This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: ytIW94zgaIG2QqNoa3McALWLlKbKiI/1/4kNJQz67wA= Subject key identifier: AA:ED:27:B0:8D:98:2B:66:77:5C:4E:9C:A6:50:1A:1D:41:9F:14:DC Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 02D2 Signing time: Thu 04 Dec 2025 23:44:25 +0000 Manifest this update: Thu 04 Dec 2025 23:44:25 +0000 Manifest next update: Thu 11 Dec 2025 23:44:25 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: 2O6sAbvvUNylPq1rIqxXmm7fipv9nvPR0yRLmuioSY0=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Dec 4 23:44:25 2025 GMT Not After : Dec 11 23:44:25 2025 GMT Subject: CN=69321cd9-e604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:37:db:8f:f5:56:22:e4:13:d7:c4:37:22: dc:23:87:6f:84:0d:99:3a:79:df:9b:77:86:14:e2: 3f:c5:bf:3b:07:b2:52:c2:3c:3f:54:fe:71:f8:77: a4:11:68:da:20:d2:bc:38:ce:98:fb:48:1f:f9:17: 6f:a9:f6:a6:16:a9:89:b1:81:13:7f:28:04:1c:0e: 70:ee:3c:19:50:6f:f8:84:00:f8:7e:05:fd:4e:7b: 39:4b:82:eb:99:28:fa:a4:66:03:a0:89:43:6e:1c: 3e:cc:49:50:18:10:5e:16:de:c2:00:b5:3f:01:61: f2:fc:b5:86:3a:a3:9e:6f:c0:2f:23:81:64:12:ca: 8e:9b:66:5b:75:4a:f6:94:04:f4:66:bd:d0:95:05: 65:6d:6c:1b:e9:24:53:cf:9a:90:19:58:6b:6e:19: 91:7f:10:8b:14:4c:d6:20:d8:aa:bb:d1:10:ff:28: d0:0c:d7:83:b7:59:79:03:54:13:21:10:3b:95:86: 8a:da:19:50:46:fb:b9:6d:48:77:0b:a1:77:b1:f3: e0:0c:4c:de:3e:e6:5c:3a:11:4b:8e:92:5d:cb:90: f0:aa:6d:c0:0e:c0:73:12:a0:93:1e:03:c3:9f:9d: fa:e9:24:73:05:cc:e3:24:27:45:2e:5e:6c:ee:15: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:27:B0:8D:98:2B:66:77:5C:4E:9C:A6:50:1A:1D:41:9F:14:DC X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:34:7e:fc:f6:88:61:3d:df:79:08:ec:68:a1:e3:e0:16:af: 76:91:ac:45:50:7f:62:0f:50:f6:88:c3:28:33:c5:db:07:e0: a3:10:3c:ed:5d:f6:ad:80:c3:f3:74:c9:5a:52:e5:a7:17:5d: 96:6c:71:d0:2b:c7:8e:cf:be:98:8e:82:1b:ba:6a:0b:ef:7a: 1e:51:f0:2e:e2:b0:a8:87:2f:ea:cc:58:e1:03:e8:ef:33:04: d2:7e:23:7b:c2:d8:6c:2e:62:3f:29:57:12:71:1b:4f:ec:c2: 4e:56:79:b0:2d:f1:6f:fe:86:64:5c:bc:3a:65:58:c2:23:10: 72:5c:ab:ba:bb:cd:a1:8b:ce:ce:9a:09:67:c0:ef:03:bd:ff: 9c:51:5e:bc:88:39:cb:40:17:f5:d5:2d:2a:68:66:bf:34:c7: 8f:4c:d3:05:5a:de:0f:68:84:3a:45:77:1f:13:63:eb:81:b0: 25:e0:e1:a7:f5:e2:37:d2:63:38:5c:7c:c0:13:19:87:fb:45: 04:22:8c:85:c7:de:50:6b:e8:e5:5e:39:57:8b:fa:f8:b7:14: 69:34:b9:9f:8c:66:e7:de:54:8d:71:8a:0d:de:84:90:9a:c7: 00:6b:bf:79:39:60:1b:f8:98:a9:92:4b:d2:cc:9c:81:f4:44: 6f:86:70:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUxMjA0MjM0NDI1WhcNMjUxMjExMjM0NDI1WjAYMRYwFAYD VQQDEw02OTMyMWNkOS1lNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGs324/1ViLkE9fENyLcI4dvhA2ZOnnfm3eGFOI/xb87B7JSwjw/VP5x+Hek EWjaINK8OM6Y+0gf+RdvqfamFqmJsYETfygEHA5w7jwZUG/4hAD4fgX9Tns5S4Lr mSj6pGYDoIlDbhw+zElQGBBeFt7CALU/AWHy/LWGOqOeb8AvI4FkEsqOm2ZbdUr2 lAT0Zr3QlQVlbWwb6SRTz5qQGVhrbhmRfxCLFEzWINiqu9EQ/yjQDNeDt1l5A1QT IRA7lYaK2hlQRvu5bUh3C6F3sfPgDEzePuZcOhFLjpJdy5Dwqm3ADsBzEqCTHgPD n5366SRzBczjJCdFLl5s7hVvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrtJ7CN mCtmd1xOnKZQGh1BnxTcMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBINH789ohhPd95COxooePgFq92kaxFUH9iD1D2iMMoM8XbB+CjEDzt XfatgMPzdMlaUuWnF12WbHHQK8eOz76YjoIbumoL73oeUfAu4rCohy/qzFjhA+jv MwTSfiN7wthsLmI/KVcScRtP7MJOVnmwLfFv/oZkXLw6ZVjCIxByXKu6u82hi87O mglnwO8Dvf+cUV68iDnLQBf11S0qaGa/NMePTNMFWt4PaIQ6RXcfE2PrgbAl4OGn 9eI30mM4XHzAExmH+0UEIoyFx95Qa+jlXjlXi/r4txRpNLmfjGbn3lSNcYoN3oSQ mscAa795OWAb+JipkkvSzJyB9ERvhnA0 -----END CERTIFICATE-----Generated at Sat Dec 6 17:09:04 2025 by rpki-client