This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: 9VJRCgBUvdpWdML0fRhu5SusAwEz/D5uENVb7PnAH64= Subject key identifier: 89:71:5F:47:71:31:26:31:4A:5A:F6:7F:F4:38:6B:FE:1C:A7:E9:12 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 07B1 Signing time: Sat 20 Dec 2025 20:45:16 +0000 Manifest this update: Sat 20 Dec 2025 20:45:16 +0000 Manifest next update: Sat 27 Dec 2025 20:45:16 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: dHABMohpPAChNM8+Wzz0cNwDzoYFc8KCgch+Mm16Jn0=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: fXQXf8N5tytPfV8xyqN1Zu7dGcPNJVrKRy7cMq29VZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Dec 20 20:45:16 2025 GMT Not After : Dec 27 20:45:16 2025 GMT Subject: CN=69470adc-86be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:e7:76:b6:c3:22:15:7f:12:68:c8:7a:80: e0:e5:6d:55:3f:40:2d:61:1f:6b:74:be:9f:bc:ab: 86:2c:23:7f:70:2c:d1:db:85:f8:6d:0f:8a:aa:90: 28:b3:e4:17:4a:81:96:07:03:93:b8:31:5c:7c:c5: 64:e0:e1:cb:f4:59:c3:dc:42:cf:c2:a1:83:d5:b1: 3b:2b:cc:da:5d:b2:78:1f:53:5d:19:80:bd:7c:b1: d1:63:f7:ee:33:4e:83:d8:33:4d:17:ea:e1:8b:33: 14:60:29:55:93:ec:04:2d:19:38:a5:60:26:7f:88: 94:ba:1a:d5:3a:9a:7b:87:42:34:d9:2d:6c:71:bb: 9f:ee:d7:31:b5:40:77:53:c7:da:2c:97:c8:7d:a0: 4b:79:1a:c3:f2:ed:bb:1a:58:84:c3:a8:4c:31:1f: fe:2a:6e:2f:0e:4d:da:cb:f3:e6:b5:0e:bd:7c:05: 7f:89:69:b0:90:82:e4:8c:3b:80:e2:2a:a2:70:05: 52:9f:89:f8:13:3f:2f:26:ca:0f:24:43:59:eb:96: 61:89:3e:44:43:23:13:64:4c:da:80:87:71:50:5d: e7:02:6e:2f:c1:9f:8e:45:46:c0:85:67:cd:8d:be: ac:cb:af:71:10:42:d3:7a:ed:36:fa:1e:15:49:76: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:71:5F:47:71:31:26:31:4A:5A:F6:7F:F4:38:6B:FE:1C:A7:E9:12 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:6c:47:99:8c:7f:55:cf:e7:e1:34:cb:48:bc:1a:b4:47: c1:2f:c6:f0:26:ff:77:e8:75:18:be:1c:f2:51:4f:3e:dd:51: b7:49:2e:a7:d6:29:b8:cc:fb:f8:81:23:07:11:66:ad:d1:a5: 2b:0e:9d:1c:0e:f7:8b:2f:6e:a9:06:02:4f:a3:8f:b0:85:14: fb:b8:03:00:8b:23:e0:28:d3:51:3a:88:a5:16:a3:5b:af:91: 1d:2a:27:13:63:af:eb:ca:4f:88:5a:d5:cf:ac:1a:55:2d:db: 96:f8:d3:3c:b4:91:94:d2:d6:3e:06:09:f4:60:ae:fa:24:8a: d8:49:c4:a6:91:71:cb:f2:b0:87:4a:59:b7:90:14:3a:7f:ce: 27:c4:1c:c2:dc:89:76:1a:8d:58:c0:cd:6e:c8:97:59:b1:df: 2c:a0:3a:59:e9:51:62:0e:45:a4:f5:82:36:e4:d6:63:27:f2: 24:1d:b8:3a:d7:4c:eb:a5:62:66:05:25:63:cc:74:24:e4:ee: a7:fb:f0:93:a1:ba:a6:79:cf:43:d5:6f:f2:c3:6d:92:aa:4b: ef:9b:3a:eb:af:31:15:fe:0b:fc:97:fc:1d:67:6d:ea:43:11: 42:ff:cd:bc:cc:73:12:80:60:e1:51:34:f0:6f:20:05:51:1b: 2e:64:54:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUxMjIwMjA0NTE2WhcNMjUxMjI3MjA0NTE2WjAYMRYwFAYD VQQDDA02OTQ3MGFkYy04NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHnndrbDIhV/EmjIeoDg5W1VP0AtYR9rdL6fvKuGLCN/cCzR24X4bQ+KqpAo s+QXSoGWBwOTuDFcfMVk4OHL9FnD3ELPwqGD1bE7K8zaXbJ4H1NdGYC9fLHRY/fu M06D2DNNF+rhizMUYClVk+wELRk4pWAmf4iUuhrVOpp7h0I02S1scbuf7tcxtUB3 U8faLJfIfaBLeRrD8u27GliEw6hMMR/+Km4vDk3ay/PmtQ69fAV/iWmwkILkjDuA 4iqicAVSn4n4Ez8vJsoPJENZ65ZhiT5EQyMTZEzagIdxUF3nAm4vwZ+ORUbAhWfN jb6sy69xEELTeu02+h4VSXZiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlxX0dx MSYxSlr2f/Q4a/4cp+kSMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtTWxHmYx/Vc/n4TTLSLwatEfBL8bwJv936HUYvhzyUU8+3VG3SS6n 1im4zPv4gSMHEWat0aUrDp0cDveLL26pBgJPo4+whRT7uAMAiyPgKNNROoilFqNb r5EdKicTY6/ryk+IWtXPrBpVLduW+NM8tJGU0tY+Bgn0YK76JIrYScSmkXHL8rCH Slm3kBQ6f84nxBzC3Il2Go1YwM1uyJdZsd8soDpZ6VFiDkWk9YI25NZjJ/IkHbg6 10zrpWJmBSVjzHQk5O6n+/CTobqmec9D1W/yw22SqkvvmzrrrzEV/gv8l/wdZ23q QxFC/828zHMSgGDhUTTwbyAFURsuZFSQ -----END CERTIFICATE-----Generated at Mon Dec 22 19:36:04 2025 by rpki-client