This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json) Hash identifier: +tc4NHXKt/AGVudRp2KJlWoeY2UYtCmFOkaaDKhqBXg= Subject key identifier: F8:D2:4A:EF:77:DA:EF:CA:9A:53:AD:F4:82:B2:2E:29:37:32:E7:53 Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft Manifest number: 06E9 Signing time: Sat 20 Dec 2025 16:37:05 +0000 Manifest this update: Sat 20 Dec 2025 16:37:05 +0000 Manifest next update: Sat 27 Dec 2025 16:37:05 +0000 Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: vQOCSGf9nzCFiFr3HWPPNambbqs7EnspCOBSahRdXuw=) 2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: qm9tOH02ZhUyhN95rojnAyTLcNLxX4GEOIv6/MzX5Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Validity Not Before: Dec 20 16:37:05 2025 GMT Not After : Dec 27 16:37:05 2025 GMT Subject: CN=6946d0b1-18ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ac:d1:e2:1c:17:44:fb:d6:24:e9:1b:47:a2: 41:5c:58:8d:c2:66:c8:f0:b8:06:c5:e3:b3:f7:35: 3c:47:c1:d3:b7:06:f5:3a:97:67:cb:82:76:67:67: 91:ad:35:8d:28:8e:5c:9f:55:07:4c:5e:bf:af:79: d0:6a:e9:3c:7b:08:cc:25:e1:13:ae:9a:48:15:78: f6:a0:ce:5a:fb:71:12:c1:c6:6f:10:87:fb:13:28: bc:3a:a0:28:fc:ab:02:1b:54:0b:8e:55:c1:84:d9: c8:df:29:07:6a:56:3d:4b:2f:62:2c:5f:aa:56:33: 5c:41:d0:21:89:c6:ab:68:e6:bc:5a:bb:fc:2c:63: a0:df:5b:90:ad:8b:e1:98:34:30:1f:44:5d:f5:8e: ba:59:df:23:28:50:13:44:8a:dd:ad:f4:38:cd:28: b4:f4:de:0f:d2:87:d3:41:06:ff:fa:a1:f2:4d:82: a3:69:b9:6c:2a:d9:ff:b7:03:d0:16:ba:44:cf:ab: 74:0e:b3:03:5c:06:ec:53:58:85:31:75:50:de:32: 94:d7:b4:b0:bf:af:ab:f7:18:7c:43:66:d3:ce:a2: dd:6e:e8:b0:62:89:e2:53:29:80:ff:4b:0e:cf:da: 10:70:13:0c:81:c5:37:0e:66:0f:f5:c4:c5:e4:45: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D2:4A:EF:77:DA:EF:CA:9A:53:AD:F4:82:B2:2E:29:37:32:E7:53 X509v3 Authority Key Identifier: keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e0:3b:ce:e5:cc:a1:90:72:5b:d0:c6:27:6b:66:57:b4:80: 39:aa:6c:eb:37:66:72:d1:1f:5f:8b:4f:bb:49:14:02:10:dc: 95:05:e5:e2:7f:ce:04:9c:67:ba:1e:e5:7c:9d:4c:40:55:65: 6c:c8:bf:54:9a:96:66:45:4a:e3:d6:1c:dc:99:0d:f5:10:bb: 3b:81:74:39:a3:46:99:0c:79:f6:43:9e:4f:fd:b1:b0:cf:97: 6a:7c:91:be:59:9c:8b:4f:e0:be:9b:75:a6:5c:37:2b:6a:69: f9:04:96:0b:0f:41:e4:cd:f5:92:72:eb:44:d7:f4:78:e1:c0: de:b0:d1:9b:9c:9d:18:2c:6b:d1:18:14:eb:50:bd:fb:f4:ca: 99:a8:47:28:0c:e4:28:3b:b1:ae:58:94:0c:70:6f:c8:ed:d1: 51:bd:6b:0a:bf:39:ee:a3:d9:33:e3:71:10:c5:f4:23:8d:39: ae:ff:7b:4b:2a:b9:52:c3:f1:37:2d:87:b1:4c:0f:c7:3d:c1: 0c:55:fb:0e:6a:1d:75:36:6b:79:07:cf:47:f1:58:e3:37:a4: e2:b2:82:a3:0c:9a:7d:83:62:7d:03:70:48:fd:01:12:6e:b1: eb:fc:84:c5:36:0f:64:5b:66:3d:40:0d:d2:77:b2:48:fc:4c: a5:5b:06:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEUyNDNGM0JFODI1NTY5QkIxNkFDQjM3NEJDOThEQUJF NjkwQjE3QzEwHhcNMjUxMjIwMTYzNzA1WhcNMjUxMjI3MTYzNzA1WjAYMRYwFAYD VQQDDA02OTQ2ZDBiMS0xOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/KzR4hwXRPvWJOkbR6JBXFiNwmbI8LgGxeOz9zU8R8HTtwb1Opdny4J2Z2eR rTWNKI5cn1UHTF6/r3nQauk8ewjMJeETrppIFXj2oM5a+3ESwcZvEIf7Eyi8OqAo /KsCG1QLjlXBhNnI3ykHalY9Sy9iLF+qVjNcQdAhicaraOa8Wrv8LGOg31uQrYvh mDQwH0Rd9Y66Wd8jKFATRIrdrfQ4zSi09N4P0ofTQQb/+qHyTYKjablsKtn/twPQ FrpEz6t0DrMDXAbsU1iFMXVQ3jKU17Swv6+r9xh8Q2bTzqLdbuiwYoniUymA/0sO z9oQcBMMgcU3DmYP9cTF5EU72wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjSSu93 2u/KmlOt9IKyLik3MudTMB8GA1UdIwQYMBaAFOJD876CVWm7FqyzdLyY2r5pCxfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CODk3QzU4MkEx OUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFic1dyTE4wdkpqYXZta0xG OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzRrUHp2b0pWYWJzV3JMTjB2Smphdm1rTEY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CODk3QzU4MkExOUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFi c1dyTE4wdkpqYXZta0xGOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/4DvO5cyhkHJb0MYna2ZXtIA5qmzrN2Zy0R9fi0+7SRQCENyVBeXi f84EnGe6HuV8nUxAVWVsyL9UmpZmRUrj1hzcmQ31ELs7gXQ5o0aZDHn2Q55P/bGw z5dqfJG+WZyLT+C+m3WmXDcramn5BJYLD0HkzfWScutE1/R44cDesNGbnJ0YLGvR GBTrUL379MqZqEcoDOQoO7GuWJQMcG/I7dFRvWsKvznuo9kz43EQxfQjjTmu/3tL KrlSw/E3LYexTA/HPcEMVfsOah11Nmt5B89H8VjjN6TisoKjDJp9g2J9A3BI/QES brHr/ITFNg9kW2Y9QA3Sd7JI/EylWwYb -----END CERTIFICATE-----Generated at Sun Dec 21 08:05:07 2025 by rpki-client