This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json) Hash identifier: SZzjEWGIef+vAOrI9lAFqr6Y+qq7eAkot/Py4gP+yeo= Subject key identifier: 1B:7E:FE:7F:3E:1D:2E:3D:7D:CE:79:DC:7A:81:DC:CF:26:95:26:84 Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft Manifest number: 6C Signing time: Fri 19 Dec 2025 05:55:36 +0000 Manifest this update: Fri 19 Dec 2025 05:55:35 +0000 Manifest next update: Fri 26 Dec 2025 05:55:35 +0000 Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: gBLo80EyfgDaDiPtpiKsTmH9YeCXUpR4cKQ6dkobcuU=) 2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: wGVIBPNEBcFCJnJRSDz4VWxuIzLpiNR2BJzQPhs1Kok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Dec 19 05:55:35 2025 GMT Not After : Dec 26 05:55:35 2025 GMT Subject: CN=6944e8d8-af72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:51:a6:23:b4:34:29:79:91:f9:53:7a:8d: e2:d5:a7:31:f9:c9:1f:2b:28:2c:71:75:53:60:d3: 51:df:da:22:af:3c:fd:03:b3:79:68:e6:2b:da:fe: 88:b6:22:df:39:d0:be:6e:ff:77:74:68:4f:59:8b: dd:69:6e:99:d5:7d:fb:3d:20:42:bf:ee:64:7a:fa: 9b:2f:83:2d:22:af:92:0a:3e:9d:62:c2:f3:57:12: 40:b9:24:41:84:3c:09:bd:88:31:07:60:79:7c:a2: 0a:21:0f:24:76:f0:c0:4f:52:b6:0c:90:c6:95:eb: 7b:dc:05:ea:58:5d:c7:7a:67:f2:45:e9:1c:aa:76: 4a:b8:c1:c1:b8:97:15:f9:f3:84:cb:82:7e:0f:9d: 05:87:d5:32:59:0a:41:f9:ff:cc:a3:6d:c7:42:73: c2:e2:d3:f2:7e:10:bb:d2:58:e5:c0:2d:51:f4:bd: f0:02:b0:a0:c2:5a:fa:ca:21:fe:72:3c:44:4e:21: 62:3a:91:5a:ca:4d:1e:08:34:b1:f6:a7:78:04:06: 7a:be:02:f9:a5:15:17:95:c1:f1:40:ab:fa:28:52: 49:f8:70:d8:c0:f1:80:81:02:77:75:30:77:0e:df: 39:bf:e2:ae:e3:c1:c9:cd:ed:a2:02:0b:f7:52:4e: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:FE:7F:3E:1D:2E:3D:7D:CE:79:DC:7A:81:DC:CF:26:95:26:84 X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:68:3a:3f:aa:ea:e8:8d:aa:f2:fb:bb:0e:d8:3a:20:21:ab: ea:2f:77:3d:d4:67:11:99:40:3a:79:6d:83:2f:db:95:2c:18: 52:f6:6d:70:7c:aa:77:50:dc:a2:e3:23:76:b8:26:29:36:d5: 4f:0c:10:a6:2c:9a:fc:00:51:4f:73:07:8c:91:87:1e:4c:43: 6b:16:40:00:24:12:3f:07:c0:d7:47:9b:ff:8a:d5:57:19:79: 68:93:9a:19:18:9e:f2:05:0e:91:bc:0e:25:8d:4a:59:d0:57: 21:12:40:23:1a:9c:1f:94:cf:bf:37:15:01:b2:84:2b:90:94: 78:77:51:03:4b:59:f0:ab:e4:bd:f7:0e:8d:a9:d3:41:96:b4: 90:75:20:62:38:94:17:87:8b:5f:ba:1e:89:3a:09:27:94:13: 79:8f:0d:e0:99:7c:a6:2d:06:93:9f:a9:4f:fb:63:11:6b:45: 5c:a9:e3:92:74:4f:85:9f:16:eb:59:4c:45:d5:01:5f:6a:a6: 25:c5:d8:de:64:13:a7:fb:91:18:a9:a5:32:0d:8a:56:73:79: 09:1c:1d:c0:a1:7a:b4:8d:75:08:37:1c:f0:b5:93:70:7e:b6: 9f:13:ee:59:f6:f8:cc:58:bb:28:f6:57:15:92:57:13:92:3b: 08:86:f9:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoRTJDQjk2RjNCMDVBNjNFOUU1NDc5NjUyNkVDQ0U5NEEz NTkxRTVGQzAeFw0yNTEyMTkwNTU1MzVaFw0yNTEyMjYwNTU1MzVaMBgxFjAUBgNV BAMMDTY5NDRlOGQ4LWFmNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAB1GmI7Q0KXmR+VN6jeLVpzH5yR8rKCxxdVNg01Hf2iKvPP0Ds3lo5iva/oi2 It850L5u/3d0aE9Zi91pbpnVffs9IEK/7mR6+psvgy0ir5IKPp1iwvNXEkC5JEGE PAm9iDEHYHl8ogohDyR28MBPUrYMkMaV63vcBepYXcd6Z/JF6Ryqdkq4wcG4lxX5 84TLgn4PnQWH1TJZCkH5/8yjbcdCc8Li0/J+ELvSWOXALVH0vfACsKDCWvrKIf5y PEROIWI6kVrKTR4INLH2p3gEBnq+AvmlFReVwfFAq/ooUkn4cNjA8YCBAnd1MHcO 3zm/4q7jwcnN7aICC/dSTtlnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG37+fz4d Lj19znnceoHczyaVJoQwHwYDVR0jBBgwFoAU4suW87BaY+nlR5ZSbszpSjWR5fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0FGNjRFNTEwM0JB QTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHN1Vzg3QmFZLW5sUjVaU2JzenBTaldSNWZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0FGNjRFNTEwM0JBQTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1u bFI1WlNic3pwU2pXUjVmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANFoOj+q6uiNqvL7uw7YOiAhq+ovdz3UZxGZQDp5bYMv25UsGFL2bXB8 qndQ3KLjI3a4Jik21U8MEKYsmvwAUU9zB4yRhx5MQ2sWQAAkEj8HwNdHm/+K1VcZ eWiTmhkYnvIFDpG8DiWNSlnQVyESQCManB+Uz783FQGyhCuQlHh3UQNLWfCr5L33 Do2p00GWtJB1IGI4lBeHi1+6Hok6CSeUE3mPDeCZfKYtBpOfqU/7YxFrRVyp45J0 T4WfFutZTEXVAV9qpiXF2N5kE6f7kRippTINilZzeQkcHcCherSNdQg3HPC1k3B+ tp8T7ln2+MxYuyj2VxWSVxOSOwiG+Rg= -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:18 2025 by rpki-client