This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: Jqou4AbSOb6Rl6hdVj/FkBggo8zY80eVLKlqovenz84= Subject key identifier: 29:D9:B3:5F:56:08:0A:07:A6:C9:A2:E9:6A:48:D5:A9:15:41:FB:DC Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 199E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 198E Signing time: Thu 18 Dec 2025 16:17:16 +0000 Manifest this update: Thu 18 Dec 2025 16:17:16 +0000 Manifest next update: Thu 25 Dec 2025 16:17:16 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: 8+vrAP6O2I1GL0OXz6uOGrT4C2lwcj95/0N/DgFJPmU=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: BZMo2s4ILhSYw+N337H+VSwNBVHfcjC9wdr+2hur79I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6558 (0x199e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Dec 18 16:17:16 2025 GMT Not After : Dec 25 16:17:16 2025 GMT Subject: CN=6944290c-037a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:59:41:6d:91:59:e7:31:a7:38:c1:a8:fb: 64:2f:f2:e5:7a:aa:9a:55:b6:7a:c8:e0:1a:69:d6: db:30:24:c3:3b:83:9d:27:53:69:a1:25:8a:23:60: b4:d6:e2:1b:c5:a3:9f:4e:48:a7:ca:4d:d0:e7:9b: 16:09:d0:64:91:42:62:30:a9:53:67:76:ca:16:d1: 6a:f5:bc:31:fb:6e:a5:5d:69:03:5a:5b:8d:52:cc: 9f:06:b0:22:bc:95:52:09:20:90:fc:91:e1:01:53: dd:89:26:90:24:94:ec:78:f3:e7:fc:7b:a3:f4:5f: f9:30:a8:9c:08:95:7e:8c:3f:00:69:1a:76:3b:c1: 8a:17:92:18:a7:b8:02:54:0a:35:f3:40:68:3b:8c: fa:4d:da:2c:af:f0:3a:22:a4:10:95:6d:04:2e:2d: c6:a2:df:71:a7:04:78:bd:81:65:ca:b7:9a:0f:4e: ae:5d:97:00:94:f4:af:2d:5b:80:73:76:5e:03:d5: 62:c5:0d:7f:39:78:50:ee:29:b3:6b:0e:7a:18:de: ce:0c:f0:e3:d2:cd:5d:96:93:ae:2a:8f:de:7c:fa: e2:f5:81:42:fe:94:ed:ed:65:8c:43:f9:ec:5f:de: be:fb:6a:1e:a2:47:fc:83:10:bd:c0:71:32:7f:e4: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D9:B3:5F:56:08:0A:07:A6:C9:A2:E9:6A:48:D5:A9:15:41:FB:DC X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fe:f5:ff:9f:df:04:35:26:75:dd:16:b3:51:6b:91:f4:8d: 0c:ff:e9:03:52:db:90:97:1d:ec:f1:1a:7a:cb:da:8f:fc:8a: 61:a7:82:88:1a:a0:54:f6:32:8f:af:6b:c1:96:1f:57:34:4d: 80:fa:d9:86:0f:bc:19:3d:3c:11:86:8b:c0:64:5d:30:d6:11: 3b:af:20:49:59:0f:f1:40:8b:9e:95:0d:0f:6e:44:ff:a6:f9: cf:61:c3:d7:5b:bd:2e:01:c1:e2:43:70:27:94:d3:1a:9b:aa: f4:7c:be:9d:55:76:75:fe:49:af:8a:77:a2:7d:05:61:39:cb: 1e:14:8e:7f:22:17:60:2d:d7:8f:a8:92:bc:bc:90:0d:7d:9c: 44:c1:7b:5e:a1:18:c8:b3:34:1d:df:9e:48:c2:be:20:e0:c3: f6:00:32:47:94:30:7b:07:a1:32:87:5d:a0:8a:d7:25:fe:ed: 8b:49:e6:3f:a7:ee:39:a1:4c:41:e4:22:d5:bb:3a:b2:61:48: a8:8a:78:2e:92:24:2c:86:0e:39:fc:18:73:2f:f1:7e:c3:fa: b6:73:41:8d:f7:50:fe:31:00:2b:98:cd:85:cc:10:6d:cd:66: d6:b7:6d:17:a1:06:b8:0d:ac:f4:1b:21:d0:55:66:8f:31:81: 9a:e4:5d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUxMjE4MTYxNzE2WhcNMjUxMjI1MTYxNzE2WjAYMRYwFAYD VQQDDA02OTQ0MjkwYy0wMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzRZQW2RWecxpzjBqPtkL/LleqqaVbZ6yOAaadbbMCTDO4OdJ1NpoSWKI2C0 1uIbxaOfTkinyk3Q55sWCdBkkUJiMKlTZ3bKFtFq9bwx+26lXWkDWluNUsyfBrAi vJVSCSCQ/JHhAVPdiSaQJJTsePPn/Huj9F/5MKicCJV+jD8AaRp2O8GKF5IYp7gC VAo180BoO4z6Tdosr/A6IqQQlW0ELi3Got9xpwR4vYFlyreaD06uXZcAlPSvLVuA c3ZeA9VixQ1/OXhQ7imzaw56GN7ODPDj0s1dlpOuKo/efPri9YFC/pTt7WWMQ/ns X96++2oeokf8gxC9wHEyf+TpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnZs19W CAoHpsmi6WpI1akVQfvcMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv/vX/n98ENSZ13RazUWuR9I0M/+kDUtuQlx3s8Rp6y9qP/Iphp4KI GqBU9jKPr2vBlh9XNE2A+tmGD7wZPTwRhovAZF0w1hE7ryBJWQ/xQIuelQ0PbkT/ pvnPYcPXW70uAcHiQ3AnlNMam6r0fL6dVXZ1/kmvineifQVhOcseFI5/IhdgLdeP qJK8vJANfZxEwXteoRjIszQd355Iwr4g4MP2ADJHlDB7B6Eyh12gitcl/u2LSeY/ p+45oUxB5CLVuzqyYUioingukiQshg45/BhzL/F+w/q2c0GN91D+MQArmM2FzBBt zWbWt20XoQa4Daz0GyHQVWaPMYGa5F1N -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:42 2025 by rpki-client