This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json) Hash identifier: 4xqEfFqvH/ux4kl0oyBHGrNnHJb0fm9AnmnIDkGJgI4= Subject key identifier: 04:3B:D0:01:FF:CA:A2:7E:8A:35:F3:B3:49:62:0E:1F:33:AA:BD:FE Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft Manifest number: 34E5 Signing time: Thu 04 Dec 2025 14:44:37 +0000 Manifest this update: Thu 04 Dec 2025 14:44:37 +0000 Manifest next update: Thu 11 Dec 2025 14:44:37 +0000 Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: 5hB0Tpc8yH3+/WNo8MHURg97lg925pZAVKTI1gQTGnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Validity Not Before: Dec 4 14:44:37 2025 GMT Not After : Dec 11 14:44:37 2025 GMT Subject: CN=69319e55-6f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ab:e9:62:6a:52:e7:54:21:e6:09:64:62:cf: 3d:59:16:de:64:ef:d3:2e:92:62:7f:1f:9e:01:da: 51:60:8f:37:9e:ad:25:81:36:b9:4f:93:70:61:5a: 23:ba:12:11:42:00:85:03:d8:bc:80:ca:ce:35:fa: 56:56:75:e4:95:93:07:89:2d:a6:25:70:30:0e:64: bb:b7:c3:47:e1:b1:3b:f0:10:f8:3b:3c:99:a2:ea: b3:c7:49:64:b4:a4:83:5d:a7:a3:67:61:f4:e3:b1: c2:aa:16:1c:39:2c:d6:5b:4b:8a:90:de:69:b7:9e: cb:5d:86:93:5a:80:b2:80:5f:fd:ca:76:04:3a:a6: b5:f6:46:24:b1:98:75:36:be:96:66:43:d7:9a:22: b1:73:41:59:da:dd:5d:d7:70:f4:5c:df:0a:d3:2f: 1b:7f:da:ba:2a:8c:7f:63:77:14:de:65:79:ff:d1: 0a:0a:ad:df:96:21:53:94:d3:5e:db:51:17:a4:fa: 83:a4:56:77:47:80:3d:80:66:01:c9:cb:4b:82:5f: cd:03:b4:d6:5d:2a:59:9a:25:29:0e:9e:c9:43:f8: 48:b1:1b:9d:65:09:e7:e0:80:67:6a:58:88:05:18: a6:6d:51:95:2f:5b:02:e9:21:fb:f4:35:eb:70:40: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:D0:01:FF:CA:A2:7E:8A:35:F3:B3:49:62:0E:1F:33:AA:BD:FE X509v3 Authority Key Identifier: keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:cb:21:90:d5:1c:1a:1c:53:8c:fc:85:99:87:2a:cc:5e: 5b:66:27:f2:28:00:1a:66:b8:88:e2:ae:48:5e:4f:04:ea:ae: ee:3f:57:bb:38:92:ba:f2:d4:63:63:c6:16:46:cb:c8:76:78: fb:a6:eb:03:79:03:82:9e:c7:6e:c4:c1:29:00:fd:65:02:e4: 6d:dc:77:de:a9:86:d5:a7:b0:c0:27:49:95:78:3f:04:b0:1f: 88:7f:cd:4a:92:12:09:7f:03:6e:69:9a:9e:fd:9c:e8:d3:fb: b0:b8:5a:68:e6:90:d6:5d:22:54:73:b3:01:96:8e:39:8f:6b: 70:c0:15:4a:67:bc:4c:3d:b6:34:5a:fc:b4:a5:87:11:22:d6: cd:6e:4c:5a:fb:b4:25:a6:dc:86:4a:c4:5d:65:5c:51:93:19: 34:f0:9d:45:e6:bb:69:f5:82:b9:9d:78:03:70:ea:72:00:75: 1c:b7:9e:a3:b6:52:75:38:bc:d2:3d:32:26:d8:56:35:0b:f2: 93:ce:00:d4:7e:09:2d:e6:df:5c:8b:28:af:f4:ba:38:1e:37: 02:79:1e:7a:ea:d3:e3:15:ea:15:dc:d3:fd:87:c2:c4:a1:b6: b4:49:0b:92:c9:87:75:cf:53:77:9b:44:b1:35:29:8d:11:6e: 50:21:dc:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2 QTY2MjQyRjEwHhcNMjUxMjA0MTQ0NDM3WhcNMjUxMjExMTQ0NDM3WjAYMRYwFAYD VQQDEw02OTMxOWU1NS02ZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqavpYmpS51Qh5glkYs89WRbeZO/TLpJifx+eAdpRYI83nq0lgTa5T5NwYVoj uhIRQgCFA9i8gMrONfpWVnXklZMHiS2mJXAwDmS7t8NH4bE78BD4OzyZouqzx0lk tKSDXaejZ2H047HCqhYcOSzWW0uKkN5pt57LXYaTWoCygF/9ynYEOqa19kYksZh1 Nr6WZkPXmiKxc0FZ2t1d13D0XN8K0y8bf9q6Kox/Y3cU3mV5/9EKCq3fliFTlNNe 21EXpPqDpFZ3R4A9gGYByctLgl/NA7TWXSpZmiUpDp7JQ/hIsRudZQnn4IBnaliI BRimbVGVL1sC6SH79DXrcEB59QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQ70AH/ yqJ+ijXzs0liDh8zqr3+MB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy WkNfbTltek5vb1pxWmlRdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXhcshkNUcGhxTjPyFmYcqzF5bZifyKAAaZriI4q5IXk8E6q7uP1e7 OJK68tRjY8YWRsvIdnj7pusDeQOCnsduxMEpAP1lAuRt3HfeqYbVp7DAJ0mVeD8E sB+If81KkhIJfwNuaZqe/Zzo0/uwuFpo5pDWXSJUc7MBlo45j2twwBVKZ7xMPbY0 Wvy0pYcRItbNbkxa+7QlptyGSsRdZVxRkxk08J1F5rtp9YK5nXgDcOpyAHUct56j tlJ1OLzSPTIm2FY1C/KTzgDUfgkt5t9ciyiv9Lo4HjcCeR566tPjFeoV3NP9h8LE oba0SQuSyYd1z1N3m0SxNSmNEW5QIdwI -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:23 2025 by rpki-client