This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: IfuhGZlAQ1zmTtEaUBq6ZuKKjftIJyAQOP8m3UozyOc= Subject key identifier: 6E:64:9A:E6:DE:94:D7:C1:B3:19:A1:CF:3F:A7:3E:D6:78:14:99:81 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 3623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 359D Signing time: Sat 20 Dec 2025 14:29:33 +0000 Manifest this update: Sat 20 Dec 2025 14:29:33 +0000 Manifest next update: Sat 27 Dec 2025 14:29:33 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: Jb5SdDXReVN29Hrpncz9GuRGeZRBFzxN4Ub9zzSuQH4=) 2: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: OFHGfo0QwzXyiL7GOwEa2vVlpzbgLwoHGG7P2JsxqIY=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13859 (0x3623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Dec 20 14:29:33 2025 GMT Not After : Dec 27 14:29:33 2025 GMT Subject: CN=6946b2cd-91bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:ad:f6:2c:cb:6e:fb:00:82:b6:94:8d:93: 52:8b:f2:32:86:0a:0e:c5:e2:da:3d:49:26:f8:ef: bc:7a:13:93:27:ec:a4:14:2b:65:00:e5:10:08:e6: 7c:7d:e6:a4:9a:f8:be:f7:d6:81:01:b6:3c:c9:97: c9:29:5a:2b:4d:47:83:12:45:cb:7b:b2:2f:6b:02: 0f:de:99:c8:e2:a7:d6:3c:cd:b4:81:a1:27:5f:a8: b1:2f:ec:e1:5c:bf:f0:b4:21:12:69:c4:ce:06:b2: 0f:c3:1c:ed:2e:db:10:f4:85:7d:8c:fd:8d:41:12: 7f:2d:b0:1d:8c:0b:1b:f6:68:f2:06:7d:11:74:7b: 3d:53:08:63:8a:a0:46:b0:b4:1a:c1:aa:d7:e9:50: 5b:96:46:53:57:7d:d0:95:11:ca:d0:ab:93:71:c3: c7:6d:8e:9b:72:64:55:13:a2:70:87:86:7c:a7:f1: 16:a7:35:27:3e:00:93:9b:d5:4a:e1:d4:c1:5f:c9: 56:fc:9f:02:e4:ed:4e:f5:fd:9c:2a:65:ac:aa:55: b9:6a:5c:f7:f9:7c:5f:24:99:ca:8f:51:10:41:05: 69:28:a1:98:40:0d:9a:57:69:c6:ae:4e:80:81:9c: 6f:ee:a1:ba:0f:4c:a1:a9:1b:92:5d:58:36:99:15: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:64:9A:E6:DE:94:D7:C1:B3:19:A1:CF:3F:A7:3E:D6:78:14:99:81 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:93:05:ff:47:67:f7:23:52:52:a1:e7:71:0b:54:8e:bf:f1: e3:94:2b:44:cb:66:11:fb:8a:9d:97:5c:5e:d8:41:1a:2f:50: 6f:fa:9e:64:3a:96:b2:72:57:e3:69:22:42:6d:d1:05:29:a7: 67:cf:3e:6a:d7:b9:c4:07:b5:e9:fa:f1:af:ce:47:64:c7:8d: de:51:72:d0:80:4d:31:32:04:fa:c7:c3:9c:2f:e5:65:fc:7f: ed:97:92:d7:c7:82:a3:bd:b1:da:74:21:80:3c:41:92:bc:59: 17:34:36:60:42:dc:ee:e8:bf:a4:a3:1c:ab:65:9f:47:57:74: c9:e5:8d:4d:62:3c:06:1a:6b:d9:d2:95:73:cd:b6:0f:c9:16: 6d:da:08:83:66:9e:a9:2b:8e:e7:b6:dc:f7:63:58:87:99:ce: fc:10:c9:76:e3:8e:b3:d4:cd:0f:69:cd:88:57:d9:4e:28:98: 2a:26:94:e2:4e:a9:bf:16:12:5f:35:71:f9:e4:8e:ab:01:13: 19:5c:a9:78:c8:73:30:8e:79:46:03:d3:4c:24:e7:f4:30:35: d3:1e:05:52:02:f0:10:48:5f:63:1d:97:ac:3c:93:26:7e:71: d7:92:38:6a:dc:ca:ee:c1:a2:58:6b:da:22:fa:c0:f3:0a:69: a0:ce:7c:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjUxMjIwMTQyOTMzWhcNMjUxMjI3MTQyOTMzWjAYMRYwFAYD VQQDDA02OTQ2YjJjZC05MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p2t9izLbvsAgraUjZNSi/IyhgoOxeLaPUkm+O+8ehOTJ+ykFCtlAOUQCOZ8 feakmvi+99aBAbY8yZfJKVorTUeDEkXLe7IvawIP3pnI4qfWPM20gaEnX6ixL+zh XL/wtCESacTOBrIPwxztLtsQ9IV9jP2NQRJ/LbAdjAsb9mjyBn0RdHs9UwhjiqBG sLQawarX6VBblkZTV33QlRHK0KuTccPHbY6bcmRVE6Jwh4Z8p/EWpzUnPgCTm9VK 4dTBX8lW/J8C5O1O9f2cKmWsqlW5alz3+XxfJJnKj1EQQQVpKKGYQA2aV2nGrk6A gZxv7qG6D0yhqRuSXVg2mRXhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5kmube lNfBsxmhzz+nPtZ4FJmBMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmkwX/R2f3I1JSoedxC1SOv/HjlCtEy2YR+4qdl1xe2EEaL1Bv+p5k OpayclfjaSJCbdEFKadnzz5q17nEB7Xp+vGvzkdkx43eUXLQgE0xMgT6x8OcL+Vl /H/tl5LXx4KjvbHadCGAPEGSvFkXNDZgQtzu6L+koxyrZZ9HV3TJ5Y1NYjwGGmvZ 0pVzzbYPyRZt2giDZp6pK47nttz3Y1iHmc78EMl2446z1M0Pac2IV9lOKJgqJpTi Tqm/FhJfNXH55I6rARMZXKl4yHMwjnlGA9NMJOf0MDXTHgVSAvAQSF9jHZesPJMm fnHXkjhq3MruwaJYa9oi+sDzCmmgznx1 -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:40 2025 by rpki-client