This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: FpjrjhMwbORO4sghTypEfJr72ZzkEPOjVJzKNKPcj7o= Subject key identifier: 80:D4:7F:15:02:AA:9B:4E:3D:A3:D9:8D:5A:9C:95:3A:FD:43:F4:FA Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 080D Signing time: Thu 18 Dec 2025 20:28:21 +0000 Manifest this update: Thu 18 Dec 2025 20:28:20 +0000 Manifest next update: Thu 25 Dec 2025 20:28:20 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: CV/aXnw6bClpOKx3ZZ/1+ORqffWN9XRmXA7Va+wgnKg=) 2: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) 3: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Dec 18 20:28:20 2025 GMT Not After : Dec 25 20:28:20 2025 GMT Subject: CN=694463e5-0c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:c1:c7:fd:7e:17:f5:c4:32:47:41:91:f6: c5:fe:37:84:fb:4e:be:33:28:bc:b5:bb:a7:33:26: 3e:b6:ff:8a:bd:10:ef:76:1f:bc:7d:e3:b4:f1:92: 3c:66:8b:98:16:26:6d:67:ea:8e:72:23:5f:79:af: 4f:83:26:0e:74:7f:7f:cc:48:a6:53:c8:70:ce:ff: 62:17:5c:aa:c4:f5:58:7f:04:b4:30:2f:a4:bf:88: 54:59:33:35:23:d8:a3:1a:e5:a4:e9:11:85:28:eb: 4f:e2:2a:8f:4d:e4:d1:e0:c9:a2:47:58:4d:1d:46: 68:78:ce:e1:64:53:73:3a:69:fd:c1:7b:9d:18:4d: a2:c7:9d:9e:9b:88:c2:2c:d4:ce:55:3c:0c:89:ce: f6:55:0d:a3:38:57:f0:ad:2b:46:e8:15:b9:ea:ee: 22:7a:bd:ae:e6:14:60:64:a1:8f:7d:1a:b0:aa:a2: f7:b7:d7:d7:46:37:34:2f:ba:a1:a4:78:20:ae:a8: ec:f5:29:1c:90:a8:d9:78:4f:ba:07:be:d1:4e:1f: 04:43:c3:9d:56:ea:4c:47:51:1a:3f:bf:03:fa:70: 47:b0:52:a7:c5:e3:9e:fc:29:ad:b7:b2:c1:68:99: da:b1:b8:91:14:6b:f4:d7:ae:7d:7b:46:5f:6c:d4: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:7F:15:02:AA:9B:4E:3D:A3:D9:8D:5A:9C:95:3A:FD:43:F4:FA X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:bb:6a:3c:d7:3b:90:56:e0:b4:77:aa:28:55:bf:b3:56: 25:5c:68:e6:85:a5:8d:48:dd:de:f6:a2:6c:52:ed:4f:da:65: f1:94:2e:22:a7:7e:0b:6c:32:78:8d:36:3f:8e:76:25:06:90: c0:d9:a2:a5:9f:79:5f:7e:46:be:c9:a2:51:24:2a:fc:62:62: 74:d5:03:5f:5c:ca:6e:e3:b8:64:05:b1:f1:de:90:e5:b5:76: 67:50:28:be:9b:16:c1:22:90:1d:ac:05:7c:5b:d9:a8:4f:fd: 89:61:69:0c:56:d8:91:88:55:b0:e7:20:cc:2a:18:c0:e1:25: 7b:11:bb:5d:62:7c:ef:e5:cf:fe:16:1a:62:99:c1:f3:c6:28: 30:20:20:39:bd:d6:95:40:16:8b:aa:f7:05:70:bd:f6:cb:9c: d9:98:ef:0d:8b:94:c4:e5:dd:cc:a9:cb:e4:de:00:48:9e:26: f1:7b:03:11:93:f8:3e:57:f6:10:de:11:63:0c:b2:3f:c9:9f: ae:40:98:08:81:38:9e:50:ab:d6:1c:3f:af:73:02:0d:8b:9a: 51:81:9e:6b:b8:22:58:cc:b6:83:48:6c:6f:0f:64:6f:03:c1: 80:65:0f:35:77:62:e8:f9:14:73:50:ce:88:7e:77:77:95:48: a8:e0:4b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUxMjE4MjAyODIwWhcNMjUxMjI1MjAyODIwWjAYMRYwFAYD VQQDDA02OTQ0NjNlNS0wYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYDBx/1+F/XEMkdBkfbF/jeE+06+Myi8tbunMyY+tv+KvRDvdh+8feO08ZI8 ZouYFiZtZ+qOciNfea9PgyYOdH9/zEimU8hwzv9iF1yqxPVYfwS0MC+kv4hUWTM1 I9ijGuWk6RGFKOtP4iqPTeTR4MmiR1hNHUZoeM7hZFNzOmn9wXudGE2ix52em4jC LNTOVTwMic72VQ2jOFfwrStG6BW56u4ier2u5hRgZKGPfRqwqqL3t9fXRjc0L7qh pHggrqjs9SkckKjZeE+6B77RTh8EQ8OdVupMR1EaP78D+nBHsFKnxeOe/Cmtt7LB aJnasbiRFGv01659e0ZfbNRtnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDUfxUC qptOPaPZjVqclTr9Q/T6MB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLrtqPNc7kFbgtHeqKFW/s1YlXGjmhaWNSN3e9qJsUu1P2mXxlC4i p34LbDJ4jTY/jnYlBpDA2aKln3lffka+yaJRJCr8YmJ01QNfXMpu47hkBbHx3pDl tXZnUCi+mxbBIpAdrAV8W9moT/2JYWkMVtiRiFWw5yDMKhjA4SV7EbtdYnzv5c/+ FhpimcHzxigwICA5vdaVQBaLqvcFcL32y5zZmO8Ni5TE5d3Mqcvk3gBInibxewMR k/g+V/YQ3hFjDLI/yZ+uQJgIgTieUKvWHD+vcwINi5pRgZ5ruCJYzLaDSGxvD2Rv A8GAZQ81d2Lo+RRzUM6Ifnd3lUio4Eti -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:16 2025 by rpki-client