This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: 8y8hZTwWUIWleWeSVH8AQEEmjCDiRZyWjZKUuEyGsJA= Subject key identifier: BC:20:62:8F:F3:C9:45:15:BA:E1:57:DD:B0:5B:75:F2:75:5D:66:AA Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 01C3 Signing time: Fri 19 Dec 2025 02:09:19 +0000 Manifest this update: Fri 19 Dec 2025 02:09:19 +0000 Manifest next update: Fri 26 Dec 2025 02:09:19 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: n7XvBDjx/kPucxt/JDsBgskkyHn4n1lANI2vEHntUCM=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Dec 19 02:09:19 2025 GMT Not After : Dec 26 02:09:19 2025 GMT Subject: CN=6944b3cf-942c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:a1:07:2e:ce:f3:04:d6:96:00:73:da:e0: 2a:64:a2:fc:18:69:99:57:73:bf:8e:de:4a:7e:9c: 63:e3:53:ae:4d:97:60:17:f2:2c:e0:fe:60:57:43: 42:66:af:2c:5e:f3:69:2e:d3:28:30:d2:20:3c:8a: 0f:a1:0c:c2:e5:b0:d3:8b:72:ee:83:2f:96:b4:53: 36:bb:bd:97:fa:86:b2:a9:94:3b:2d:5e:9c:ac:ff: 8f:18:f0:72:0d:c7:78:c7:48:63:16:16:17:11:a3: 80:dc:c3:0b:eb:96:6d:15:0b:9a:1e:a3:50:81:d5: 82:2d:8a:34:2f:9e:a2:59:9d:a2:23:38:5a:01:01: 90:42:35:2d:24:f4:cb:be:f5:cf:48:8e:27:85:6b: 56:c5:d8:c6:ba:95:0f:5d:e8:6e:29:32:12:d7:e0: 97:f1:c5:6c:2c:e2:78:f0:d3:ac:ff:28:0c:56:7e: 3f:54:3a:17:94:ff:6f:ca:20:1a:de:c8:e0:a1:42: b0:6e:56:ed:ef:9b:dc:c7:9d:4b:cb:53:21:b3:3c: 72:03:18:5a:73:49:8a:eb:58:5a:18:2f:5d:dc:2b: 57:b7:7c:b7:54:c5:2b:b9:9d:bb:79:5c:85:f4:d0: 80:da:10:a8:4c:44:4f:39:4f:7a:6f:70:ea:be:40: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:62:8F:F3:C9:45:15:BA:E1:57:DD:B0:5B:75:F2:75:5D:66:AA X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a9:9d:4c:9a:0a:ff:11:b7:47:3f:27:21:64:33:74:72:69: 78:64:aa:a5:ba:38:82:df:76:c5:b4:df:fe:06:26:28:3f:a0: d8:a1:1f:7e:31:bf:32:cd:8c:e9:b8:3d:46:b1:88:1c:e0:da: 69:65:59:5c:12:a1:46:24:5b:59:5d:f3:84:9f:75:c0:4a:45: 4a:16:ab:5c:27:81:25:5c:fc:87:a3:35:4d:bd:78:47:a9:f6: f8:63:07:c6:76:9b:51:ed:2d:f2:36:a4:96:a8:d2:30:c9:e6: f9:e3:94:33:d6:8e:d7:d7:06:8d:f3:84:a4:10:64:a1:a9:25: 19:d4:49:9f:12:cb:7f:09:11:c4:07:b5:2b:17:8b:1d:90:e0: 35:bb:49:a2:19:de:36:c1:ce:0b:bb:82:ab:43:35:4c:d4:d2: 39:2e:a8:23:e5:64:e7:ce:46:14:fc:54:20:29:3f:31:a5:33: c3:bf:72:07:24:d1:62:32:e0:33:4a:81:43:f1:b8:da:55:54: fd:4b:f8:e8:47:d0:b5:04:e4:31:23:cf:73:4c:03:91:2d:f0: 7b:8f:a5:ac:cd:c7:c0:ae:98:ba:8c:58:ff:0f:3a:1f:53:ab: 72:46:6f:36:cc:71:44:17:7b:7c:71:a6:9f:4a:37:7e:9c:a8: 8c:98:c1:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUxMjE5MDIwOTE5WhcNMjUxMjI2MDIwOTE5WjAYMRYwFAYD VQQDDA02OTQ0YjNjZi05NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnqhBy7O8wTWlgBz2uAqZKL8GGmZV3O/jt5Kfpxj41OuTZdgF/Is4P5gV0NC Zq8sXvNpLtMoMNIgPIoPoQzC5bDTi3Lugy+WtFM2u72X+oayqZQ7LV6crP+PGPBy Dcd4x0hjFhYXEaOA3MML65ZtFQuaHqNQgdWCLYo0L56iWZ2iIzhaAQGQQjUtJPTL vvXPSI4nhWtWxdjGupUPXehuKTIS1+CX8cVsLOJ48NOs/ygMVn4/VDoXlP9vyiAa 3sjgoUKwblbt75vcx51Ly1MhszxyAxhac0mK61haGC9d3CtXt3y3VMUruZ27eVyF 9NCA2hCoTERPOU96b3DqvkDIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwgYo/z yUUVuuFX3bBbdfJ1XWaqMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXqZ1Mmgr/EbdHPychZDN0cml4ZKqlujiC33bFtN/+BiYoP6DYoR9+ Mb8yzYzpuD1GsYgc4NppZVlcEqFGJFtZXfOEn3XASkVKFqtcJ4ElXPyHozVNvXhH qfb4YwfGdptR7S3yNqSWqNIwyeb545Qz1o7X1waN84SkEGShqSUZ1EmfEst/CRHE B7UrF4sdkOA1u0miGd42wc4Lu4KrQzVM1NI5Lqgj5WTnzkYU/FQgKT8xpTPDv3IH JNFiMuAzSoFD8bjaVVT9S/joR9C1BOQxI89zTAORLfB7j6WszcfArpi6jFj/Dzof U6tyRm82zHFEF3t8caafSjd+nKiMmMFN -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:21 2025 by rpki-client