This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: IZt6sWzVioStyFOI8Jr2ih32wlgiNOa9Yyd/IC0La3k= Subject key identifier: F5:B1:B1:D9:92:05:2F:7E:0A:A6:A2:6C:C6:9C:91:0D:A4:C4:C2:8B Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 09A2 Signing time: Sat 20 Dec 2025 19:30:03 +0000 Manifest this update: Sat 20 Dec 2025 19:30:02 +0000 Manifest next update: Sat 27 Dec 2025 19:30:02 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: JovimWVF/pIggnFsDeq/o/Cqp8yCSFtS2f3RqoQZbSk=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Dec 20 19:30:02 2025 GMT Not After : Dec 27 19:30:02 2025 GMT Subject: CN=6946f93b-e47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:cb:f4:1e:6d:73:8a:44:44:ee:07:fe:db: 37:4e:11:32:ae:a0:68:56:90:f7:a3:29:9d:b1:b1: 33:a2:47:97:83:2e:8f:e2:67:1b:0a:ff:a7:b0:76: 36:60:2f:f6:69:7a:29:e1:50:d1:06:d9:b0:1d:e1: 42:4e:fd:53:29:95:32:9b:f8:fe:f0:1d:5c:19:a7: 83:bf:0d:56:fb:f7:f6:62:af:1b:6d:5a:28:66:92: ef:d8:5d:19:64:d0:81:05:03:50:75:3a:84:6b:eb: 28:63:90:f1:db:b2:ff:4a:66:42:a7:2c:f1:ec:06: d6:bd:20:45:d1:49:f0:8a:a1:30:df:f8:f6:a9:cc: 14:0b:45:d6:24:79:24:0e:15:fd:ac:16:49:06:6a: dc:89:c3:d0:b6:c9:41:33:46:f4:1c:f9:ed:de:db: e2:b9:7e:d5:aa:2e:07:77:17:14:d5:a5:8f:0f:03: 56:b3:36:0c:ea:c0:bb:3d:cd:d7:72:55:bc:fe:fd: 03:f2:58:47:fe:46:08:04:39:d1:0f:75:aa:19:6f: 24:da:34:c7:eb:fe:d0:10:63:dc:13:a3:59:3b:5e: 52:c4:7c:f7:61:a2:a7:97:58:9b:fd:21:09:10:b0: 43:05:f5:2c:5b:c5:6a:3f:2f:0e:40:67:79:f0:98: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B1:B1:D9:92:05:2F:7E:0A:A6:A2:6C:C6:9C:91:0D:A4:C4:C2:8B X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:6c:24:a8:b4:79:a2:b5:7c:e6:f9:dd:07:42:a0:ab:df: 2b:8d:73:96:46:75:bd:c1:f2:3a:3b:5c:eb:21:05:fb:ed:b7: 57:50:d3:c5:4a:bf:64:0b:b3:e1:82:37:a8:d3:66:91:c4:f4: f1:be:22:f5:2b:77:d7:19:0f:22:06:ff:d9:6a:93:f6:8a:bb: a6:12:b1:74:e0:ea:eb:04:61:32:dc:17:96:15:de:4c:f6:f9: b5:cf:d8:d1:d9:bf:fa:c3:bf:03:00:10:14:b9:c7:03:1b:fd: 43:af:20:9e:f7:20:43:62:29:78:67:d7:e2:56:ad:ff:83:24: 38:9e:32:b7:48:2b:9c:42:77:1f:b3:7d:07:b8:36:d3:ee:cd: 8f:7a:25:78:28:03:d9:20:a3:f7:80:f1:b4:7b:1f:21:88:3f: 53:88:8a:51:c3:c1:37:58:af:a9:25:25:e5:91:21:03:6c:2f: b3:b2:fd:55:dc:d0:fe:e9:7b:c7:33:5b:e8:39:84:bd:37:1a: 12:33:c7:5b:4c:f2:a1:24:9c:88:4b:8f:a2:81:cc:ca:35:a0: 9a:21:7f:5c:15:8c:1d:e3:73:a7:bf:18:fc:bf:40:47:fb:19: f8:8a:87:7b:f2:96:f1:bb:4e:ea:cc:e9:3f:57:d1:d6:27:50: d5:e9:cb:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUxMjIwMTkzMDAyWhcNMjUxMjI3MTkzMDAyWjAYMRYwFAYD VQQDDA02OTQ2ZjkzYi1lNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwfL9B5tc4pERO4H/ts3ThEyrqBoVpD3oymdsbEzokeXgy6P4mcbCv+nsHY2 YC/2aXop4VDRBtmwHeFCTv1TKZUym/j+8B1cGaeDvw1W+/f2Yq8bbVooZpLv2F0Z ZNCBBQNQdTqEa+soY5Dx27L/SmZCpyzx7AbWvSBF0UnwiqEw3/j2qcwUC0XWJHkk DhX9rBZJBmrcicPQtslBM0b0HPnt3tviuX7Vqi4HdxcU1aWPDwNWszYM6sC7Pc3X clW8/v0D8lhH/kYIBDnRD3WqGW8k2jTH6/7QEGPcE6NZO15SxHz3YaKnl1ib/SEJ ELBDBfUsW8VqPy8OQGd58JgmNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWxsdmS BS9+CqaibMackQ2kxMKLMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqh2wkqLR5orV85vndB0Kgq98rjXOWRnW9wfI6O1zrIQX77bdXUNPF Sr9kC7Phgjeo02aRxPTxviL1K3fXGQ8iBv/ZapP2irumErF04OrrBGEy3BeWFd5M 9vm1z9jR2b/6w78DABAUuccDG/1DryCe9yBDYil4Z9fiVq3/gyQ4njK3SCucQncf s30HuDbT7s2PeiV4KAPZIKP3gPG0ex8hiD9TiIpRw8E3WK+pJSXlkSEDbC+zsv1V 3ND+6XvHM1voOYS9NxoSM8dbTPKhJJyIS4+igczKNaCaIX9cFYwd43Onvxj8v0BH +xn4iod78pbxu07qzOk/V9HWJ1DV6cvG -----END CERTIFICATE-----Generated at Sun Dec 21 05:00:36 2025 by rpki-client