This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json) Hash identifier: XT0M+4alDtDBt0kplQ/uSnNFGsym40478uak4BxuOFA= Subject key identifier: 94:24:9B:E3:3D:B7:22:9C:C8:53:01:88:35:C3:E7:03:B6:C5:75:98 Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft Manifest number: 06E3 Signing time: Mon 08 Dec 2025 16:36:47 +0000 Manifest this update: Mon 08 Dec 2025 16:36:46 +0000 Manifest next update: Mon 15 Dec 2025 16:36:46 +0000 Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: GL04aq5VAgONQdNf4hacvMEBeoojAwIxuqNHwHseYUs=) 2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: qm9tOH02ZhUyhN95rojnAyTLcNLxX4GEOIv6/MzX5Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Validity Not Before: Dec 8 16:36:46 2025 GMT Not After : Dec 15 16:36:46 2025 GMT Subject: CN=6936fe9f-aeac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:65:24:3f:61:71:1a:2f:fe:b9:4d:b9:24: e9:4e:39:06:92:b9:29:0b:62:3f:17:b3:53:17:8e: 69:73:bc:e0:78:58:e7:02:a0:87:f5:e9:17:86:db: a3:ea:97:2d:4d:09:48:7f:b1:4f:27:aa:71:72:d1: 00:74:bd:bc:04:85:71:81:d6:cf:79:bf:a8:39:50: 96:a4:ef:61:d3:0f:f2:ad:7f:df:b0:9c:46:ac:22: ae:73:58:63:12:ac:f4:14:7c:a6:3a:68:73:1e:a3: 92:0a:81:83:30:c3:2b:87:bb:c5:0e:e5:88:59:31: d7:72:d6:1f:a7:4e:9f:2c:ff:e6:1f:8b:44:73:64: ba:5a:81:84:80:b7:22:90:ea:db:3b:47:9f:4c:3e: e8:1c:bf:85:13:a9:46:82:77:ac:60:2f:ea:d4:e4: 3c:76:6f:02:f7:2d:c1:f3:02:20:f1:14:6e:b5:3f: ea:72:65:17:fb:8e:32:fe:eb:20:6c:fb:05:fb:3c: c0:aa:fc:88:f6:ba:17:88:a2:b3:b8:53:9b:42:0f: a6:9f:8e:06:9d:23:fa:d8:8a:19:bf:82:e6:54:9c: 26:26:d0:17:1d:94:22:21:61:c6:af:f7:12:e4:3d: c5:67:7a:b3:41:cf:02:d8:ad:16:43:e4:de:71:78: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:9B:E3:3D:B7:22:9C:C8:53:01:88:35:C3:E7:03:B6:C5:75:98 X509v3 Authority Key Identifier: keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c0:05:75:64:fa:77:ec:f2:88:46:fb:8d:34:6c:b8:ba:ff: b6:8f:26:54:b2:ea:27:fe:93:aa:75:18:fc:08:c9:b7:a4:03: 7e:71:c4:f1:98:b7:63:42:90:1e:bf:93:11:eb:e6:a1:8f:a2: 69:ce:59:29:e3:07:a5:11:b4:45:74:8c:8d:99:5c:b4:f6:08: 8e:9d:7c:bc:cf:b8:77:c6:83:39:f9:4d:69:01:ba:44:67:0b: 43:eb:b1:3b:7a:89:76:23:8c:5a:65:6f:86:81:18:84:68:c0: 6c:10:ad:68:05:9b:e3:07:9f:36:ab:69:49:34:23:96:63:5d: 52:33:7e:15:52:c6:5b:be:25:03:0a:b7:59:91:ab:b0:0a:16: 79:ff:13:5c:9c:0a:df:c5:5f:a3:18:c5:e5:70:bf:16:c7:23: e1:5d:16:0c:3e:ca:c1:e3:ca:5b:13:75:0c:ff:64:3f:92:99: de:46:a5:c1:08:7b:22:b5:06:87:c2:fc:12:93:d0:c1:b1:17: 5f:a1:c2:fd:c2:ea:ec:bc:43:4f:f5:13:60:9f:9f:a7:03:44: 2c:6d:11:ad:b5:9d:ab:d0:ee:c1:b7:e8:41:42:ec:3d:8c:3c: 08:c1:d5:ee:7d:ef:fe:12:94:f4:bb:ea:91:d0:76:82:c1:10: c6:c3:4e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEUyNDNGM0JFODI1NTY5QkIxNkFDQjM3NEJDOThEQUJF NjkwQjE3QzEwHhcNMjUxMjA4MTYzNjQ2WhcNMjUxMjE1MTYzNjQ2WjAYMRYwFAYD VQQDEw02OTM2ZmU5Zi1hZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43JlJD9hcRov/rlNuSTpTjkGkrkpC2I/F7NTF45pc7zgeFjnAqCH9ekXhtuj 6pctTQlIf7FPJ6pxctEAdL28BIVxgdbPeb+oOVCWpO9h0w/yrX/fsJxGrCKuc1hj Eqz0FHymOmhzHqOSCoGDMMMrh7vFDuWIWTHXctYfp06fLP/mH4tEc2S6WoGEgLci kOrbO0efTD7oHL+FE6lGgnesYC/q1OQ8dm8C9y3B8wIg8RRutT/qcmUX+44y/usg bPsF+zzAqvyI9roXiKKzuFObQg+mn44GnSP62IoZv4LmVJwmJtAXHZQiIWHGr/cS 5D3FZ3qzQc8C2K0WQ+TecXj+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQkm+M9 tyKcyFMBiDXD5wO2xXWYMB8GA1UdIwQYMBaAFOJD876CVWm7FqyzdLyY2r5pCxfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CODk3QzU4MkEx OUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFic1dyTE4wdkpqYXZta0xG OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzRrUHp2b0pWYWJzV3JMTjB2Smphdm1rTEY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CODk3QzU4MkExOUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFi c1dyTE4wdkpqYXZta0xGOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCowAV1ZPp37PKIRvuNNGy4uv+2jyZUsuon/pOqdRj8CMm3pAN+ccTx mLdjQpAev5MR6+ahj6Jpzlkp4welEbRFdIyNmVy09giOnXy8z7h3xoM5+U1pAbpE ZwtD67E7eol2I4xaZW+GgRiEaMBsEK1oBZvjB582q2lJNCOWY11SM34VUsZbviUD CrdZkauwChZ5/xNcnArfxV+jGMXlcL8WxyPhXRYMPsrB48pbE3UM/2Q/kpneRqXB CHsitQaHwvwSk9DBsRdfocL9wursvENP9RNgn5+nA0QsbRGttZ2r0O7Bt+hBQuw9 jDwIwdXufe/+EpT0u+qR0HaCwRDGw05F -----END CERTIFICATE-----Generated at Wed Dec 10 01:27:38 2025 by rpki-client