This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: Jj3RUy8zfkRH2YLs/99Fu42pOmNHIz6Vte6z7GIZ6LA= Subject key identifier: 1D:AC:D9:D9:6F:2A:4B:E3:8F:80:CD:CC:45:5C:E6:8D:91:37:1C:E8 Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 34FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 34F1 Signing time: Thu 18 Dec 2025 15:05:07 +0000 Manifest this update: Thu 18 Dec 2025 15:05:06 +0000 Manifest next update: Thu 25 Dec 2025 15:05:06 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: cZwF6VUuSc5si0SD5JsFq4VT0/EwihrCT2pAy2JMh14=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Dec 18 15:05:06 2025 GMT Not After : Dec 25 15:05:06 2025 GMT Subject: CN=69441823-bcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:ff:49:64:df:b1:0f:26:61:f6:b9:6d:8e: 5b:3c:a8:65:0b:72:7e:ad:6c:cd:c4:a8:f4:ce:c6: b5:16:9b:13:ef:56:0a:59:05:f7:f5:cc:02:f6:20: 39:b7:ea:ed:d4:93:57:84:c1:50:b2:f0:74:fa:79: 1f:79:40:99:d6:69:2d:e1:7d:91:a4:d8:86:77:bc: b8:65:5d:fe:d2:0a:df:59:0e:2e:cb:79:5a:44:79: 8a:d8:75:78:db:84:b8:0e:df:2a:b5:0f:29:cf:a9: 1d:cf:9a:94:6d:49:96:48:ae:69:83:de:dd:00:e6: 4e:8a:d8:3d:74:cc:5a:02:65:30:bf:2a:f8:d6:ed: f9:39:d0:a4:3f:11:5a:03:59:e2:b6:a3:4d:14:15: 4e:2f:88:25:03:a5:91:52:ee:6f:06:4b:ae:fa:ff: 50:12:6a:e2:49:3d:57:01:e8:06:52:09:8d:0f:d5: 5c:1c:3f:0f:80:3f:db:23:15:56:db:9b:35:e5:6f: bd:ee:7f:69:33:24:67:7c:48:87:9f:af:0e:8a:b0: fd:4f:a2:fd:88:b6:30:1a:59:27:79:db:9f:a6:47: 06:83:cc:d8:6b:3c:a5:77:a0:4b:79:08:dd:f7:2b: d6:fa:e0:89:77:3a:89:db:80:bb:a8:c4:38:4e:0a: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:D9:D9:6F:2A:4B:E3:8F:80:CD:CC:45:5C:E6:8D:91:37:1C:E8 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f9:89:7c:1a:9d:30:91:7b:73:89:f0:dc:8b:1f:0c:f8:22: f9:18:81:b3:1e:62:83:88:13:72:4c:32:a5:64:b8:02:03:94: 92:27:f6:e4:ed:61:b8:fb:eb:68:5a:7f:15:48:e6:a5:8d:77: 53:66:3a:8b:b7:58:85:b6:77:b1:ab:f9:9f:61:ea:70:48:81: aa:44:97:c1:df:b5:2c:73:68:68:4a:7a:41:76:26:51:3e:96: 87:15:cf:b3:29:cc:a3:05:ec:c1:a5:b8:c3:f5:ca:08:2c:43: 6c:e1:53:26:8a:40:1c:e7:df:95:54:b2:8b:04:96:c1:a3:74: a5:b6:39:f8:c1:79:37:27:a4:11:e5:44:a7:3f:ed:26:a6:c7: 95:71:58:c8:9f:23:13:55:17:a4:53:f1:e6:17:39:6d:56:c9: 3f:9c:24:a7:8e:85:76:09:60:1d:ac:3d:e7:9b:76:a6:28:8b: 41:7b:75:9f:e4:f3:70:0f:00:ea:20:ec:69:80:bc:34:b1:9d: 12:be:e8:0b:48:56:3d:11:27:14:1d:f6:7f:47:6d:af:6b:68: ca:72:11:ed:80:79:d3:a8:13:23:d2:91:81:6c:39:d2:16:39: 08:4b:4c:ff:c6:4a:e9:f0:67:7e:43:15:df:72:34:69:79:16: fb:2d:bc:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUxMjE4MTUwNTA2WhcNMjUxMjI1MTUwNTA2WjAYMRYwFAYD VQQDDA02OTQ0MTgyMy1iY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IP/SWTfsQ8mYfa5bY5bPKhlC3J+rWzNxKj0zsa1FpsT71YKWQX39cwC9iA5 t+rt1JNXhMFQsvB0+nkfeUCZ1mkt4X2RpNiGd7y4ZV3+0grfWQ4uy3laRHmK2HV4 24S4Dt8qtQ8pz6kdz5qUbUmWSK5pg97dAOZOitg9dMxaAmUwvyr41u35OdCkPxFa A1nitqNNFBVOL4glA6WRUu5vBkuu+v9QEmriST1XAegGUgmND9VcHD8PgD/bIxVW 25s15W+97n9pMyRnfEiHn68OirD9T6L9iLYwGlknedufpkcGg8zYazyld6BLeQjd 9yvW+uCJdzqJ24C7qMQ4TgqgoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2s2dlv Kkvjj4DNzEVc5o2RNxzoMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB++Yl8Gp0wkXtzifDcix8M+CL5GIGzHmKDiBNyTDKlZLgCA5SSJ/bk 7WG4++toWn8VSOaljXdTZjqLt1iFtnexq/mfYepwSIGqRJfB37Usc2hoSnpBdiZR PpaHFc+zKcyjBezBpbjD9coILENs4VMmikAc59+VVLKLBJbBo3Sltjn4wXk3J6QR 5USnP+0mpseVcVjInyMTVRekU/HmFzltVsk/nCSnjoV2CWAdrD3nm3amKItBe3Wf 5PNwDwDqIOxpgLw0sZ0SvugLSFY9EScUHfZ/R22va2jKchHtgHnTqBMj0pGBbDnS FjkIS0z/xkrp8Gd+QxXfcjRpeRb7Lbxd -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:12 2025 by rpki-client