This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: 8CBzts6Sd4QcU0QTF+0+nrH9BwvzFwDs56y/CXA2r70= Subject key identifier: F9:01:15:15:BE:5B:60:19:69:BA:B2:68:2D:87:71:2B:EB:67:9E:FF Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 023C Signing time: Sun 21 Dec 2025 01:12:36 +0000 Manifest this update: Sun 21 Dec 2025 01:12:35 +0000 Manifest next update: Sun 28 Dec 2025 01:12:35 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: bxHo0UZ/FgYNovpDDkIf5kvzZu+InIRUwlY5X+0hJY8=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: qDV9QCi5HkxixaBFK8kj0xBTXurODiSoIKzsQFF1+SQ=) 3: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: H4ZiNqnOQ9SeXj19JFNgIsK4CCAguZ6MrEtJQSUxrHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Dec 21 01:12:35 2025 GMT Not After : Dec 28 01:12:35 2025 GMT Subject: CN=69474984-5d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:c2:8c:d1:54:ce:53:65:92:cd:10:e7:35: b2:a4:42:1e:3c:37:a0:60:ee:18:d8:3d:63:71:ee: 70:dc:a8:16:3a:d6:81:36:1d:71:ea:d7:e1:b4:e2: 42:e4:e5:46:0d:70:5e:43:39:c7:83:54:8e:16:14: 2c:46:49:a8:c7:00:35:67:78:8f:12:c4:b9:5c:60: e1:33:78:94:1e:1e:7a:4a:4a:12:73:16:e5:57:9e: ac:10:b2:74:23:f3:1f:e9:84:97:3a:4a:70:be:e1: 60:39:a4:17:3c:63:f5:8f:50:0c:26:cb:bd:24:5a: c4:15:3a:70:a5:27:15:bf:ca:0d:2e:ad:32:6d:01: 00:07:ce:ac:05:38:ad:80:5f:ac:66:d4:d2:d0:47: 7f:bf:9b:ec:6d:08:45:bc:12:2a:35:35:f2:12:79: e5:8b:19:e6:74:29:f2:ff:4c:71:e8:b0:70:ed:44: 27:22:dd:b8:7a:9e:75:77:ab:a6:48:db:60:32:73: 6c:5d:ec:2b:e9:f6:66:08:88:76:b8:fc:3d:a8:a8: 7b:8a:cf:d1:a7:2d:f6:49:92:96:b8:5d:54:77:17: 91:9c:45:ec:1e:c8:ad:81:17:e6:02:6c:f1:d6:a8: 17:52:3b:c9:1a:7e:f5:10:32:06:81:ae:78:bd:29: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:01:15:15:BE:5B:60:19:69:BA:B2:68:2D:87:71:2B:EB:67:9E:FF X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6b:88:9f:3e:21:91:10:60:3b:c2:af:38:68:34:28:74:35: 94:c7:a4:e1:e0:e3:46:ad:7c:19:66:78:d7:06:bc:43:cd:3e: 21:19:94:a2:2c:38:2f:e7:17:89:b8:8b:8c:ef:00:66:f3:79: 06:b8:d8:f3:c1:79:a2:9e:63:7a:4f:4c:cf:3a:ff:06:60:9d: d9:b0:fe:60:ba:1d:a1:f0:cb:5c:bf:12:62:79:fc:d9:d5:33: 80:97:9e:b4:f0:50:8b:56:28:a4:36:d9:63:a8:a0:e7:6e:a0: 50:46:fd:01:ae:6e:ab:4d:62:ab:83:5f:ec:4f:60:5d:42:13: df:2a:07:dc:bc:92:d3:ec:28:d5:9c:b2:68:32:53:65:6c:59: 3e:75:10:0a:b6:4f:1f:f2:72:35:c8:ed:f3:9c:03:81:19:5f: 06:df:21:5c:f2:dd:b8:63:b5:08:e1:dd:0d:fd:5e:6d:bd:d1: 58:bf:67:50:99:eb:6a:3c:4c:24:0a:ed:ec:81:dc:32:4a:4c: 7c:cf:04:a9:20:56:66:18:56:cd:d4:3d:50:74:52:9d:5e:39: 47:be:97:dd:ca:ae:5a:7d:25:79:41:e7:d1:65:d2:21:f9:a9: ec:99:44:09:e2:5d:08:9d:53:e1:93:72:c5:ba:3c:7d:3f:f6: 3e:c5:af:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUxMjIxMDExMjM1WhcNMjUxMjI4MDExMjM1WjAYMRYwFAYD VQQDDA02OTQ3NDk4NC01ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthfCjNFUzlNlks0Q5zWypEIePDegYO4Y2D1jce5w3KgWOtaBNh1x6tfhtOJC 5OVGDXBeQznHg1SOFhQsRkmoxwA1Z3iPEsS5XGDhM3iUHh56SkoScxblV56sELJ0 I/Mf6YSXOkpwvuFgOaQXPGP1j1AMJsu9JFrEFTpwpScVv8oNLq0ybQEAB86sBTit gF+sZtTS0Ed/v5vsbQhFvBIqNTXyEnnlixnmdCny/0xx6LBw7UQnIt24ep51d6um SNtgMnNsXewr6fZmCIh2uPw9qKh7is/Rpy32SZKWuF1UdxeRnEXsHsitgRfmAmzx 1qgXUjvJGn71EDIGga54vSnnwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkBFRW+ W2AZabqyaC2HcSvrZ57/MB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCa4ifPiGREGA7wq84aDQodDWUx6Th4ONGrXwZZnjXBrxDzT4hGZSi LDgv5xeJuIuM7wBm83kGuNjzwXminmN6T0zPOv8GYJ3ZsP5guh2h8MtcvxJiefzZ 1TOAl5608FCLViikNtljqKDnbqBQRv0Brm6rTWKrg1/sT2BdQhPfKgfcvJLT7CjV nLJoMlNlbFk+dRAKtk8f8nI1yO3znAOBGV8G3yFc8t24Y7UI4d0N/V5tvdFYv2dQ metqPEwkCu3sgdwySkx8zwSpIFZmGFbN1D1QdFKdXjlHvpfdyq5afSV5QefRZdIh +ansmUQJ4l0InVPhk3LFujx9P/Y+xa/E -----END CERTIFICATE-----Generated at Sun Dec 21 12:17:40 2025 by rpki-client