This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: 5lBIQ0gQmMEJqCDgY5M++YI9fZxHWJISU/8CXVJozp4= Subject key identifier: A0:6C:CB:38:4F:44:94:08:6E:59:EB:B4:32:70:0F:F2:10:14:D5:04 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: CA Signing time: Fri 19 Dec 2025 05:36:59 +0000 Manifest this update: Fri 19 Dec 2025 05:36:59 +0000 Manifest next update: Fri 26 Dec 2025 05:36:59 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: ayns+jYLFOUEB4Cyn/BZL4tt/ka6vG4RJX/THcBwC4s=) 2: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 3: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: EzdO0E9s+3cgAs/ZEX/Wfo2/4xk/HK6LBfwW3sjjoC0=) 4: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) 5: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) 6: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Dec 19 05:36:59 2025 GMT Not After : Dec 26 05:36:59 2025 GMT Subject: CN=6944e47b-db5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:5d:0d:eb:26:d1:c0:2b:89:55:2c:63:4d: 4a:64:d3:f4:10:9c:74:95:e4:52:b4:f5:b0:56:63: 2f:a0:b4:54:cb:cb:48:14:18:02:6e:09:83:5f:21: eb:33:c4:8a:46:c3:09:1b:4e:41:78:af:61:f5:89: b2:dd:39:73:21:e0:a7:25:53:7b:21:d3:b0:9d:6a: a6:e6:82:44:4c:66:d9:81:e9:05:8e:a8:ab:83:74: dc:5a:ab:39:88:f2:1b:71:b8:82:98:78:15:4a:d7: 5b:4c:7c:74:ad:11:f0:2f:cc:4b:e5:f1:c4:57:f0: 58:c3:8c:1d:a8:a0:71:21:84:3d:01:39:0b:aa:5e: 3b:9b:c8:f9:8e:7d:54:22:a4:34:83:41:1a:5c:39: fa:94:49:76:15:22:79:c6:a1:8b:56:0f:8d:b7:b9: c7:0e:fd:82:34:33:d2:12:38:f7:d0:c4:f6:d9:5c: 47:9c:f4:05:fa:11:63:0b:04:7e:21:24:98:e1:25: 12:c6:41:d1:3e:8b:1b:95:9f:c0:68:7c:5c:48:bd: 0d:60:dd:7a:98:52:8c:9e:47:5f:d7:d6:49:c9:4f: ea:12:c8:bd:16:d8:28:16:b5:de:db:3f:db:78:36: 5a:49:4d:6e:37:0d:28:42:dc:0e:b9:31:d6:2d:7d: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6C:CB:38:4F:44:94:08:6E:59:EB:B4:32:70:0F:F2:10:14:D5:04 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c1:48:d5:61:d3:04:9d:3a:15:94:7e:f2:29:28:82:ef:ad: 0e:75:46:97:54:22:36:e6:ae:2f:9d:33:fa:08:95:32:99:de: 31:74:13:35:fd:00:11:8f:d9:ed:d0:4c:c0:69:1f:af:c9:5c: 14:f5:8c:40:39:df:8d:d5:c5:79:5c:35:b0:72:21:67:3f:38: 4a:51:84:68:e6:97:ec:4a:22:c9:fd:b9:7c:b3:11:bf:5f:24: 1b:18:e3:2b:da:d9:7c:06:a5:5c:83:4d:3a:f1:05:5f:6d:8b: 77:1d:53:0b:b8:1d:a6:04:ff:1c:01:e7:f8:d3:ec:89:d3:3c: fc:27:88:a3:39:75:48:84:8d:4e:33:05:16:55:cf:83:11:15: 06:69:3a:39:68:02:a0:a9:fd:36:c0:70:80:89:6c:ce:97:80: a6:a0:0f:ca:1f:e0:2b:5f:b0:de:48:dc:48:65:bd:67:48:9c: 9b:1f:d4:fb:f9:df:ae:11:8b:58:5c:41:86:bb:02:c1:cb:1c: b1:c2:ca:5e:bc:2b:f3:fe:a5:24:66:bc:d7:8f:ac:72:f0:09: 95:3e:0c:c8:b8:fb:3b:b2:a0:31:ef:3e:60:1e:e7:23:f6:ce: d3:1b:9b:4f:9f:66:ef:4d:6f:6f:91:94:32:b4:4d:02:0c:f0: b3:f3:44:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUxMjE5MDUzNjU5WhcNMjUxMjI2MDUzNjU5WjAYMRYwFAYD VQQDDA02OTQ0ZTQ3Yi1kYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtftdDesm0cAriVUsY01KZNP0EJx0leRStPWwVmMvoLRUy8tIFBgCbgmDXyHr M8SKRsMJG05BeK9h9Ymy3TlzIeCnJVN7IdOwnWqm5oJETGbZgekFjqirg3TcWqs5 iPIbcbiCmHgVStdbTHx0rRHwL8xL5fHEV/BYw4wdqKBxIYQ9ATkLql47m8j5jn1U IqQ0g0EaXDn6lEl2FSJ5xqGLVg+Nt7nHDv2CNDPSEjj30MT22VxHnPQF+hFjCwR+ ISSY4SUSxkHRPosblZ/AaHxcSL0NYN16mFKMnkdf19ZJyU/qEsi9FtgoFrXe2z/b eDZaSU1uNw0oQtwOuTHWLX2YmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBsyzhP RJQIblnrtDJwD/IQFNUEMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdo OVJtYjBNZ25ZT2p0dVBoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBwUjVYdMEnToVlH7yKSiC760OdUaXVCI25q4vnTP6CJUymd4xdBM1 /QARj9nt0EzAaR+vyVwU9YxAOd+N1cV5XDWwciFnPzhKUYRo5pfsSiLJ/bl8sxG/ XyQbGOMr2tl8BqVcg0068QVfbYt3HVMLuB2mBP8cAef40+yJ0zz8J4ijOXVIhI1O MwUWVc+DERUGaTo5aAKgqf02wHCAiWzOl4CmoA/KH+ArX7DeSNxIZb1nSJybH9T7 +d+uEYtYXEGGuwLByxyxwspevCvz/qUkZrzXj6xy8AmVPgzIuPs7sqAx7z5gHucj 9s7TG5tPn2bvTW9vkZQytE0CDPCz80Tt -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:41 2025 by rpki-client