This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: k9DupYYhPBWKSkCV46cV0aa+EohTKNa4/OLb2M6eJto= Subject key identifier: 09:C8:03:B8:08:E4:4C:54:5E:68:00:48:95:F5:DF:93:A4:08:B5:E0 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 04C5 Signing time: Sun 14 Dec 2025 20:01:42 +0000 Manifest this update: Sun 14 Dec 2025 20:01:42 +0000 Manifest next update: Sun 21 Dec 2025 20:01:42 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: 1KJQ/5OvX7OfyzvWQeMBogZ1rAQzcl5IVif12XU5+cg=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: j4swnApm+9qnd1JxhNqpHgqCfq33TfBVlK6hEwOceBY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: omXPUpgqUwy7Ho8dCu5BoDvGaEojyvGoRFJTZ4dVFjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Dec 14 20:01:42 2025 GMT Not After : Dec 21 20:01:42 2025 GMT Subject: CN=693f17a6-dc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:3a:69:fc:f6:fd:23:ee:00:06:12:0b:2f: cc:2a:63:d3:96:d8:78:e2:c2:0a:24:3b:bc:c0:34: 7f:4c:ce:03:51:67:61:b7:2b:fd:61:9a:b6:92:2c: c8:cd:bb:76:94:2d:2f:af:da:09:01:cb:a8:d8:cf: e2:e6:09:90:87:14:b5:d7:03:ca:99:a0:6b:ae:51: ed:9e:fd:95:c0:8b:21:00:74:39:33:60:cc:72:6d: f4:c7:4a:97:56:ba:2d:bd:03:79:eb:ef:b2:b1:1f: 1d:71:4b:1d:2e:81:00:5e:00:2e:f1:ca:7a:c3:53: 77:1b:5f:ce:f6:53:9c:3b:f6:93:cb:44:bf:dc:f0: 17:11:06:d6:2f:7f:9a:5f:2a:76:5d:e0:0a:67:04: 61:01:f4:39:93:e7:7f:b6:b0:76:71:17:95:6b:5e: 75:1e:46:2a:88:84:9e:78:14:05:6b:5f:9e:89:5c: 3d:0b:4a:40:1e:7b:1b:bd:18:97:d5:9a:d9:7f:8b: ae:e1:6c:70:a1:1e:fd:1e:12:af:ec:dd:99:2a:2d: d2:f8:35:d4:a8:3e:3d:75:b6:ba:88:a5:13:e8:ee: a2:da:4e:f1:e2:5b:f5:2c:da:15:a9:d8:e8:3c:bb: 4e:5c:ec:51:a9:0a:fd:87:a1:51:18:18:2b:8c:43: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C8:03:B8:08:E4:4C:54:5E:68:00:48:95:F5:DF:93:A4:08:B5:E0 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:14:5d:37:f4:cc:b7:d2:3e:c0:1d:1f:2f:09:9a:e6:c0:51: ab:02:2f:92:fd:a2:5e:4c:23:be:2e:b1:ac:45:ce:35:0a:8e: db:48:13:3f:9f:a4:60:0e:2f:9c:b4:30:1d:03:55:22:78:59: 37:2d:51:b5:0a:0a:66:89:8c:02:77:87:8b:3d:e4:47:8b:6f: dd:54:38:fa:b1:26:da:7a:e8:74:ae:57:62:16:57:9e:ed:48: b8:72:98:47:16:05:53:49:cf:e6:77:36:a6:70:5c:da:ed:5d: bc:28:01:5a:81:d3:ae:be:69:85:60:fd:80:6a:5c:d1:fd:53: 1f:11:e9:85:ea:fc:d3:2c:aa:9a:21:9a:e6:cf:34:7a:b2:27: e9:91:c8:eb:aa:6f:ac:f4:6f:c2:be:2d:37:98:6e:10:c9:33: d8:fa:9d:b9:eb:5a:76:3d:8e:6f:74:2b:e9:7f:8c:0c:af:8e: 53:6d:a1:7d:30:66:01:2c:7e:b8:19:50:29:74:07:85:0a:4d: f7:94:fd:8a:ee:2a:7d:3d:6a:a6:d0:a5:22:ae:4a:4f:c3:a9: 2d:af:2e:2a:6b:e3:b0:f5:1a:a5:23:33:35:21:c4:c9:1d:cc: 0d:4d:f7:d0:08:6e:18:f2:9d:6e:52:65:78:56:a0:ff:6d:00: 22:97:d7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMjE0MjAwMTQyWhcNMjUxMjIxMjAwMTQyWjAYMRYwFAYD VQQDDA02OTNmMTdhNi1kYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbA6afz2/SPuAAYSCy/MKmPTlth44sIKJDu8wDR/TM4DUWdhtyv9YZq2kizI zbt2lC0vr9oJAcuo2M/i5gmQhxS11wPKmaBrrlHtnv2VwIshAHQ5M2DMcm30x0qX VrotvQN56++ysR8dcUsdLoEAXgAu8cp6w1N3G1/O9lOcO/aTy0S/3PAXEQbWL3+a Xyp2XeAKZwRhAfQ5k+d/trB2cReVa151HkYqiISeeBQFa1+eiVw9C0pAHnsbvRiX 1ZrZf4uu4WxwoR79HhKv7N2ZKi3S+DXUqD49dba6iKUT6O6i2k7x4lv1LNoVqdjo PLtOXOxRqQr9h6FRGBgrjEO9SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnIA7gI 5ExUXmgASJX135OkCLXgMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUFF039My30j7AHR8vCZrmwFGrAi+S/aJeTCO+LrGsRc41Co7bSBM/ n6RgDi+ctDAdA1UieFk3LVG1CgpmiYwCd4eLPeRHi2/dVDj6sSbaeuh0rldiFlee 7Ui4cphHFgVTSc/mdzamcFza7V28KAFagdOuvmmFYP2AalzR/VMfEemF6vzTLKqa IZrmzzR6sifpkcjrqm+s9G/Cvi03mG4QyTPY+p2561p2PY5vdCvpf4wMr45TbaF9 MGYBLH64GVApdAeFCk33lP2K7ip9PWqm0KUirkpPw6ktry4qa+Ow9RqlIzM1IcTJ HcwNTffQCG4Y8p1uUmV4VqD/bQAil9c2 -----END CERTIFICATE-----Generated at Tue Dec 16 12:51:09 2025 by rpki-client