This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: RM6ssOeGdBWyFjk/NSc9ulvBy4miQhEGLNlIwajPywY= Subject key identifier: 1D:8B:FE:D1:F6:7C:54:B9:7B:3D:17:A8:87:22:9F:FF:FE:A0:C6:09 Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: BB Signing time: Fri 19 Dec 2025 05:12:40 +0000 Manifest this update: Fri 19 Dec 2025 05:12:39 +0000 Manifest next update: Fri 26 Dec 2025 05:12:39 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: 7vDReU3a7d6tlmsM0/zc0H6myrJHclaYoPc5Bg/Tky0=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Dec 19 05:12:39 2025 GMT Not After : Dec 26 05:12:39 2025 GMT Subject: CN=6944dec8-b97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:f6:ec:56:40:be:e5:8b:ad:da:59:6a:c7: 78:d4:6d:bf:03:fc:39:0b:d0:b2:ae:4f:dc:24:7c: f4:91:15:c1:af:c7:3c:0f:b8:37:f5:0b:0b:ba:0c: 73:65:51:06:3e:af:37:89:5a:d8:b2:b4:c8:3b:a0: b9:92:98:38:f9:c7:f3:e2:e7:60:92:27:fe:59:d5: 3c:49:68:89:9e:c8:1f:ea:cb:8f:fd:79:fd:d8:ef: c2:60:13:d8:5b:ed:12:b1:02:e7:61:61:c7:1d:b0: 10:74:6b:45:d4:1a:19:8d:33:50:db:d1:c5:95:3f: 5f:14:8e:6e:04:6a:eb:5b:c8:7c:25:d1:85:ac:08: bb:cf:2c:21:f6:19:20:dc:48:c4:50:7d:10:9b:46: 4d:b6:0b:cc:85:50:f3:18:7a:0f:8a:d7:d1:53:c4: d0:14:08:cc:e9:37:58:46:cc:d1:40:5b:cd:54:7e: 3a:6e:f4:f7:8d:a2:84:0f:6b:94:4c:d7:14:1d:79: bf:2c:4d:bf:d5:93:3f:d8:58:27:aa:b8:50:54:a5: 96:12:3f:ca:4c:0d:f8:0b:7f:d2:cb:d5:88:37:88: c5:30:db:d5:5d:02:f3:d2:cf:d4:26:5d:1c:53:26: f2:3c:26:ef:0b:bf:2f:69:4f:ae:bb:f4:62:43:b3: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:FE:D1:F6:7C:54:B9:7B:3D:17:A8:87:22:9F:FF:FE:A0:C6:09 X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d4:63:29:5e:25:d1:3d:2c:a0:1c:be:8f:c5:a6:82:ec:ca: a3:e0:0f:13:e2:38:28:87:80:10:f8:1c:29:ea:d2:e7:fa:f5: 70:af:af:84:66:41:3c:c3:05:88:3e:67:61:aa:9a:56:c2:de: 9b:ed:76:7f:12:97:4c:ad:5d:2a:27:b4:ce:1e:9e:2c:88:85: 2b:08:93:c7:84:de:00:a5:15:69:28:58:2a:51:bf:1c:01:f8: fd:b2:81:88:e7:13:fd:32:a2:b2:ef:7d:d1:31:36:0f:81:43: 54:07:67:fd:11:c2:06:d4:f9:4f:dd:54:96:92:e1:77:3f:c3: a3:35:20:ae:ea:14:81:b4:bb:1c:04:3e:e3:b6:e0:15:53:82: 08:3f:22:6b:45:da:af:8d:12:02:58:54:5e:cb:82:d3:45:63: bf:e5:dc:68:df:28:37:45:db:d4:cf:b6:18:60:fd:a4:cd:b6: be:a3:17:6e:99:80:8b:a7:cf:ec:28:14:a9:84:87:64:af:6a: 4d:7b:ea:97:c2:75:96:84:b2:cc:82:a1:ca:95:0e:75:a3:fc: 1f:6b:3b:5e:18:d1:24:86:5f:5d:b3:73:ca:d4:78:ff:4f:94: 80:50:64:fd:7f:f6:60:09:88:61:35:5d:96:5d:37:90:bd:bb: 3d:66:43:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3 MzhBMDQyNDEwHhcNMjUxMjE5MDUxMjM5WhcNMjUxMjI2MDUxMjM5WjAYMRYwFAYD VQQDDA02OTQ0ZGVjOC1iOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeb27FZAvuWLrdpZasd41G2/A/w5C9Cyrk/cJHz0kRXBr8c8D7g39QsLugxz ZVEGPq83iVrYsrTIO6C5kpg4+cfz4udgkif+WdU8SWiJnsgf6suP/Xn92O/CYBPY W+0SsQLnYWHHHbAQdGtF1BoZjTNQ29HFlT9fFI5uBGrrW8h8JdGFrAi7zywh9hkg 3EjEUH0Qm0ZNtgvMhVDzGHoPitfRU8TQFAjM6TdYRszRQFvNVH46bvT3jaKED2uU TNcUHXm/LE2/1ZM/2FgnqrhQVKWWEj/KTA34C3/Sy9WIN4jFMNvVXQLz0s/UJl0c UybyPCbvC78vaU+uu/RiQ7NcYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2L/tH2 fFS5ez0XqIcin//+oMYJMB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR Y0d4c0tKckNhdzF6aWdRa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ1GMpXiXRPSygHL6PxaaC7Mqj4A8T4jgoh4AQ+Bwp6tLn+vVwr6+E ZkE8wwWIPmdhqppWwt6b7XZ/EpdMrV0qJ7TOHp4siIUrCJPHhN4ApRVpKFgqUb8c Afj9soGI5xP9MqKy733RMTYPgUNUB2f9EcIG1PlP3VSWkuF3P8OjNSCu6hSBtLsc BD7jtuAVU4IIPyJrRdqvjRICWFRey4LTRWO/5dxo3yg3RdvUz7YYYP2kzba+oxdu mYCLp8/sKBSphIdkr2pNe+qXwnWWhLLMgqHKlQ51o/wfazteGNEkhl9ds3PK1Hj/ T5SAUGT9f/ZgCYhhNV2WXTeQvbs9ZkMU -----END CERTIFICATE-----Generated at Sun Dec 21 04:44:57 2025 by rpki-client