This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: 5rIiB8mYC78hM/wjJVcSIigQIVQwpEwQZFB7Y+cbcuI= Subject key identifier: DF:11:44:43:BD:BD:4C:A2:12:E0:E1:EC:E5:A3:99:69:45:08:88:4A Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02EC Signing time: Sat 06 Dec 2025 23:57:51 +0000 Manifest this update: Sat 06 Dec 2025 23:57:51 +0000 Manifest next update: Sat 13 Dec 2025 23:57:51 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: YjSxF8tyjWb7xYGjetc1x7atrvBXuza53jLMERC99ec=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Dec 6 23:57:51 2025 GMT Not After : Dec 13 23:57:51 2025 GMT Subject: CN=6934c2ff-2739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6d:14:a7:93:26:b2:ad:df:77:4d:08:5c:db: ce:a8:4d:44:1d:a2:8f:fb:40:be:db:57:e0:be:d0: 5a:a2:b7:c2:e3:78:82:7e:9d:58:66:8b:33:4f:28: e8:a5:c2:fc:ab:7f:ce:7a:ad:fe:da:e9:9a:c1:bf: 38:db:dd:54:63:d6:81:7d:2d:d2:cd:45:e2:45:e8: 73:7f:30:88:96:37:a4:45:7d:99:e9:64:6f:d7:2a: 5d:d5:a6:59:30:2a:70:a5:97:16:fc:77:da:73:22: 8e:de:04:27:a4:ea:89:2d:96:a0:01:d9:63:a1:a2: d9:71:85:35:b2:2f:7f:e0:84:09:1c:61:2d:e7:21: d6:d6:4c:b1:14:bc:7e:39:b5:d7:e3:0b:2e:b8:39: d1:da:3b:d1:cd:04:4f:28:30:81:6e:a6:39:63:fb: f7:cc:60:14:e3:84:93:83:6e:6f:55:8e:2b:0a:5e: e1:0e:df:cd:ac:9b:ed:de:1a:a4:d6:5a:64:6b:f6: c4:f2:de:2e:14:b6:41:aa:bb:79:c2:14:96:b4:b5: 0c:a3:08:3d:f7:8f:fa:07:6a:d8:52:fb:7e:fd:58: db:07:f8:9e:40:ff:d7:20:da:bd:c3:86:b2:13:09: 9b:ac:0d:72:52:cc:8c:ab:c9:32:fa:45:8a:22:4b: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:44:43:BD:BD:4C:A2:12:E0:E1:EC:E5:A3:99:69:45:08:88:4A X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:70:b4:02:fb:10:ca:d7:36:fd:4f:65:90:07:3e:aa:ff:c9: 44:3b:ab:f7:58:53:e0:db:45:38:93:b5:da:48:29:8e:49:fb: 5d:51:56:52:6d:b2:26:78:df:08:fb:2c:ca:10:cc:76:a0:ab: b0:d4:f4:53:d9:65:4b:cd:72:91:b7:af:d9:bb:8b:d3:e7:97: a8:5c:36:d0:6f:1c:c6:d8:2e:70:d1:70:8d:df:f8:77:2c:6b: 23:d6:2d:3b:ab:e0:5a:a6:62:ef:92:ce:39:17:96:6d:34:fa: 78:31:91:0b:68:cd:b9:47:34:4d:aa:55:85:3d:08:c1:d2:b2: 9d:02:a0:81:ba:b8:b6:8d:d4:48:94:0a:e5:fb:ca:ac:5f:32: a0:4b:65:f7:dc:d6:4c:e0:96:7d:7d:ed:e1:5b:30:08:2b:64: 31:59:82:1e:f9:7f:e0:50:a0:d5:da:ea:58:48:c0:19:ab:1d: b8:cb:96:c4:ae:2b:23:89:af:0f:b3:3e:b8:b1:e0:6f:87:87: 60:22:e0:15:3a:15:cd:fa:ab:dd:05:71:95:fd:b7:42:a6:60: 7b:f3:26:c8:67:5c:bb:93:15:f3:8e:38:6a:2c:fa:39:00:24: 92:00:d1:b4:7d:16:0d:2c:3a:e9:31:f4:74:38:fc:ff:78:7f: 9f:7d:96:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUxMjA2MjM1NzUxWhcNMjUxMjEzMjM1NzUxWjAYMRYwFAYD VQQDEw02OTM0YzJmZi0yNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7W0Up5Mmsq3fd00IXNvOqE1EHaKP+0C+21fgvtBaorfC43iCfp1YZoszTyjo pcL8q3/Oeq3+2umawb84291UY9aBfS3SzUXiRehzfzCIljekRX2Z6WRv1ypd1aZZ MCpwpZcW/HfacyKO3gQnpOqJLZagAdljoaLZcYU1si9/4IQJHGEt5yHW1kyxFLx+ ObXX4wsuuDnR2jvRzQRPKDCBbqY5Y/v3zGAU44STg25vVY4rCl7hDt/NrJvt3hqk 1lpka/bE8t4uFLZBqrt5whSWtLUMowg994/6B2rYUvt+/VjbB/ieQP/XINq9w4ay EwmbrA1yUsyMq8ky+kWKIktDdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8RREO9 vUyiEuDh7OWjmWlFCIhKMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAcLQC+xDK1zb9T2WQBz6q/8lEO6v3WFPg20U4k7XaSCmOSftdUVZS bbImeN8I+yzKEMx2oKuw1PRT2WVLzXKRt6/Zu4vT55eoXDbQbxzG2C5w0XCN3/h3 LGsj1i07q+BapmLvks45F5ZtNPp4MZELaM25RzRNqlWFPQjB0rKdAqCBuri2jdRI lArl+8qsXzKgS2X33NZM4JZ9fe3hWzAIK2QxWYIe+X/gUKDV2upYSMAZqx24y5bE risjia8Psz64seBvh4dgIuAVOhXN+qvdBXGV/bdCpmB78ybIZ1y7kxXzjjhqLPo5 ACSSANG0fRYNLDrpMfR0OPz/eH+ffZZu -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:06 2025 by rpki-client