This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: 1rt4NwAT56ChNchD5cbRNVMd8BoIqg3sJHEDsLlQeic= Subject key identifier: 73:C1:FE:77:45:84:5B:92:75:12:8F:02:A5:B1:79:38:72:21:A3:07 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 04C7 Signing time: Thu 18 Dec 2025 20:06:45 +0000 Manifest this update: Thu 18 Dec 2025 20:06:45 +0000 Manifest next update: Thu 25 Dec 2025 20:06:45 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: iksM/FsFW2JbyLOgvIGL1ocWwMEpDAmG+vDY/okBFg4=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: j4swnApm+9qnd1JxhNqpHgqCfq33TfBVlK6hEwOceBY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: omXPUpgqUwy7Ho8dCu5BoDvGaEojyvGoRFJTZ4dVFjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Dec 18 20:06:45 2025 GMT Not After : Dec 25 20:06:45 2025 GMT Subject: CN=69445ed5-adb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:f2:99:c1:0b:d6:55:e2:c7:7f:da:79:b1: bc:aa:3b:49:5b:08:f6:f2:57:13:fe:30:d9:15:31: a1:8f:81:2f:d4:56:d3:99:90:8a:67:4d:32:d8:2b: c3:e6:26:62:5c:84:82:49:2b:f1:81:cd:2e:73:16: 99:b2:b6:c0:ed:c3:9a:02:ce:5f:5f:d9:bd:9a:9c: 82:d2:ac:35:4d:3a:4f:6e:19:61:e0:8d:48:91:f4: d2:cb:42:84:fd:93:05:cf:14:e9:bc:0f:08:c4:5a: f0:dc:5c:b2:a8:45:06:38:7b:82:42:fd:93:f2:f8: 2b:f4:83:54:9f:2b:64:dc:88:7f:67:e8:3b:89:a6: fd:8f:7a:89:14:a8:56:4f:d6:92:86:72:8d:81:48: 9e:bf:cf:04:b8:d0:63:4e:6e:ae:7d:66:c8:e8:91: 87:65:0f:b2:98:ee:99:8e:ca:ac:a0:24:26:c2:74: 11:9d:31:e7:13:a7:23:8c:ef:9f:b1:42:5d:45:c5: a7:90:4b:c9:48:b3:a6:06:28:e4:fd:b4:97:7d:0e: 61:4d:83:fd:ff:55:f0:c9:d8:71:a2:9b:a8:88:86: cc:9f:95:fb:3d:60:2b:c8:a0:68:eb:eb:5d:db:3d: e2:f5:a2:47:f1:e3:36:a7:13:e0:5b:64:fa:b1:cb: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C1:FE:77:45:84:5B:92:75:12:8F:02:A5:B1:79:38:72:21:A3:07 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3a:2c:8d:a9:fb:6c:d5:ab:67:df:81:5b:66:dd:ba:59:00: 2c:00:8a:b7:fe:08:05:08:b4:1e:34:42:44:12:55:16:c6:17: 7b:49:7f:de:90:8d:8c:20:09:87:d7:58:ba:89:1b:00:14:67: cd:c2:b6:fa:3c:71:0a:43:b6:0d:8b:6f:82:54:15:74:b5:49: dc:91:0c:74:79:91:dc:28:86:3b:c6:1a:e6:ca:63:68:ef:25: ff:1d:63:42:80:7b:c4:67:7a:0f:fe:8c:3a:8a:2c:e1:c2:31: 7d:10:16:13:a4:07:75:f6:9e:93:cd:1f:83:c3:bc:a6:e8:29: e0:16:68:12:0b:f6:0b:f3:47:02:09:75:28:03:0f:af:bb:44: 55:11:49:36:f8:ba:97:b5:aa:3b:90:b4:cf:39:7d:ef:95:e1: a3:5a:b0:64:a5:7c:f1:d5:8e:d5:99:50:8a:d2:88:c1:fb:9a: be:71:e5:66:79:42:d4:2e:3c:34:bf:97:6b:e0:9b:d7:74:f0: 69:63:fa:2d:a7:60:ec:84:0b:4a:8c:26:dd:ba:ac:74:d3:76: ec:f9:d7:ce:c5:a9:30:2d:fa:39:b5:a2:e1:c6:31:9a:43:9c: 62:46:2b:b5:90:45:2e:b2:31:d5:e9:38:bd:74:db:c0:a3:3e: b3:8d:00:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMjE4MjAwNjQ1WhcNMjUxMjI1MjAwNjQ1WjAYMRYwFAYD VQQDDA02OTQ0NWVkNS1hZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7/ymcEL1lXix3/aebG8qjtJWwj28lcT/jDZFTGhj4Ev1FbTmZCKZ00y2CvD 5iZiXISCSSvxgc0ucxaZsrbA7cOaAs5fX9m9mpyC0qw1TTpPbhlh4I1IkfTSy0KE /ZMFzxTpvA8IxFrw3FyyqEUGOHuCQv2T8vgr9INUnytk3Ih/Z+g7iab9j3qJFKhW T9aShnKNgUiev88EuNBjTm6ufWbI6JGHZQ+ymO6ZjsqsoCQmwnQRnTHnE6cjjO+f sUJdRcWnkEvJSLOmBijk/bSXfQ5hTYP9/1XwydhxopuoiIbMn5X7PWAryKBo6+td 2z3i9aJH8eM2pxPgW2T6sctOvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPB/ndF hFuSdRKPAqWxeThyIaMHMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALOiyNqfts1atn34FbZt26WQAsAIq3/ggFCLQeNEJEElUWxhd7SX/e kI2MIAmH11i6iRsAFGfNwrb6PHEKQ7YNi2+CVBV0tUnckQx0eZHcKIY7xhrmymNo 7yX/HWNCgHvEZ3oP/ow6iizhwjF9EBYTpAd19p6TzR+Dw7ym6CngFmgSC/YL80cC CXUoAw+vu0RVEUk2+LqXtao7kLTPOX3vleGjWrBkpXzx1Y7VmVCK0ojB+5q+ceVm eULULjw0v5dr4JvXdPBpY/otp2DshAtKjCbduqx003bs+dfOxakwLfo5taLhxjGa Q5xiRiu1kEUusjHV6Ti9dNvAoz6zjQA1 -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:02 2025 by rpki-client