This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: FOKGvcafZbFKVgkNEdNchcZpo1SbVqSWKCHfWXQ+C24= Subject key identifier: C3:7F:AC:4F:3F:03:03:2A:3E:E3:EE:51:0A:A5:E6:5D:94:34:87:C8 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0989 Signing time: Sat 06 Dec 2025 19:14:33 +0000 Manifest this update: Sat 06 Dec 2025 19:14:32 +0000 Manifest next update: Sat 13 Dec 2025 19:14:32 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: d7dKHs3dTVsmeUu52sGYkKnbmuhFoOwBQ4T0SvTuzLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Dec 6 19:14:32 2025 GMT Not After : Dec 13 19:14:32 2025 GMT Subject: CN=69348099-6058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:f2:17:4f:e0:e3:c5:e0:a3:30:15:d5:c5: a4:cd:96:7f:b9:60:7f:ae:c9:53:15:dc:6d:13:ab: 1d:7d:b0:88:63:f2:6e:32:e6:a1:6f:a9:6d:e3:87: de:ac:1d:44:ea:eb:14:c5:53:0a:87:c4:88:14:64: 2a:51:4e:03:6f:32:36:cb:ad:00:f4:71:3e:50:63: 57:fb:57:30:6f:2a:8f:88:39:7c:f2:b5:0d:95:fb: a8:54:44:f2:69:4c:f7:1d:f9:5f:7b:47:9c:02:48: 58:66:5a:fa:22:d2:aa:97:18:9d:70:ee:2d:07:0e: 46:32:4c:63:78:6c:e2:ef:32:b9:31:20:d0:28:ed: 11:f7:64:f2:b4:55:67:db:dd:4f:70:d7:08:89:3a: 06:7f:dd:c0:81:15:b3:42:2c:e8:df:de:f2:2b:08: 56:bc:0b:2a:2d:50:85:61:a5:d7:e0:c5:9f:57:f9: f4:e8:7c:70:56:41:f9:62:21:64:ee:66:b1:ba:7f: d7:e9:ad:44:d9:c5:78:04:5c:88:ae:19:99:f6:80: 4b:cd:66:1b:68:94:a2:66:65:f5:1b:e3:c9:9f:f1: e6:90:37:fc:b4:d9:9a:05:38:fe:1b:0c:1f:f2:19: 89:f1:4a:90:06:30:76:c8:72:ad:81:fd:87:7e:39: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:AC:4F:3F:03:03:2A:3E:E3:EE:51:0A:A5:E6:5D:94:34:87:C8 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e3:ad:41:39:70:37:75:33:c0:99:4b:ee:c8:1e:c3:55:d1: 40:dc:43:12:91:24:b2:a4:5e:08:78:46:0a:8b:2b:b3:a9:47: b8:d0:ef:34:95:22:20:5f:23:4d:ba:4e:39:46:ba:48:5e:cc: fb:ed:c8:2a:45:ef:00:c1:da:98:6f:e6:1f:bc:8a:0d:5f:11: 8c:9c:54:93:e6:03:b0:1a:80:80:99:2b:77:b5:f8:59:ca:ac: 35:89:96:93:d6:39:ee:c7:c3:81:93:4e:07:3b:a4:a1:4d:30: 46:47:d8:11:52:07:61:91:bf:9c:7c:88:b0:de:13:97:09:0b: af:41:0e:00:46:8a:6d:7f:bb:a6:c2:03:16:5a:0a:bd:d7:6c: d9:af:99:a3:4d:7b:54:56:64:43:a0:28:74:b9:c4:f3:80:31: b8:a7:7e:be:d3:9a:82:c5:15:65:03:c8:4f:2b:28:18:ae:77: 98:94:94:4f:a1:24:77:cb:a5:8b:d8:6f:47:5e:84:19:0b:ce: ac:d9:01:ad:27:e1:5f:9c:6e:ca:09:38:a9:bd:9d:af:41:f7: 6e:8e:22:25:9a:d2:ef:eb:d4:dd:b0:96:39:bc:d9:8c:19:46: 6c:4c:be:e1:58:65:2e:54:39:43:c0:07:35:4f:9a:5e:c9:a2: 50:eb:83:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUxMjA2MTkxNDMyWhcNMjUxMjEzMTkxNDMyWjAYMRYwFAYD VQQDEw02OTM0ODA5OS02MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypXyF0/g48XgozAV1cWkzZZ/uWB/rslTFdxtE6sdfbCIY/JuMuahb6lt44fe rB1E6usUxVMKh8SIFGQqUU4DbzI2y60A9HE+UGNX+1cwbyqPiDl88rUNlfuoVETy aUz3Hflfe0ecAkhYZlr6ItKqlxidcO4tBw5GMkxjeGzi7zK5MSDQKO0R92TytFVn 291PcNcIiToGf93AgRWzQizo397yKwhWvAsqLVCFYaXX4MWfV/n06HxwVkH5YiFk 7maxun/X6a1E2cV4BFyIrhmZ9oBLzWYbaJSiZmX1G+PJn/HmkDf8tNmaBTj+Gwwf 8hmJ8UqQBjB2yHKtgf2Hfjma9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMN/rE8/ AwMqPuPuUQql5l2UNIfIMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS461BOXA3dTPAmUvuyB7DVdFA3EMSkSSypF4IeEYKiyuzqUe40O80 lSIgXyNNuk45RrpIXsz77cgqRe8AwdqYb+YfvIoNXxGMnFST5gOwGoCAmSt3tfhZ yqw1iZaT1jnux8OBk04HO6ShTTBGR9gRUgdhkb+cfIiw3hOXCQuvQQ4ARoptf7um wgMWWgq912zZr5mjTXtUVmRDoCh0ucTzgDG4p36+05qCxRVlA8hPKygYrneYlJRP oSR3y6WL2G9HXoQZC86s2QGtJ+FfnG7KCTipvZ2vQfdujiIlmtLv69TdsJY5vNmM GUZsTL7hWGUuVDlDwAc1T5peyaJQ64Pl -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:32 2025 by rpki-client