This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: cJdkkArDsXtkGDYJRaB1EcdH95K8JWn2EshtOQG2Ui0= Subject key identifier: 5B:F8:62:D3:C1:3A:29:40:EA:AF:B9:65:DB:41:D6:3A:03:2F:B8:D2 Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: F3 Signing time: Sun 21 Dec 2025 04:32:17 +0000 Manifest this update: Sun 21 Dec 2025 04:32:16 +0000 Manifest next update: Sun 28 Dec 2025 04:32:16 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: feUD07N2MVx2oQ3annfUZOoCKiHbAxWAK1MiaZXBTkk=) 2: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: VfnSvDUvHKrYhNHc7vXNPSVppqVaI6SmYJprBmoGKlM=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: /deQI9TcHTHxlvzCNYanJbYW7e/aSJZiDaf6RgvHT6g=) 4: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: WBiQbxmKfw0D0XJ4l3vBPQQR/fNPllSnLo2npN/9Q8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Dec 21 04:32:16 2025 GMT Not After : Dec 28 04:32:16 2025 GMT Subject: CN=69477850-d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:7d:25:9b:2c:57:31:e3:3a:40:47:e4:8b: 1c:73:d5:12:22:a6:d8:f6:a2:ab:88:55:fb:6e:99: fc:bb:3e:5a:8b:81:d4:d0:9a:bd:1a:7a:fa:86:25: 0b:f4:ea:7f:65:f7:d5:42:6b:a2:82:1e:1f:7e:00: dc:c3:2d:28:5b:de:37:37:58:82:f8:3b:5f:34:8e: 4a:d4:06:fe:e1:63:0a:74:84:39:c4:a8:00:db:58: c0:16:3d:77:25:eb:6b:4e:a9:72:ed:d5:e4:43:52: a3:bb:29:6f:09:fc:cb:75:5e:01:e0:98:63:22:fd: ef:75:be:8d:15:9a:6d:ad:2f:a0:f3:4f:c6:82:10: f4:6e:46:2d:64:9c:49:c8:01:fc:9d:29:40:46:7c: 1b:11:95:4f:40:70:b7:2e:d8:2a:e4:7d:42:2e:2c: 1d:9d:05:e4:24:90:d6:b8:04:aa:24:c7:9f:94:c6: 76:f1:5b:73:d1:a5:86:78:44:88:63:75:5e:ce:da: 12:b3:05:7b:b7:92:4b:d4:99:fa:00:bd:07:fd:69: a2:ea:5b:82:73:4e:13:33:81:46:7c:e8:67:5b:0e: f4:39:77:3f:49:07:8b:ee:f3:bb:fb:9e:12:e3:fe: 04:96:52:d3:07:fe:e4:0b:7a:af:52:0e:bb:cb:12: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:62:D3:C1:3A:29:40:EA:AF:B9:65:DB:41:D6:3A:03:2F:B8:D2 X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:90:69:eb:14:50:c3:6a:c7:6c:7e:bf:98:f1:48:be:2b:9f: dc:9c:22:67:06:b8:82:60:2d:ef:1c:a8:d4:c9:15:22:f9:39: 48:60:c5:61:c8:b3:90:82:03:3a:aa:40:37:70:0c:eb:4e:e0: a1:bc:19:ff:83:94:8b:82:9f:ae:7e:ca:c8:5d:b8:af:4b:08: 82:cf:b0:73:99:b6:1b:88:bb:7d:17:43:03:30:cd:1d:09:df: df:e5:4b:01:1d:74:1b:a9:97:18:db:4f:63:27:a2:56:5a:72: 01:33:ba:75:40:2d:e0:ca:64:02:9f:ab:ce:0b:24:c6:62:e9: 77:0d:58:ba:16:c5:ee:92:e1:da:c4:46:29:36:af:1c:e6:f1: 5e:71:49:4e:87:6f:72:a7:4e:45:52:df:bc:6f:03:a2:0d:d0: 35:b3:19:19:79:61:dd:f9:1d:95:06:70:e5:40:aa:48:d9:9d: 5d:73:b2:32:ec:04:74:ce:b9:d6:1e:32:9b:b1:6d:19:20:13: 78:a8:a7:bf:cb:00:b8:59:5e:ac:78:c1:fd:da:1b:8c:fb:50: 9d:96:8e:8b:c3:e7:67:62:d9:bf:35:c7:2c:3c:fa:00:36:02: 1a:91:ff:fe:8b:5c:e8:bd:7f:72:d0:4b:23:43:d9:2c:c4:6b: af:19:3c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUxMjIxMDQzMjE2WhcNMjUxMjI4MDQzMjE2WjAYMRYwFAYD VQQDDA02OTQ3Nzg1MC1kNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YN9JZssVzHjOkBH5Iscc9USIqbY9qKriFX7bpn8uz5ai4HU0Jq9Gnr6hiUL 9Op/ZffVQmuigh4ffgDcwy0oW943N1iC+DtfNI5K1Ab+4WMKdIQ5xKgA21jAFj13 JetrTqly7dXkQ1KjuylvCfzLdV4B4JhjIv3vdb6NFZptrS+g80/GghD0bkYtZJxJ yAH8nSlARnwbEZVPQHC3Ltgq5H1CLiwdnQXkJJDWuASqJMeflMZ28Vtz0aWGeESI Y3VeztoSswV7t5JL1Jn6AL0H/Wmi6luCc04TM4FGfOhnWw70OXc/SQeL7vO7+54S 4/4EllLTB/7kC3qvUg67yxIrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv4YtPB OilA6q+5ZdtB1joDL7jSMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXkGnrFFDDasdsfr+Y8Ui+K5/cnCJnBriCYC3vHKjUyRUi+TlIYMVh yLOQggM6qkA3cAzrTuChvBn/g5SLgp+ufsrIXbivSwiCz7BzmbYbiLt9F0MDMM0d Cd/f5UsBHXQbqZcY209jJ6JWWnIBM7p1QC3gymQCn6vOCyTGYul3DVi6FsXukuHa xEYpNq8c5vFecUlOh29yp05FUt+8bwOiDdA1sxkZeWHd+R2VBnDlQKpI2Z1dc7Iy 7AR0zrnWHjKbsW0ZIBN4qKe/ywC4WV6seMH92huM+1Cdlo6Lw+dnYtm/NccsPPoA NgIakf/+i1zovX9y0EsjQ9ksxGuvGTxG -----END CERTIFICATE-----Generated at Tue Dec 23 02:41:42 2025 by rpki-client