This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: s8VOBAi7bPLI5iLvZ4uW8nRClI2F4Tgp38CoEof3DtM= Subject key identifier: F1:74:D6:7B:1A:D4:CA:67:C1:84:25:82:79:35:5D:8D:6F:B0:AA:26 Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 1997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 1987 Signing time: Thu 04 Dec 2025 16:06:25 +0000 Manifest this update: Thu 04 Dec 2025 16:06:25 +0000 Manifest next update: Thu 11 Dec 2025 16:06:25 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: d1F5MuGpVeMQhv5UdEH+gyxXBopOyD8LIwo+a9ChzAY=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: BZMo2s4ILhSYw+N337H+VSwNBVHfcjC9wdr+2hur79I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6551 (0x1997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Dec 4 16:06:25 2025 GMT Not After : Dec 11 16:06:25 2025 GMT Subject: CN=6931b181-87a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:8d:60:2f:e3:13:7f:2a:fe:ac:d6:0a:be: 82:2e:82:76:0d:21:d8:f4:e1:5c:a7:5e:7f:96:d8: 80:97:8a:16:56:84:94:40:39:df:70:7d:ac:27:84: 7f:63:03:8d:ad:0e:11:4a:59:06:b3:b0:6f:4d:58: 30:1b:fe:a9:e9:a5:3c:c8:81:24:25:e6:5c:20:c0: 20:aa:9b:63:17:fb:b2:31:23:30:12:90:46:61:de: e1:17:19:45:2f:c2:1e:e9:64:93:25:f0:1e:a7:3b: 3a:ce:21:66:91:e3:07:34:2b:e0:7f:86:e1:fa:7f: 0f:f3:6c:18:9c:d0:3f:2e:45:e4:f3:1c:3d:73:6e: 29:b3:be:5a:64:7e:d7:c5:63:9b:45:9b:be:b1:a8: a9:72:76:2b:82:c9:3c:95:3c:06:7b:81:99:6c:6f: 05:bd:b6:8e:24:ff:e7:3b:31:b2:42:db:c6:31:9a: bf:bc:d8:75:b6:45:ed:03:07:a8:1e:83:b7:de:78: 72:06:11:64:e1:28:6b:cd:92:98:19:5b:3d:41:6c: 7d:54:2d:a5:53:4c:b1:1c:74:98:97:ea:a9:e1:52: 9d:da:28:a7:7f:1a:b3:8f:61:95:a9:8e:3d:15:af: 59:3f:23:a9:46:f5:36:eb:2d:55:ee:58:0d:97:38: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:74:D6:7B:1A:D4:CA:67:C1:84:25:82:79:35:5D:8D:6F:B0:AA:26 X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:5a:6f:4a:ac:b5:ae:5d:26:3a:0f:50:c5:52:8a:8b:5d: f2:a6:70:1d:50:52:95:8c:06:71:8d:f9:77:b0:db:04:42:98: c8:a1:53:d8:3e:6c:da:10:87:19:8e:64:14:3c:57:3e:75:05: b6:c8:9e:90:3a:51:ef:0d:03:9f:94:44:cc:2b:b5:c1:40:80: 58:5f:e5:bc:7f:95:72:09:b6:72:49:02:17:b9:98:ae:be:35: 09:5e:1a:01:25:0a:66:30:fb:7e:95:0a:82:6d:a8:60:35:cd: b0:fa:1b:1f:03:ca:99:96:b6:ba:76:d0:f2:fa:51:16:19:0a: 10:76:8e:c1:87:2e:b7:7a:f7:1d:71:e0:99:3c:b3:a7:7f:37: 3c:da:64:f0:3f:78:3d:2e:f4:34:4e:c2:3b:bb:15:b4:c5:47: c5:17:da:23:ff:d8:5a:bf:6a:5f:51:1f:f4:c9:77:f5:51:71: 11:c6:eb:eb:b2:b2:53:ad:d6:23:d8:c1:94:2a:aa:77:93:94: c2:dc:5e:e5:ff:74:33:d4:e8:af:a7:b0:8d:22:c0:bf:be:5c: 82:49:8b:34:18:74:21:00:26:83:23:ae:32:82:50:22:07:cb: bb:48:21:47:81:27:1b:23:e7:0d:cc:ad:33:a2:ad:1a:69:e0: 06:20:a8:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUxMjA0MTYwNjI1WhcNMjUxMjExMTYwNjI1WjAYMRYwFAYD VQQDEw02OTMxYjE4MS04N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtWNYC/jE38q/qzWCr6CLoJ2DSHY9OFcp15/ltiAl4oWVoSUQDnfcH2sJ4R/ YwONrQ4RSlkGs7BvTVgwG/6p6aU8yIEkJeZcIMAgqptjF/uyMSMwEpBGYd7hFxlF L8Ie6WSTJfAepzs6ziFmkeMHNCvgf4bh+n8P82wYnNA/LkXk8xw9c24ps75aZH7X xWObRZu+saipcnYrgsk8lTwGe4GZbG8FvbaOJP/nOzGyQtvGMZq/vNh1tkXtAweo HoO33nhyBhFk4ShrzZKYGVs9QWx9VC2lU0yxHHSYl+qp4VKd2iinfxqzj2GVqY49 Fa9ZPyOpRvU26y1V7lgNlzi4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF01nsa 1MpnwYQlgnk1XY1vsKomMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/81pvSqy1rl0mOg9QxVKKi13ypnAdUFKVjAZxjfl3sNsEQpjIoVPY PmzaEIcZjmQUPFc+dQW2yJ6QOlHvDQOflETMK7XBQIBYX+W8f5VyCbZySQIXuZiu vjUJXhoBJQpmMPt+lQqCbahgNc2w+hsfA8qZlra6dtDy+lEWGQoQdo7Bhy63evcd ceCZPLOnfzc82mTwP3g9LvQ0TsI7uxW0xUfFF9oj/9hav2pfUR/0yXf1UXERxuvr srJTrdYj2MGUKqp3k5TC3F7l/3Qz1Oivp7CNIsC/vlyCSYs0GHQhACaDI64yglAi B8u7SCFHgScbI+cNzK0zoq0aaeAGIKiD -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:40 2025 by rpki-client