This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: s4O1+fVUnTBz5xzyZwFQme5FkO9cyZ75/p6dmOPToLc= Subject key identifier: E6:FD:0C:8D:A8:F9:90:C9:99:97:EA:38:E6:CE:49:5E:C5:3C:45:9C Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 01BA Signing time: Fri 19 Dec 2025 02:25:10 +0000 Manifest this update: Fri 19 Dec 2025 02:25:09 +0000 Manifest next update: Fri 26 Dec 2025 02:25:09 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: RpjZpE5E5sTpYLKoj5CwlQ/07Gz2qf1ptgXAJT3ibFE=) 2: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: TSmTCNrkei7m3TxkX8bukuyuYPbILQnCUPvPyNjgM5I=) 3: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: kUXkV/NQKfLoHdA/qdA5T0SS9tU4x4Ty5BWOmAQ680w=) 4: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KrnQqDXD/GjL/9lZ4fC1ZX3TT1+IBpldk3tM8hf1uJU=) 5: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: Bn478uLMn4OakQqoDBH/lvI3JDH9R/ce+WPtlw3F7PM=) 6: 9442231871C311EEB4110C83C4F9AE02.roa (hash: I72Z1nd1GmnAZEnwp1LzVMVnE9PXjIpQpMnCm3khtZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Dec 19 02:25:09 2025 GMT Not After : Dec 26 02:25:09 2025 GMT Subject: CN=6944b785-594f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:fb:0d:57:26:ab:d0:26:ab:e4:46:fd:e9: e7:9e:03:38:4a:8f:de:d1:4d:ba:72:f9:0e:9b:ef: 82:a1:18:54:70:61:a3:05:e7:4f:66:b9:f8:f3:48: 69:6d:50:2c:7c:5d:68:7b:42:7e:70:55:ef:fb:23: ea:58:6e:16:1c:51:ce:35:e2:fd:8a:68:c9:d9:c9: d1:5d:a8:93:6a:a7:55:db:8f:9b:ac:17:0a:d5:9c: f5:d4:93:93:7d:a0:da:42:88:1f:af:57:c8:69:05: 37:46:5a:7a:37:da:5a:2c:b1:4f:10:ed:83:6a:a7: b5:07:fe:67:b4:4c:10:6c:33:64:ef:81:9e:12:0f: 1e:29:31:fa:ba:e8:b5:76:c8:3d:05:1a:20:b0:b2: 2c:09:3a:60:c1:03:b4:95:62:0b:32:40:c9:90:72: ca:90:f1:e7:17:4e:46:02:2b:e8:52:f3:57:31:a5: 23:1a:2a:6a:cc:dc:7b:ba:a4:f7:9c:d4:6c:c6:52: 4f:45:45:de:ed:7b:93:90:9a:f6:9d:c8:70:ee:2a: f3:86:34:f1:f6:25:10:a3:5b:8d:05:dd:2b:54:12: 76:25:40:ad:44:0e:da:ce:39:3e:b7:a9:23:3c:c8: 66:e3:ca:c4:1a:5f:4e:31:e9:65:25:ad:01:69:3e: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FD:0C:8D:A8:F9:90:C9:99:97:EA:38:E6:CE:49:5E:C5:3C:45:9C X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a9:3e:07:7d:d2:5b:a6:31:1b:22:40:9f:f3:cb:41:9c:6c: ae:dc:64:e6:d2:87:2d:a3:31:ad:93:aa:b4:1c:6f:7b:63:aa: 53:36:3c:01:04:55:41:d0:ea:4d:6f:13:a3:0c:7c:3b:11:29: 7d:33:97:b3:7a:61:66:91:f7:3c:4a:25:fb:d4:ad:aa:7a:3d: b4:4e:58:a3:91:9c:9e:66:f9:9b:15:d6:e4:d1:09:e9:7d:53: 69:a7:6e:46:e9:01:bb:42:ad:1a:eb:b9:7c:96:c7:ab:c7:f0: de:37:6a:48:21:94:ee:96:c6:0a:64:46:0d:f8:8d:83:32:ed: 39:4b:a0:6c:07:51:1e:0c:07:e1:69:59:c1:4a:24:fb:1b:52: 51:0d:16:8a:90:4b:f5:cc:a8:65:c9:70:a0:30:3c:23:4d:2d: ad:46:e0:e6:d7:45:58:ae:7b:ba:9a:5a:a8:b0:96:1b:52:ab: 31:a5:a1:c5:10:ee:dd:b6:b3:7c:64:9e:db:92:89:86:4d:92: 1f:11:cb:f4:a0:6c:b4:0d:02:fc:80:11:d4:7d:7a:56:61:ec: 15:95:45:47:c0:65:bb:c3:4e:1e:68:04:35:42:1e:78:fc:b8: 1b:00:e9:9c:af:3b:f2:ac:9c:fc:37:c5:41:c0:b0:47:53:41: 3c:14:07:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUxMjE5MDIyNTA5WhcNMjUxMjI2MDIyNTA5WjAYMRYwFAYD VQQDDA02OTQ0Yjc4NS01OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+r7DVcmq9Amq+RG/ennngM4So/e0U26cvkOm++CoRhUcGGjBedPZrn480hp bVAsfF1oe0J+cFXv+yPqWG4WHFHONeL9imjJ2cnRXaiTaqdV24+brBcK1Zz11JOT faDaQogfr1fIaQU3Rlp6N9paLLFPEO2Daqe1B/5ntEwQbDNk74GeEg8eKTH6uui1 dsg9BRogsLIsCTpgwQO0lWILMkDJkHLKkPHnF05GAivoUvNXMaUjGipqzNx7uqT3 nNRsxlJPRUXe7XuTkJr2nchw7irzhjTx9iUQo1uNBd0rVBJ2JUCtRA7azjk+t6kj PMhm48rEGl9OMellJa0BaT6ehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOb9DI2o +ZDJmZfqOObOSV7FPEWcMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADqT4HfdJbpjEbIkCf88tBnGyu3GTm0octozGtk6q0HG97Y6pTNjwB BFVB0OpNbxOjDHw7ESl9M5ezemFmkfc8SiX71K2qej20TlijkZyeZvmbFdbk0Qnp fVNpp25G6QG7Qq0a67l8lserx/DeN2pIIZTulsYKZEYN+I2DMu05S6BsB1EeDAfh aVnBSiT7G1JRDRaKkEv1zKhlyXCgMDwjTS2tRuDm10VYrnu6mlqosJYbUqsxpaHF EO7dtrN8ZJ7bkomGTZIfEcv0oGy0DQL8gBHUfXpWYewVlUVHwGW7w04eaAQ1Qh54 /LgbAOmcrzvyrJz8N8VBwLBHU0E8FAfz -----END CERTIFICATE-----Generated at Sat Dec 20 10:04:48 2025 by rpki-client