This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: zNEldmqwcTEqD0ewzHL8n2DURGmCDYz1PvH8ubABd/U= Subject key identifier: 9A:96:4A:F4:08:D7:41:25:7F:27:3C:C3:88:1A:00:8B:25:3C:C3:03 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02ED Signing time: Mon 08 Dec 2025 23:44:24 +0000 Manifest this update: Mon 08 Dec 2025 23:44:23 +0000 Manifest next update: Mon 15 Dec 2025 23:44:23 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: TBsKM5sfRC+yeiAfhTMfiuWPEmU2rVrRuOTXqGRHtwM=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 23:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Dec 8 23:44:23 2025 GMT Not After : Dec 15 23:44:23 2025 GMT Subject: CN=693762d8-376a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:8e:b2:2f:b9:08:ab:38:09:13:fa:31:c9: 62:bf:bc:5c:5a:70:c2:20:04:9f:ef:8a:30:94:23: fd:39:c3:ba:b2:19:19:8e:4b:54:49:f1:b9:04:dc: a6:ca:cd:98:d4:69:ba:fd:39:45:a9:45:72:25:14: 73:95:8c:42:49:bc:e2:20:eb:22:f1:09:17:e7:da: 26:38:ae:7c:ae:32:82:5a:56:c0:e4:8c:75:23:db: 4b:96:61:b4:03:57:82:59:af:fa:7c:16:a3:6b:f2: 57:a9:10:ec:1c:d9:5c:87:58:dc:c5:64:f1:79:10: 54:64:1c:fe:f8:a1:00:bf:05:e8:96:08:d0:81:18: 90:bf:3a:b6:97:cf:ea:55:c7:7c:c3:74:e6:12:71: 3e:4d:38:f1:86:e6:99:e9:74:ff:d4:c1:60:ed:13: 9d:75:7f:71:91:80:97:51:7f:1d:76:a1:66:78:e3: 21:eb:2f:43:dc:33:90:8d:2f:be:8e:78:4b:6a:e1: 4f:58:98:70:ae:87:41:2f:5a:aa:9a:33:65:e4:7d: ab:60:bc:ae:08:c3:71:97:f3:b6:50:e6:86:05:af: dc:84:c4:c1:21:0f:c8:66:f4:c0:57:22:a5:6d:2d: bb:b6:7c:33:db:4c:e4:42:f2:5e:82:cb:50:c8:60: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:96:4A:F4:08:D7:41:25:7F:27:3C:C3:88:1A:00:8B:25:3C:C3:03 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fa:89:8f:50:fd:bc:de:67:b5:52:bd:65:11:51:d1:53:1f: 02:71:84:8c:dd:84:59:12:ad:23:a7:f9:3f:36:c8:2e:65:4c: 2f:9a:24:1b:2e:28:73:e4:3e:93:c5:bb:fe:e6:a6:bf:6c:dd: 3a:94:22:75:13:d6:ab:26:85:c3:6f:75:38:06:91:9f:b2:0d: dc:0d:ae:c4:47:69:ae:fa:4a:95:04:44:c9:60:d3:41:9e:88: cf:9e:8b:b1:f4:2c:e3:13:69:74:72:d0:11:ba:5e:1e:9e:6d: be:a8:02:71:19:17:b4:88:96:d2:2d:90:76:3a:1b:86:69:98: b6:34:3f:e1:e1:89:89:76:c0:94:4a:56:72:d6:02:85:eb:63: 95:a3:10:ad:23:f0:80:3c:4a:f6:af:be:b5:c6:c8:6f:39:fa: 58:8d:d4:26:9c:2f:6a:6c:40:9c:3b:4b:60:26:53:d2:19:02: 1a:38:95:4e:3b:73:43:32:84:12:cc:4a:78:b2:48:54:27:e3: 16:a1:ad:f5:8f:db:f6:96:40:7d:1d:ce:74:4f:19:29:c2:aa: a3:dd:2e:23:49:bc:c1:b8:01:f3:96:98:bf:a5:b6:31:1f:64: d4:f4:7f:84:cd:3a:64:a3:f8:8a:cf:70:a6:11:30:8d:e4:9d: 2b:32:a7:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUxMjA4MjM0NDIzWhcNMjUxMjE1MjM0NDIzWjAYMRYwFAYD VQQDEw02OTM3NjJkOC0zNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoieOsi+5CKs4CRP6Mcliv7xcWnDCIASf74owlCP9OcO6shkZjktUSfG5BNym ys2Y1Gm6/TlFqUVyJRRzlYxCSbziIOsi8QkX59omOK58rjKCWlbA5Ix1I9tLlmG0 A1eCWa/6fBaja/JXqRDsHNlch1jcxWTxeRBUZBz++KEAvwXolgjQgRiQvzq2l8/q Vcd8w3TmEnE+TTjxhuaZ6XT/1MFg7ROddX9xkYCXUX8ddqFmeOMh6y9D3DOQjS++ jnhLauFPWJhwrodBL1qqmjNl5H2rYLyuCMNxl/O2UOaGBa/chMTBIQ/IZvTAVyKl bS27tnwz20zkQvJegstQyGCNhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqWSvQI 10Elfyc8w4gaAIslPMMDMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg+omPUP283me1Ur1lEVHRUx8CcYSM3YRZEq0jp/k/NsguZUwvmiQb Lihz5D6Txbv+5qa/bN06lCJ1E9arJoXDb3U4BpGfsg3cDa7ER2mu+kqVBETJYNNB nojPnoux9CzjE2l0ctARul4enm2+qAJxGRe0iJbSLZB2OhuGaZi2ND/h4YmJdsCU SlZy1gKF62OVoxCtI/CAPEr2r761xshvOfpYjdQmnC9qbECcO0tgJlPSGQIaOJVO O3NDMoQSzEp4skhUJ+MWoa31j9v2lkB9Hc50Txkpwqqj3S4jSbzBuAHzlpi/pbYx H2TU9H+EzTpko/iKz3CmETCN5J0rMqdD -----END CERTIFICATE-----Generated at Wed Dec 10 09:05:24 2025 by rpki-client