This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json) Hash identifier: 1T0CrwUeYaQuRuTtoDoK68IYMuABFCbBpOXWMWBhg0Y= Subject key identifier: E8:FF:0C:03:1C:6B:EF:2C:E9:7E:79:95:C9:BE:51:25:C0:24:2F:36 Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft Manifest number: 34EE Signing time: Mon 22 Dec 2025 14:26:23 +0000 Manifest this update: Mon 22 Dec 2025 14:26:22 +0000 Manifest next update: Mon 29 Dec 2025 14:26:22 +0000 Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: rFykKCalHKfTiopx2s35I2T2H1WiLbB89TQIAz8PDHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Validity Not Before: Dec 22 14:26:22 2025 GMT Not After : Dec 29 14:26:22 2025 GMT Subject: CN=6949550f-0744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:cf:8c:07:01:36:db:a1:64:94:4d:21:ae: cf:6c:78:20:6e:cd:8f:87:d7:d8:f3:7f:29:19:47: 0f:fe:b4:ff:4d:9d:4a:37:8b:b0:09:8e:2c:94:92: 33:c3:b4:91:ab:fa:be:17:ed:38:6e:74:6c:39:f0: 94:5f:b6:c6:31:03:1f:91:66:50:0b:4c:96:66:ad: 32:fe:37:63:96:db:ee:48:11:15:40:3d:ec:2e:ef: 79:4d:c7:b1:72:84:a1:5e:50:16:ed:b8:3f:88:61: fa:00:46:06:e7:7d:f8:64:05:1b:7f:88:50:2e:fa: 9c:d0:44:01:f4:96:4c:76:79:19:3b:b4:f0:9f:23: c7:70:b3:a2:29:6e:d7:99:f3:34:70:04:a8:f3:48: 57:c4:6d:42:a3:35:03:a4:44:a5:26:04:50:bf:b6: 75:61:29:b9:53:fa:93:91:fe:eb:c3:8c:02:8e:74: 48:47:7e:f3:ab:33:8c:09:c9:5b:4d:cc:f1:75:db: ba:99:37:61:7f:93:28:03:d4:4a:7a:ad:54:8a:0d: 9d:33:33:bd:69:d3:80:91:bd:12:79:3e:d2:33:7e: 0b:e4:3b:42:4b:66:1e:96:bc:67:03:b8:ef:51:ee: d9:c0:61:20:b3:a4:10:b4:18:38:ab:15:45:61:c2: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:0C:03:1C:6B:EF:2C:E9:7E:79:95:C9:BE:51:25:C0:24:2F:36 X509v3 Authority Key Identifier: keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f5:22:11:9d:60:13:e4:47:5e:e5:49:5f:98:d9:56:cb:bb: aa:21:2a:50:ce:04:43:b3:6f:e4:ef:df:f3:8b:f6:8f:38:56: 6b:43:5b:24:3d:79:8e:b1:45:e5:7d:f8:e3:35:b9:b3:23:14: aa:f6:61:b7:39:78:9b:5c:13:e4:f8:62:38:36:f0:ae:55:1d: 24:ad:70:c4:eb:ad:bb:86:54:2a:e8:38:10:1b:c0:d9:0e:7f: 53:6d:84:b5:fc:e6:c8:ea:06:00:2f:d5:be:48:c7:d4:0b:08: ce:0e:ff:66:75:7d:ee:28:b0:45:93:30:0e:9b:3d:1f:4a:59: d5:d8:04:70:13:5a:2a:72:89:e0:4b:ef:4b:61:67:3f:24:07: 76:b1:66:b5:ec:85:8d:e7:63:59:6d:d8:d1:65:b4:95:2f:4e: 96:70:19:a8:cb:48:8d:9a:48:23:5b:2a:b3:ad:1f:8f:2d:20: b4:c2:2e:e7:03:e5:bc:d8:6f:e4:f9:be:c1:88:bb:6a:27:75: f4:34:b4:14:02:60:e0:94:8b:90:7a:ec:93:d8:01:cd:d7:2d: e2:d9:74:ab:c5:a4:1b:ab:e1:fe:ee:84:38:00:91:45:ac:5b: 28:4b:09:0c:e3:b1:0f:9f:9d:17:c6:cd:91:9b:96:62:f4:a3: b8:59:c4:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw RDZGQjc5NEQwHhcNMjUxMjIyMTQyNjIyWhcNMjUxMjI5MTQyNjIyWjAYMRYwFAYD VQQDDA02OTQ5NTUwZi0wNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AjPjAcBNtuhZJRNIa7PbHggbs2Ph9fY838pGUcP/rT/TZ1KN4uwCY4slJIz w7SRq/q+F+04bnRsOfCUX7bGMQMfkWZQC0yWZq0y/jdjltvuSBEVQD3sLu95Tcex coShXlAW7bg/iGH6AEYG5334ZAUbf4hQLvqc0EQB9JZMdnkZO7TwnyPHcLOiKW7X mfM0cASo80hXxG1CozUDpESlJgRQv7Z1YSm5U/qTkf7rw4wCjnRIR37zqzOMCclb Tczxddu6mTdhf5MoA9RKeq1Uig2dMzO9adOAkb0SeT7SM34L5DtCS2YelrxnA7jv Ue7ZwGEgs6QQtBg4qxVFYcJaAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj/DAMc a+8s6X55lcm+USXAJC82MB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp TG9yQTZmOXMxWUVOYjdlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX9SIRnWAT5Ede5UlfmNlWy7uqISpQzgRDs2/k79/zi/aPOFZrQ1sk PXmOsUXlffjjNbmzIxSq9mG3OXibXBPk+GI4NvCuVR0krXDE6627hlQq6DgQG8DZ Dn9TbYS1/ObI6gYAL9W+SMfUCwjODv9mdX3uKLBFkzAOmz0fSlnV2ARwE1oqcong S+9LYWc/JAd2sWa17IWN52NZbdjRZbSVL06WcBmoy0iNmkgjWyqzrR+PLSC0wi7n A+W82G/k+b7BiLtqJ3X0NLQUAmDglIuQeuyT2AHN1y3i2XSrxaQbq+H+7oQ4AJFF rFsoSwkM47EPn50Xxs2Rm5Zi9KO4WcTQ -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:32 2025 by rpki-client