This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: sH+vAS+sE6ZD+nSWu6PRUmOqjNvPN0XlnbcILYwMyIs= Subject key identifier: A6:80:3C:AD:BA:88:00:49:A4:82:4C:A4:78:7D:EA:48:E1:69:93:E2 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: F7 Signing time: Fri 05 Dec 2025 03:15:22 +0000 Manifest this update: Fri 05 Dec 2025 03:15:21 +0000 Manifest next update: Fri 12 Dec 2025 03:15:21 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: dBwQftFUAW2n+k49g2+AUXJuqwQ3a7laKOFWrlqWiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Dec 5 03:15:21 2025 GMT Not After : Dec 12 03:15:21 2025 GMT Subject: CN=69324e4a-07c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:9c:79:1b:62:94:e5:53:46:18:9d:59:0e: 17:9a:41:0c:6d:b4:8b:09:c3:4b:64:2d:c1:fd:09: 0d:70:24:7a:d2:09:3f:8f:d2:c7:50:bf:d2:32:21: 91:a3:9f:5c:19:88:9c:9c:24:43:f5:8f:78:ae:a4: 18:98:8a:d2:69:17:cb:19:02:ac:e9:86:8e:2e:55: 82:cd:03:39:16:81:58:4a:b3:5a:3d:d4:6a:2e:a3: a4:62:e9:fe:aa:b3:f3:e9:04:e8:94:28:ac:3d:7e: 29:33:31:90:7b:ae:18:cb:ca:db:25:b8:1d:16:35: 95:88:05:10:d5:49:5b:80:41:b0:25:80:ce:88:14: 49:cb:b8:21:d7:f0:4f:32:2b:a4:49:9a:8e:f7:6b: ba:06:24:09:95:3d:23:38:d7:d7:54:54:15:dd:90: e6:8a:13:be:04:a8:7c:10:be:92:f2:7c:46:b1:57: 1c:b2:44:14:2c:18:14:a2:07:06:c6:5e:c9:48:31: 71:cb:9d:a5:dc:28:ba:38:ab:5f:38:be:e9:50:b9: d5:25:14:0e:f3:0d:e6:65:96:94:80:ea:77:e2:bc: 4f:97:ab:54:29:b0:1b:b6:8e:e1:cc:0c:19:95:aa: fe:24:6a:9c:4e:a6:ae:1e:a8:7c:93:6f:08:ca:13: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:80:3C:AD:BA:88:00:49:A4:82:4C:A4:78:7D:EA:48:E1:69:93:E2 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:21:30:98:2f:3b:4f:02:13:88:5b:f1:3b:31:86:b7:84:31: cc:e8:e3:d8:8c:ff:68:7d:67:d3:7f:cb:1d:d8:fe:6e:3d:e3: d6:69:57:41:83:c9:2f:1b:3e:b2:84:c5:68:bc:36:99:60:2c: 28:5d:24:f3:9f:2a:d5:74:03:94:d5:71:51:16:ca:54:98:c8: 4d:74:9c:1c:63:93:ce:39:d8:49:4c:cf:82:90:a6:68:88:bf: 8c:19:36:10:68:b4:7a:b9:5c:fb:bc:61:b7:27:d3:c2:b6:de: 39:f1:68:31:15:3f:89:a4:7e:15:08:3f:0a:f6:23:16:fb:9b: ec:d8:a2:7a:6c:7a:5a:79:0f:e9:d9:72:1e:20:1b:31:81:a0: 96:04:f6:d9:e2:c8:46:30:30:85:c9:f4:92:c0:e6:5f:fc:63: 9a:b2:e9:b4:d3:3a:d1:73:03:47:08:41:f3:bc:7b:7f:31:b8: 80:8f:a7:a1:92:1d:67:a6:3a:08:1c:5e:3d:a4:a2:94:1e:89: 78:62:44:1c:0f:d5:2d:2e:c4:84:c5:f5:43:41:ae:9e:e6:99: 2c:5b:e0:f0:8b:6f:2c:5d:af:01:79:bd:f3:bd:96:9c:d7:3b: 13:d9:ff:e2:84:cd:9a:8e:e3:45:df:4c:ed:fb:4e:63:07:15: 4c:e6:66:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUxMjA1MDMxNTIxWhcNMjUxMjEyMDMxNTIxWjAYMRYwFAYD VQQDEw02OTMyNGU0YS0wN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qOceRtilOVTRhidWQ4XmkEMbbSLCcNLZC3B/QkNcCR60gk/j9LHUL/SMiGR o59cGYicnCRD9Y94rqQYmIrSaRfLGQKs6YaOLlWCzQM5FoFYSrNaPdRqLqOkYun+ qrPz6QTolCisPX4pMzGQe64Yy8rbJbgdFjWViAUQ1UlbgEGwJYDOiBRJy7gh1/BP MiukSZqO92u6BiQJlT0jONfXVFQV3ZDmihO+BKh8EL6S8nxGsVccskQULBgUogcG xl7JSDFxy52l3Ci6OKtfOL7pULnVJRQO8w3mZZaUgOp34rxPl6tUKbAbto7hzAwZ lar+JGqcTqauHqh8k28IyhP90QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaAPK26 iABJpIJMpHh96kjhaZPiMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsITCYLztPAhOIW/E7MYa3hDHM6OPYjP9ofWfTf8sd2P5uPePWaVdB g8kvGz6yhMVovDaZYCwoXSTznyrVdAOU1XFRFspUmMhNdJwcY5POOdhJTM+CkKZo iL+MGTYQaLR6uVz7vGG3J9PCtt458WgxFT+JpH4VCD8K9iMW+5vs2KJ6bHpaeQ/p 2XIeIBsxgaCWBPbZ4shGMDCFyfSSwOZf/GOasum00zrRcwNHCEHzvHt/MbiAj6eh kh1npjoIHF49pKKUHol4YkQcD9UtLsSExfVDQa6e5pksW+Dwi28sXa8Beb3zvZac 1zsT2f/ihM2ajuNF30zt+05jBxVM5mY1 -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:11 2025 by rpki-client