This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: kyeGBh7To+7RZZQetImQqYzoDYVUNp3cPuGeWpj4EqU= Subject key identifier: 58:C8:9E:45:8F:AE:67:C8:4D:9C:3A:32:08:FF:4F:24:76:36:11:0E Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 1681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 1673 Signing time: Thu 18 Dec 2025 16:34:29 +0000 Manifest this update: Thu 18 Dec 2025 16:34:28 +0000 Manifest next update: Thu 25 Dec 2025 16:34:28 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: xDNCBkOkwpD5xP/l+JxZqqKP2r5J2X4+17CrSqkLO60=) 2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: QuyC/X/r2EhaFovcn8ldr/ti/IluwmKi6IccsFs52uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5761 (0x1681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: Dec 18 16:34:28 2025 GMT Not After : Dec 25 16:34:28 2025 GMT Subject: CN=69442d15-110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b5:26:ff:4f:29:63:ed:b3:7a:69:88:2e:9c: 63:48:55:c5:cc:e7:0f:27:b7:87:44:c5:c0:4d:15: 15:92:f1:b5:d2:f5:4e:4d:cc:4b:0c:56:8c:90:be: 2c:67:8d:c5:52:da:81:7a:4b:df:64:e0:3d:83:e7: bf:db:eb:16:74:a0:fe:65:f0:78:81:3c:4c:42:25: b3:d0:d3:0e:b1:ab:cb:fb:90:2e:57:a1:cc:ba:77: 93:1a:86:7e:e5:d8:b9:1d:05:f7:0e:28:00:72:8a: 64:9e:40:73:35:32:85:cc:04:36:34:c8:db:62:7f: b9:16:e9:77:62:72:c8:99:8c:88:e5:59:cc:d4:09: 0d:37:ba:48:cb:4e:85:b9:e7:e9:06:7d:cd:4a:b6: 64:68:47:8e:78:2e:80:4e:2a:7c:db:49:a5:7d:c1: 40:c8:6d:73:39:5a:01:91:b6:4e:b1:d1:c0:db:39: a6:10:31:ec:15:fc:90:24:28:5e:ae:3e:f2:3b:02: e1:fd:5a:be:ca:b5:18:d3:2a:f2:4c:1f:e6:6d:23: 95:49:65:24:94:20:8b:48:e1:87:ac:23:5a:d1:c5: 0f:95:eb:2f:d3:7d:5d:02:57:93:70:7c:58:d7:78: 79:0d:9a:1f:dc:54:17:51:4a:55:a8:1a:f2:eb:f2: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C8:9E:45:8F:AE:67:C8:4D:9C:3A:32:08:FF:4F:24:76:36:11:0E X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c9:75:3b:43:b5:f2:3d:36:7c:44:34:eb:2d:5a:d6:df:b1: 7f:6b:d4:bd:50:1a:c5:c6:a9:63:f9:c8:50:1e:86:95:11:0a: ee:ba:82:b0:dd:ac:b2:1e:58:95:f4:ba:8b:f5:57:41:30:3d: 84:6e:3e:6f:50:c1:3c:7b:bd:6c:8b:74:a7:68:2b:fe:fd:c5: e4:c2:30:1c:5e:e4:8a:14:c8:b2:2c:16:9c:82:3e:da:dc:d4: 47:1e:37:81:df:46:c7:15:9a:c4:ef:b2:99:1f:9e:7a:ac:8c: 10:c6:45:6c:85:6e:35:8c:cf:61:8e:75:88:84:4f:ac:08:eb: 9d:05:5a:e4:2e:e2:aa:fc:99:3c:20:8d:e7:cc:63:b8:11:99: 6a:e5:9f:c5:c5:c4:17:b0:15:6a:36:3f:da:92:65:c4:03:63: 82:fe:81:7b:14:49:79:23:85:e7:4d:94:89:4d:75:52:fb:1f: 9e:cd:6e:bc:98:41:43:f3:ca:1c:2d:ce:e9:b1:78:97:9f:c4: 31:68:cb:70:5f:c0:a7:58:71:77:bc:49:fa:e8:a6:93:6d:c2: b8:38:76:79:6e:69:d5:f0:75:82:eb:6d:79:82:7b:1b:0f:f3: d0:bd:cd:23:98:cd:8f:2d:08:ed:34:51:81:58:bb:b5:e2:ca: 60:ef:ed:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjUxMjE4MTYzNDI4WhcNMjUxMjI1MTYzNDI4WjAYMRYwFAYD VQQDDA02OTQ0MmQxNS0xMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLUm/08pY+2zemmILpxjSFXFzOcPJ7eHRMXATRUVkvG10vVOTcxLDFaMkL4s Z43FUtqBekvfZOA9g+e/2+sWdKD+ZfB4gTxMQiWz0NMOsavL+5AuV6HMuneTGoZ+ 5di5HQX3DigAcopknkBzNTKFzAQ2NMjbYn+5Ful3YnLImYyI5VnM1AkNN7pIy06F uefpBn3NSrZkaEeOeC6ATip820mlfcFAyG1zOVoBkbZOsdHA2zmmEDHsFfyQJChe rj7yOwLh/Vq+yrUY0yryTB/mbSOVSWUklCCLSOGHrCNa0cUPlesv031dAleTcHxY 13h5DZof3FQXUUpVqBry6/JkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjInkWP rmfITZw6Mgj/TyR2NhEOMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAyXU7Q7XyPTZ8RDTrLVrW37F/a9S9UBrFxqlj+chQHoaVEQruuoKw 3ayyHliV9LqL9VdBMD2Ebj5vUME8e71si3SnaCv+/cXkwjAcXuSKFMiyLBacgj7a 3NRHHjeB30bHFZrE77KZH556rIwQxkVshW41jM9hjnWIhE+sCOudBVrkLuKq/Jk8 II3nzGO4EZlq5Z/FxcQXsBVqNj/akmXEA2OC/oF7FEl5I4XnTZSJTXVS+x+ezW68 mEFD88ocLc7psXiXn8QxaMtwX8CnWHF3vEn66KaTbcK4OHZ5bmnV8HWC6215gnsb D/PQvc0jmM2PLQjtNFGBWLu14spg7+10 -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:33 2025 by rpki-client