This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json) Hash identifier: jU/68tuFINPR0gtBWS6HWQH/Okg8AdErK+3GrAeicng= Subject key identifier: 10:82:0B:C1:88:74:5B:E3:64:B8:82:D3:31:7A:10:8C:D5:35:CA:93 Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft Manifest number: 020D Signing time: Fri 05 Dec 2025 00:34:54 +0000 Manifest this update: Fri 05 Dec 2025 00:34:53 +0000 Manifest next update: Fri 12 Dec 2025 00:34:53 +0000 Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: OWvTkmBBqBZ+uL7Vi93NtXOtBvHFjAt2lWPHm4FCXvA=) 2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Validity Not Before: Dec 5 00:34:53 2025 GMT Not After : Dec 12 00:34:53 2025 GMT Subject: CN=693228ae-e0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:b0:2f:f1:0a:a7:93:b8:b1:3c:04:c0:04: 17:ce:f9:b6:23:11:e4:80:3a:3e:e3:6b:71:ce:fe: 60:bd:49:a6:56:5d:7e:a4:77:aa:23:cd:16:11:57: 28:f9:1d:da:71:cd:c3:5c:1d:b2:43:f8:99:5c:5d: 8b:e5:f8:d8:db:ca:b8:44:a0:e3:6f:47:20:a8:e0: fd:c6:04:3f:74:c5:4d:93:09:ab:83:26:ce:fb:e7: d1:c4:5b:6e:bc:f4:97:dd:ae:42:b2:ff:7a:9b:db: 38:d8:43:d9:a9:f2:3b:cd:82:7b:0a:47:1b:27:d8: 88:46:00:f9:67:13:b4:a3:13:fe:28:27:2a:b3:d6: fe:0f:9d:ab:e2:d5:4c:0f:d6:a2:55:d9:2c:d7:64: c9:74:6c:b7:cf:7b:89:e8:a1:59:86:d7:9d:e2:e5: 1a:03:7d:6b:96:a6:80:b8:a8:0c:5e:5b:b3:3f:4b: 6d:8a:e7:b5:67:c9:5f:7b:9d:b0:49:70:7f:c5:ae: 2d:25:5e:8a:4f:4b:95:b3:de:48:d1:29:f7:7c:4a: e7:6f:88:67:d6:27:fa:b7:0d:d8:57:0b:da:bf:fb: ae:08:0a:0b:1c:82:0d:e4:eb:0a:fa:f8:f0:fe:bb: c8:90:ce:be:bf:50:16:06:fa:ab:d1:61:f2:89:e5: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:82:0B:C1:88:74:5B:E3:64:B8:82:D3:31:7A:10:8C:D5:35:CA:93 X509v3 Authority Key Identifier: keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:51:53:b1:0d:77:30:75:e0:f9:4d:f8:fd:86:a6:d1:3d:d8: b7:dd:c9:88:e9:ff:e6:22:c7:8f:93:96:2f:56:66:e1:9b:1e: 66:a7:de:df:4a:67:20:62:51:5b:4a:95:5c:88:34:11:96:fe: 0a:ef:5e:32:02:59:d6:d1:a1:13:57:fd:bb:3e:02:d8:f3:16: e1:0a:ed:5e:24:c4:79:c4:7d:ff:4b:a2:a9:06:0d:8e:71:0c: 17:cc:a7:d9:0c:1b:51:94:38:05:6a:fe:91:f6:78:bd:f2:4c: 3e:78:28:45:fc:3d:83:3a:5e:de:11:4b:af:41:b7:d5:63:b9: 42:d5:77:ea:93:ff:90:a5:b4:8b:1c:7c:00:bb:b9:96:cf:2e: cb:a2:d9:b6:7d:e6:fd:91:fb:f9:1e:b4:fd:10:3e:14:2c:32: 7b:dc:6d:64:07:a1:e2:6b:e0:37:cc:7d:8a:7c:93:a2:cc:4a: 5a:e3:69:e4:e4:66:45:6e:13:ea:f8:9a:4e:8c:e5:56:e1:82: 4b:c0:cc:65:4b:72:16:61:9e:90:1b:e1:7b:78:cd:ed:44:49: d5:14:32:46:b4:9c:47:ef:5a:c2:d7:f6:3a:cf:3d:4f:ab:93: a2:03:bc:07:b6:bf:4c:62:8c:1c:17:eb:1b:ec:30:0f:4c:e6: 43:c9:55:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0 Mzc0NzIwOEUwHhcNMjUxMjA1MDAzNDUzWhcNMjUxMjEyMDAzNDUzWjAYMRYwFAYD VQQDEw02OTMyMjhhZS1lMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0mwL/EKp5O4sTwEwAQXzvm2IxHkgDo+42txzv5gvUmmVl1+pHeqI80WEVco +R3acc3DXB2yQ/iZXF2L5fjY28q4RKDjb0cgqOD9xgQ/dMVNkwmrgybO++fRxFtu vPSX3a5Csv96m9s42EPZqfI7zYJ7CkcbJ9iIRgD5ZxO0oxP+KCcqs9b+D52r4tVM D9aiVdks12TJdGy3z3uJ6KFZhted4uUaA31rlqaAuKgMXluzP0ttiue1Z8lfe52w SXB/xa4tJV6KT0uVs95I0Sn3fErnb4hn1if6tw3YVwvav/uuCAoLHIIN5OsK+vjw /rvIkM6+v1AWBvqr0WHyieXW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCCC8GI dFvjZLiC0zF6EIzVNcqTMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeUVOxDXcwdeD5Tfj9hqbRPdi33cmI6f/mIsePk5YvVmbhmx5mp97f SmcgYlFbSpVciDQRlv4K714yAlnW0aETV/27PgLY8xbhCu1eJMR5xH3/S6KpBg2O cQwXzKfZDBtRlDgFav6R9ni98kw+eChF/D2DOl7eEUuvQbfVY7lC1Xfqk/+QpbSL HHwAu7mWzy7Lotm2feb9kfv5HrT9ED4ULDJ73G1kB6Hia+A3zH2KfJOizEpa42nk 5GZFbhPq+JpOjOVW4YJLwMxlS3IWYZ6QG+F7eM3tREnVFDJGtJxH71rC1/Y6zz1P q5OiA7wHtr9MYowcF+sb7DAPTOZDyVVs -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:34 2025 by rpki-client