This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft File: TI8rREM6tGSnFK2NOajxbkxQCnw.mft (raw, json) Hash identifier: Ahkxik+K7bX9uh75K68mSLw4zuWZIExINbxLy2OdO9U= Subject key identifier: 69:23:56:3F:B6:D1:2F:1C:5E:77:ED:84:53:90:C9:A8:A8:C3:A3:77 Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C Certificate issuer: /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft Manifest number: 08 Signing time: Wed 03 Dec 2025 06:12:18 +0000 Manifest this update: Wed 03 Dec 2025 06:12:18 +0000 Manifest next update: Wed 10 Dec 2025 06:12:18 +0000 Files and hashes: 1: TI8rREM6tGSnFK2NOajxbkxQCnw.crl (hash: 0QJ1s20zCoZaosE4QkZrC/C/AbZUvO3yJYYBJwDLDP8=) 2: 210EF1A0C5CC11F085CF3A5AC4F9AE02.roa (hash: n2I65WMHRY3OpnelCNqCwrruskMIvFUB5RDroh1qiqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Validity Not Before: Dec 3 06:12:18 2025 GMT Not After : Dec 10 06:12:18 2025 GMT Subject: CN=692fd4c2-b99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:b3:0e:b6:e4:c5:13:74:d6:7d:26:1b:7a: 34:f1:02:11:f9:1e:4d:0f:85:12:fa:a5:ee:21:ed: 45:60:42:d6:b0:ce:4f:09:17:a0:0c:2d:a9:43:16: 44:e5:a1:dd:9a:39:cb:cd:db:b8:ce:6e:69:9f:a2: b3:1a:84:b6:9f:b7:70:e7:f6:94:16:3b:77:af:b4: 99:90:bb:f4:76:cb:47:a3:e0:3a:a1:39:68:29:15: c9:9c:6a:57:60:c9:25:fd:ea:53:30:1b:4b:07:09: e3:de:7a:c1:82:d0:bd:61:4f:43:e2:21:56:50:ec: 8e:d9:75:e4:30:5d:5c:83:87:45:49:36:10:bc:1d: d5:8b:18:ad:ec:5e:b2:ea:a3:78:7c:d5:d6:5f:78: f0:5a:68:52:7c:bb:b6:26:30:53:08:de:4a:5d:ec: 2c:48:63:e6:a0:a0:e0:49:a2:8f:5b:1a:3b:68:b2: 9a:de:f5:3e:7b:9f:f0:d8:52:ad:ea:2d:47:57:c9: 55:a1:44:af:31:7c:64:f0:a7:9d:27:3c:84:83:de: 1d:d7:29:78:72:8d:fc:da:70:72:9a:29:ff:4b:a8: 38:72:d8:ec:14:f4:1f:40:bf:88:f4:8c:fd:d3:8f: 32:fb:07:4e:15:04:8c:0f:77:6e:b4:be:c0:37:c8: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:23:56:3F:B6:D1:2F:1C:5E:77:ED:84:53:90:C9:A8:A8:C3:A3:77 X509v3 Authority Key Identifier: keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:42:db:9d:13:16:ae:5f:5b:a4:2e:21:b4:77:fb:64:a2:5a: 5a:53:44:31:16:85:f4:ae:a4:5e:c1:a8:c9:0d:89:96:f6:cf: e5:2d:ef:74:76:8d:49:5e:6e:94:e2:6c:fc:eb:3b:17:32:41: 93:30:2e:61:56:f2:fd:94:9c:8a:ca:a9:df:bf:c8:92:72:35: ae:35:14:fa:f3:6f:b8:13:7e:5a:21:ef:f4:dd:76:e8:a0:53: dc:ce:64:b1:87:64:9e:41:a2:7e:fb:6d:f5:0f:07:65:bc:32: d1:7b:09:12:cd:8e:4f:97:0d:2d:45:9f:7b:2c:ad:ac:b3:ed: 63:3b:ea:36:e7:a0:65:af:55:d3:3b:ea:b4:71:d6:a8:f3:0f: 2a:f2:06:11:c4:0e:fb:64:40:92:b7:09:05:17:2a:b9:52:f5: 68:9a:e1:3c:aa:6c:0b:13:c1:08:cf:50:8b:c1:34:ae:be:8c: 6b:f5:3a:e6:aa:35:62:47:33:6c:5f:0f:71:61:1e:d7:62:03: 65:1d:64:d7:08:9c:bc:14:06:8c:8e:d2:6c:61:4d:63:d6:13: 62:0b:b7:76:2a:49:0c:eb:86:a3:6b:85:2f:0e:8a:16:f2:a4: 15:ca:35:cd:b9:94:7b:c0:ec:ab:ec:d4:4b:8c:29:9f:42:ef: 39:99:ce:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjI5NzExMC8GA1UEBRMoNEM4RjJCNDQ0MzNBQjQ2NEE3MTRBRDhEMzlBOEYxNkU0 QzUwMEE3QzAeFw0yNTEyMDMwNjEyMThaFw0yNTEyMTAwNjEyMThaMBgxFjAUBgNV BAMTDTY5MmZkNGMyLWI5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq97MOtuTFE3TWfSYbejTxAhH5Hk0PhRL6pe4h7UVgQtawzk8JF6AMLalDFkTl od2aOcvN27jObmmforMahLaft3Dn9pQWO3evtJmQu/R2y0ej4DqhOWgpFcmcaldg ySX96lMwG0sHCePeesGC0L1hT0PiIVZQ7I7ZdeQwXVyDh0VJNhC8HdWLGK3sXrLq o3h81dZfePBaaFJ8u7YmMFMI3kpd7CxIY+agoOBJoo9bGjtospre9T57n/DYUq3q LUdXyVWhRK8xfGTwp50nPISD3h3XKXhyjfzacHKaKf9LqDhy2OwU9B9Av4j0jP3T jzL7B04VBIwPd260vsA3yNt9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaSNWP7bR Lxxed+2EU5DJqKjDo3cwHwYDVR0jBBgwFoAUTI8rREM6tGSnFK2NOajxbkxQCnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzZBNThBRDhFQzVD QjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdTbkZLMk5PYWp4Ymt4UUNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEk4clJFTTZ0R1NuRksyTk9hanhia3hRQ253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 Mjk3LzZBNThBRDhFQzVDQjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdT bkZLMk5PYWp4Ymt4UUNudy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABVC250TFq5fW6QuIbR3+2SiWlpTRDEWhfSupF7BqMkNiZb2z+Ut73R2 jUlebpTibPzrOxcyQZMwLmFW8v2UnIrKqd+/yJJyNa41FPrzb7gTfloh7/Tdduig U9zOZLGHZJ5Bon77bfUPB2W8MtF7CRLNjk+XDS1Fn3ssrayz7WM76jbnoGWvVdM7 6rRx1qjzDyryBhHEDvtkQJK3CQUXKrlS9Wia4TyqbAsTwQjPUIvBNK6+jGv1Ouaq NWJHM2xfD3FhHtdiA2UdZNcInLwUBoyO0mxhTWPWE2ILt3YqSQzrhqNrhS8Oihby pBXKNc25lHvA7Kvs1EuMKZ9C7zmZzk0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:19 2025 by rpki-client