This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json) Hash identifier: WK8AsmgzjYQdkygF8mPNov3iPF3svLM4DdsMTrYGviE= Subject key identifier: 61:FF:2E:01:5E:BB:B5:88:7D:9F:FF:9D:96:CE:16:90:DA:AA:E7:9E Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 2235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft Manifest number: 2214 Signing time: Sat 20 Dec 2025 15:43:42 +0000 Manifest this update: Sat 20 Dec 2025 15:43:41 +0000 Manifest next update: Sat 27 Dec 2025 15:43:41 +0000 Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: 97IXtrrH0wydPvfcQ+fP5wdW+DXEqPnHyT/j0OfuCPs=) 2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: Si+Xx28szHe9Iv7W1YtcZoNp90VlP5RP91wUGl6kx/U=) 3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: nu+MmRVMelFZBsdSEFhVpeJliAcHe14e7veTklAJkjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8757 (0x2235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Dec 20 15:43:41 2025 GMT Not After : Dec 27 15:43:41 2025 GMT Subject: CN=6946c42e-10f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:d8:74:98:20:09:87:79:b2:3e:68:55:73: 5e:11:ee:f5:5b:5b:78:29:36:62:9f:06:18:82:52: 97:bf:56:d2:a3:bc:ac:74:99:cd:a9:9a:23:3c:4f: b8:c7:1c:68:3e:9d:8c:4e:44:44:5c:7f:90:a5:9c: 25:e9:96:39:a3:61:04:3f:6a:02:e7:86:08:57:52: 8b:52:0b:52:99:2b:1c:5e:41:ff:39:6b:de:73:0f: ad:b6:30:db:cb:5b:b6:57:03:e1:19:4b:34:df:70: 7c:17:3c:39:61:d8:bc:4a:b9:4e:bc:86:74:9e:43: 7f:93:4b:58:32:b5:77:03:78:15:e4:dc:a5:c3:1c: f5:9f:0f:2f:26:ee:f6:b0:5d:3e:e9:b7:10:e2:38: cd:68:56:13:0e:b3:75:6a:f8:16:35:ab:6e:7f:8b: c1:2a:9a:3d:37:c9:d3:ea:f0:dd:14:1d:8c:93:5e: 08:e9:bf:e2:09:8c:15:21:29:7a:e4:3b:cc:15:38: 34:99:42:91:8b:45:4f:41:36:9a:1e:04:4a:d0:94: 6f:8e:b1:89:cd:66:15:c7:17:4c:ca:2a:06:e8:13: 7d:86:0d:c3:9d:52:c6:bf:f8:9c:f8:93:7c:31:45: b9:43:1f:18:d8:12:76:0c:29:49:45:76:65:90:72: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FF:2E:01:5E:BB:B5:88:7D:9F:FF:9D:96:CE:16:90:DA:AA:E7:9E X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c2:3f:a7:93:a7:04:a9:85:9b:ed:9c:34:13:18:7e:b5:fc: d2:1c:21:f2:8c:9f:5e:48:32:f0:d3:58:91:42:65:af:ec:64: c9:c8:fd:81:16:50:20:47:b6:51:67:64:1b:92:84:fe:9d:2d: 3c:5a:32:53:c4:6f:f4:c7:96:d7:c6:3c:20:75:da:39:a3:9b: f3:b4:de:44:28:d5:1c:9e:95:7e:03:44:94:e7:6d:20:4b:e2: 59:29:3e:5c:16:69:c1:51:d9:04:cb:e8:45:ef:97:21:60:cd: 2f:aa:23:c0:b1:69:18:0b:1b:c0:3f:37:7f:23:7c:98:a8:6e: 67:46:89:15:51:5b:93:e3:df:01:cc:14:ae:90:96:b8:4b:9e: f8:9a:32:70:94:fc:a0:c0:32:6e:f9:b6:ba:fc:37:f3:e4:65: 40:b4:c0:dd:66:53:b9:b2:1a:60:16:4f:cc:44:49:33:9d:eb: 51:10:01:73:ea:e5:18:04:86:9a:b4:cc:10:df:12:bd:a5:82: de:a1:5b:c4:76:d2:bd:29:61:0b:c1:43:b2:b5:ee:07:3f:af: e5:26:cb:21:d9:e5:b5:e8:86:6d:ae:c6:a9:7c:c7:5d:8f:d7: 6c:66:90:fa:d2:c3:2c:c2:49:09:99:42:98:cc:37:65:84:b9: 41:9e:eb:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjUxMjIwMTU0MzQxWhcNMjUxMjI3MTU0MzQxWjAYMRYwFAYD VQQDDA02OTQ2YzQyZS0xMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy/YdJggCYd5sj5oVXNeEe71W1t4KTZinwYYglKXv1bSo7ysdJnNqZojPE+4 xxxoPp2MTkREXH+QpZwl6ZY5o2EEP2oC54YIV1KLUgtSmSscXkH/OWvecw+ttjDb y1u2VwPhGUs033B8Fzw5Ydi8SrlOvIZ0nkN/k0tYMrV3A3gV5Nylwxz1nw8vJu72 sF0+6bcQ4jjNaFYTDrN1avgWNatuf4vBKpo9N8nT6vDdFB2Mk14I6b/iCYwVISl6 5DvMFTg0mUKRi0VPQTaaHgRK0JRvjrGJzWYVxxdMyioG6BN9hg3DnVLGv/ic+JN8 MUW5Qx8Y2BJ2DClJRXZlkHIzQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH/LgFe u7WIfZ//nZbOFpDaqueeMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkYyQi85MEZBREVFQ0Q1Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hD YWRadzJsZFMzc3lHZ2pUeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMwj+nk6cEqYWb7Zw0Exh+tfzSHCHyjJ9eSDLw01iRQmWv7GTJyP2B FlAgR7ZRZ2QbkoT+nS08WjJTxG/0x5bXxjwgddo5o5vztN5EKNUcnpV+A0SU520g S+JZKT5cFmnBUdkEy+hF75chYM0vqiPAsWkYCxvAPzd/I3yYqG5nRokVUVuT498B zBSukJa4S574mjJwlPygwDJu+ba6/Dfz5GVAtMDdZlO5shpgFk/MREkznetREAFz 6uUYBIaatMwQ3xK9pYLeoVvEdtK9KWELwUOyte4HP6/lJssh2eW16IZtrsapfMdd j9dsZpD60sMswkkJmUKYzDdlhLlBnuvL -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:18 2025 by rpki-client