This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: FA9hwEdvINkfxNcWhvwP/wlKvxX7JYxW4GkkgsW//zI= Subject key identifier: C3:09:EC:84:15:4E:9D:13:41:86:45:58:13:46:2E:73:7C:2F:91:33 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02F3 Signing time: Sun 21 Dec 2025 00:36:39 +0000 Manifest this update: Sun 21 Dec 2025 00:36:39 +0000 Manifest next update: Sun 28 Dec 2025 00:36:39 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: EJ2A3NOTcd+Qgdu+7Klq0OQcpj7HdMWqtVdjYzAc7Fs=) 2: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 5: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 6: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 7: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 8: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) 9: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Dec 21 00:36:39 2025 GMT Not After : Dec 28 00:36:39 2025 GMT Subject: CN=69474117-7626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:2a:57:be:de:48:57:c2:77:b7:0e:e5:42: 8b:93:0f:1a:cf:7d:bd:85:b8:f3:1c:b0:d9:1e:12: ee:64:d6:e8:3b:53:0a:52:92:e2:35:3d:43:35:5a: 18:2c:11:ec:0f:fe:8a:1c:e1:7d:e3:8a:e7:48:b9: 7a:e3:41:36:20:3b:37:d4:c5:32:76:c8:58:73:13: 2d:70:9f:6c:45:41:bd:a1:85:df:c8:5f:91:bd:03: 2a:1a:ab:d1:1f:02:95:b2:97:f9:36:e0:5e:ce:21: 8c:d3:42:b4:e0:12:f2:ef:ea:7e:81:e1:b3:04:a6: ba:e6:5d:8d:41:01:d8:52:ed:fd:1d:4f:eb:9d:63: 4f:62:3c:83:31:5c:71:0a:28:00:80:b1:52:e4:02: 21:70:a0:ce:97:f4:4a:59:9c:f9:90:c9:5f:74:fe: 4b:2f:8c:8e:c5:41:8b:42:b6:2d:3b:ee:88:fe:f9: bc:8e:55:25:42:0a:a2:9f:19:75:1e:96:9d:d1:4d: ab:48:86:9c:26:44:6a:dc:49:4c:c6:d6:b8:99:8b: 47:d6:8f:b6:d7:d0:2c:31:47:8e:7c:ec:a9:86:f4: af:b5:ed:44:c2:0c:92:9a:f2:bc:f2:a9:f2:d0:db: ca:c1:b8:63:12:15:69:2c:09:1e:ff:8d:0c:ae:09: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:09:EC:84:15:4E:9D:13:41:86:45:58:13:46:2E:73:7C:2F:91:33 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:49:5f:61:4a:8e:4e:a3:34:43:5f:a4:91:11:6c:60:09:d8: fb:ae:9e:5c:0d:02:5f:fe:99:f8:b2:ba:4c:1f:32:50:20:0b: 49:d6:52:7b:1b:c6:46:04:4a:48:af:8b:08:c0:55:4b:b3:38: 99:bf:2f:1f:ca:0b:e8:55:e3:01:74:85:f0:cd:8b:13:5c:f5: 07:80:c9:0d:0d:a7:37:56:c8:3f:e7:54:08:08:23:09:e7:97: 48:88:1d:7e:4e:b8:0e:29:6c:06:a0:af:4d:ba:45:a7:37:bc: 84:a0:cf:0a:f0:f3:8c:d8:62:e4:17:78:85:cb:0f:32:16:d0: 42:88:c8:75:4a:95:a5:c6:16:cb:d8:ef:d7:65:d7:0c:58:9c: a7:da:ab:19:e8:63:e0:80:b5:d5:c1:2a:0a:8d:40:77:74:86: da:9c:36:2b:bd:ec:ab:29:97:4e:43:f0:b0:e8:28:a7:c5:61: 6f:74:12:c0:9b:e8:97:5a:1b:5d:e4:60:23:08:1c:14:2a:94: 27:4d:0a:5c:85:18:c2:42:56:b8:f9:aa:cc:7b:f0:68:96:ef: 60:d2:64:b1:92:c1:04:3a:1a:b8:6d:c2:64:b4:9f:bf:6f:94: bd:5a:00:67:2d:e7:1b:b2:c2:f0:e3:ba:64:ff:fa:52:8a:96: b7:3b:28:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUxMjIxMDAzNjM5WhcNMjUxMjI4MDAzNjM5WjAYMRYwFAYD VQQDDA02OTQ3NDExNy03NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvAqV77eSFfCd7cO5UKLkw8az329hbjzHLDZHhLuZNboO1MKUpLiNT1DNVoY LBHsD/6KHOF944rnSLl640E2IDs31MUydshYcxMtcJ9sRUG9oYXfyF+RvQMqGqvR HwKVspf5NuBeziGM00K04BLy7+p+geGzBKa65l2NQQHYUu39HU/rnWNPYjyDMVxx CigAgLFS5AIhcKDOl/RKWZz5kMlfdP5LL4yOxUGLQrYtO+6I/vm8jlUlQgqinxl1 Hpad0U2rSIacJkRq3ElMxta4mYtH1o+219AsMUeOfOyphvSvte1EwgySmvK88qny 0NvKwbhjEhVpLAke/40Mrglw2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMJ7IQV Tp0TQYZFWBNGLnN8L5EzMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSV9hSo5OozRDX6SREWxgCdj7rp5cDQJf/pn4srpMHzJQIAtJ1lJ7 G8ZGBEpIr4sIwFVLsziZvy8fygvoVeMBdIXwzYsTXPUHgMkNDac3Vsg/51QICCMJ 55dIiB1+TrgOKWwGoK9NukWnN7yEoM8K8POM2GLkF3iFyw8yFtBCiMh1SpWlxhbL 2O/XZdcMWJyn2qsZ6GPggLXVwSoKjUB3dIbanDYrveyrKZdOQ/Cw6CinxWFvdBLA m+iXWhtd5GAjCBwUKpQnTQpchRjCQla4+arMe/Bolu9g0mSxksEEOhq4bcJktJ+/ b5S9WgBnLecbssLw47pk//pSipa3Oygi -----END CERTIFICATE-----Generated at Sun Dec 21 07:32:43 2025 by rpki-client