ea:35:ca:67:f2:1b:94:0f:eb:05:7f:38:5c:2e:64: 0b:b3:60:32:a2:3c:9a:ce:e8:fd:9a:a6:64:11:86: b6:4e:80:47:28:34:2c:e5:b5:41:c1:67:41:c5:22: b2:0c:d1:40:52:0e:ca:11:f2:23:65:61:67:e7:84: d8:61:74:84:58:ad:d7:eb:ee:49:79:19:83:f6:8a: 65:5d:7d:19:09:a7:9b:2d:47:43:bc:cb:43:18:13: 6c:4a:d4:42:5f:6b:ac:43:66:85:1b:26:c8:1a:2f: d0:cb:34:db:e2:7e:03:83:ce:90:be:b3:c9:5d:52: 0a:b4:30:2a:2f:e7:b4:4b:38:a3:08:7d:c5:9a:62: b0:ff:8a:bb:79:e1:77:5e:ac:eb:a7:98:55:24:98: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7C:B9:5F:0A:3E:97:73:3E:98:08:E5:85:52:E1:B7:91:C2:D1:CC X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:14:eb:37:18:3d:7d:92:bb:ee:99:86:22:69:e0:8e:d6: 7c:b3:5e:bd:72:2b:1a:72:6f:65:5b:5a:47:2f:d4:32:d7:5f: 6b:44:39:4a:c3:12:b1:7a:63:20:b7:13:7c:b1:73:ef:74:ab: a2:40:0c:76:44:a3:0f:66:c6:8c:f4:2b:4e:82:78:81:7b:fa: 8c:96:a0:81:d8:2f:4c:c4:00:58:5a:04:2b:3f:7b:93:bf:23: 5a:35:4f:3f:03:cd:e4:7d:69:9c:59:c8:19:88:50:3e:89:e0: 23:a5:ab:f4:aa:53:d9:51:02:7b:0b:9f:c9:92:85:d5:5b:f9: 09:c3:5f:79:fb:7e:2a:76:3c:99:5e:03:47:cb:89:db:bc:7f: dd:fa:4c:c8:ce:a8:72:16:69:6d:6d:98:74:8a:0c:83:e4:dc: ed:9e:00:2a:6a:6a:9e:b1:1f:54:f5:30:bd:6d:93:c9:50:4e: 3c:4a:ec:ee:3e:44:f6:69:b7:c8:33:05:0d:86:ed:b3:64:2b: 9b:95:47:7d:d9:79:69:4b:f7:5b:72:ec:7e:73:37:46:d8:e7: b0:d5:a7:de:a9:3e:39:2b:98:b4:08:b0:fe:3e:97:ff:40:ef: 67:be:3a:05:0b:ee:98:90:7d:26:c3:c4:4b:4b:51:19:18:2e: c0:54:14:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUxMjA4MjAyMjMwWhcNMjUxMjE1MjAyMjMwWjAYMRYwFAYD VQQDEw02OTM3MzM4Ny0yNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EJBy5DXUWWjG0SmQOOAtEzzABKKHwSRTQyUk7rv6Jbt5x2Lmu2WtCEZjZNk cGMKLtS5bzSnC0Q6b833sTAvFmFo975dvXP4iqLUNafmvLErpZM8eVPGr4gnRRH0 LYYMcmXYTKeFu+nqNcpn8huUD+sFfzhcLmQLs2Ayojyazuj9mqZkEYa2ToBHKDQs 5bVBwWdBxSKyDNFAUg7KEfIjZWFn54TYYXSEWK3X6+5JeRmD9oplXX0ZCaebLUdD vMtDGBNsStRCX2usQ2aFGybIGi/QyzTb4n4Dg86QvrPJXVIKtDAqL+e0SzijCH3F mmKw/4q7eeF3Xqzrp5hVJJjfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH58uV8K PpdzPpgI5YVS4beRwtHMMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk5BTrNxg9fZK77pmGImngjtZ8s169cisacm9lW1pHL9Qy119rRDlK wxKxemMgtxN8sXPvdKuiQAx2RKMPZsaM9CtOgniBe/qMlqCB2C9MxABYWgQrP3uT vyNaNU8/A83kfWmcWcgZiFA+ieAjpav0qlPZUQJ7C5/JkoXVW/kJw195+34qdjyZ XgNHy4nbvH/d+kzIzqhyFmltbZh0igyD5NztngAqamqesR9U9TC9bZPJUE48Suzu PkT2abfIMwUNhu2zZCublUd92XlpS/dbcux+czdG2Oew1afeqT45K5i0CLD+Ppf/ QO9nvjoFC+6YkH0mw8RLS1EZGC7AVBS6 -----END CERTIFICATE-----Generated at Wed Dec 10 05:38:42 2025 by rpki-client