This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: WDsXSiF+gosFnxV03iiknm5SiqQesufTVybGVTNxfZE= Subject key identifier: 1F:C0:39:8F:FA:24:05:C7:84:5C:B2:57:32:4E:2F:5B:89:FB:38:C7 Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: B4 Signing time: Fri 05 Dec 2025 04:11:23 +0000 Manifest this update: Fri 05 Dec 2025 04:11:23 +0000 Manifest next update: Fri 12 Dec 2025 04:11:23 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: +v38i9IMmH2iHLR1ZUv9iyx9UedcqJ8PuJFvDFMTkA0=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Dec 5 04:11:23 2025 GMT Not After : Dec 12 04:11:23 2025 GMT Subject: CN=69325b6b-c832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:bc:a7:c9:f4:e5:23:f8:2f:9c:44:02:dc: 44:21:5c:c3:36:9c:3d:ad:03:82:79:c6:25:33:9f: f7:a6:45:68:e4:2d:d1:a9:d1:9b:1e:54:ea:03:be: 6f:64:6b:26:7e:68:7f:2e:cf:38:05:87:2e:1e:88: 62:4d:ea:a2:17:d0:b5:37:b4:c6:e3:74:b6:67:d8: 83:3b:4f:dc:d1:9b:61:38:27:d9:b0:0d:c0:ac:17: e4:8a:1b:6c:8a:b9:c4:7e:90:78:dd:6d:42:7b:74: ec:37:96:a7:a9:81:07:7a:60:dc:e7:66:0f:fe:73: 14:28:b1:57:87:e7:40:55:1e:6e:c1:b4:e2:02:48: 90:47:37:a7:24:7d:77:1c:45:38:56:1f:72:5a:28: 32:88:f7:9e:41:ab:6f:8d:76:a5:44:15:67:27:02: 7f:38:62:21:86:dd:24:65:0f:7b:c2:b5:da:60:7e: ef:36:5b:cb:49:73:75:bc:9a:37:58:de:c7:54:50: f5:a4:b6:20:25:1f:d5:65:6a:0a:e3:c4:01:e2:cf: cd:29:53:ea:a4:74:7c:21:fb:73:97:da:d2:0e:f2: ce:59:c8:f0:a4:7b:39:8f:10:5a:26:9d:58:92:be: 86:5d:66:39:a7:b9:c8:12:3c:75:65:1e:84:8e:23: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:39:8F:FA:24:05:C7:84:5C:B2:57:32:4E:2F:5B:89:FB:38:C7 X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:fb:5c:fb:90:40:04:fe:99:fd:23:ef:8d:cc:be:da:5e:e5: 56:46:99:ec:58:6f:d7:29:cf:52:cd:27:b9:6a:1d:96:29:d2: 43:4b:36:f2:f2:db:87:d7:a2:38:3d:46:6b:0e:80:a6:08:2b: f1:79:1c:58:09:13:d7:60:cf:6a:d7:dd:c1:fc:04:fd:50:e9: 29:72:58:e2:79:42:09:1a:d4:b0:07:45:8f:e1:38:7b:9e:4d: d3:50:3e:c5:f0:8b:31:ed:c3:7d:c4:c3:f5:b6:2a:46:ff:ba: 4c:b0:57:2f:e6:db:46:a0:e2:1d:02:58:e4:0f:8b:39:7b:af: 0d:96:10:51:fd:96:aa:40:67:fa:68:6d:7b:b0:00:94:25:22: 68:ad:59:5b:72:cc:46:cd:35:5d:1c:9f:ae:16:4a:c5:c9:b9: 38:15:71:94:26:e9:f2:1a:db:83:7d:1a:48:c2:bb:4e:6b:fd: 8c:dc:95:0d:db:38:64:4f:d8:ce:d2:8e:17:9a:96:c5:05:f5: a7:af:cf:9b:fe:05:d7:2d:a1:3b:92:42:eb:21:51:9b:72:80: dc:55:f4:09:01:11:e2:20:92:71:19:7e:9b:5c:37:f8:6d:ab: 58:49:cc:6f:b7:0d:59:dd:26:97:9b:67:34:8e:31:08:28:e5: df:33:43:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3 MzhBMDQyNDEwHhcNMjUxMjA1MDQxMTIzWhcNMjUxMjEyMDQxMTIzWjAYMRYwFAYD VQQDEw02OTMyNWI2Yi1jODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzm8p8n05SP4L5xEAtxEIVzDNpw9rQOCecYlM5/3pkVo5C3RqdGbHlTqA75v ZGsmfmh/Ls84BYcuHohiTeqiF9C1N7TG43S2Z9iDO0/c0ZthOCfZsA3ArBfkihts irnEfpB43W1Ce3TsN5anqYEHemDc52YP/nMUKLFXh+dAVR5uwbTiAkiQRzenJH13 HEU4Vh9yWigyiPeeQatvjXalRBVnJwJ/OGIhht0kZQ97wrXaYH7vNlvLSXN1vJo3 WN7HVFD1pLYgJR/VZWoK48QB4s/NKVPqpHR8Iftzl9rSDvLOWcjwpHs5jxBaJp1Y kr6GXWY5p7nIEjx1ZR6EjiMtpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/AOY/6 JAXHhFyyVzJOL1uJ+zjHMB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR Y0d4c0tKckNhdzF6aWdRa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD+1z7kEAE/pn9I++NzL7aXuVWRpnsWG/XKc9SzSe5ah2WKdJDSzby 8tuH16I4PUZrDoCmCCvxeRxYCRPXYM9q193B/AT9UOkpcljieUIJGtSwB0WP4Th7 nk3TUD7F8Isx7cN9xMP1tipG/7pMsFcv5ttGoOIdAljkD4s5e68NlhBR/ZaqQGf6 aG17sACUJSJorVlbcsxGzTVdHJ+uFkrFybk4FXGUJunyGtuDfRpIwrtOa/2M3JUN 2zhkT9jO0o4XmpbFBfWnr8+b/gXXLaE7kkLrIVGbcoDcVfQJARHiIJJxGX6bXDf4 batYScxvtw1Z3SaXm2c0jjEIKOXfM0N0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:16 2025 by rpki-client