This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: AVnI1Fv7foa6BtQZCpSe9imrmQJp8u9SkUsgIYhObmQ= Subject key identifier: 2F:70:D8:FF:54:F4:4C:62:AF:FF:23:A1:31:66:16:2E:83:EB:A4:4D Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0E52 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0E44 Signing time: Thu 18 Dec 2025 15:33:34 +0000 Manifest this update: Thu 18 Dec 2025 15:33:34 +0000 Manifest next update: Thu 25 Dec 2025 15:33:34 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: ToABRDQGlsMUw0fifba0Zg+w/6GloXJDTcO9qNBWR84=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: Our/a/Q4riPqnap8Bs+iL6aJ7lQ+NPuqmEKv5JVFqNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3666 (0xe52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: Dec 18 15:33:34 2025 GMT Not After : Dec 25 15:33:34 2025 GMT Subject: CN=69441ece-28bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:25:2b:2c:9a:0e:a4:ff:5c:1e:6a:f2:d9: ea:98:4f:62:19:a0:e0:77:76:7d:82:e5:7b:7c:91: f6:a4:89:bf:5c:5a:e2:03:61:0c:6f:02:43:bd:c0: 9f:09:38:04:7a:b4:f5:64:4e:c7:1c:21:b1:ad:44: b4:0b:61:13:6a:5c:5b:12:ca:b7:cb:e1:32:ea:c5: b2:d1:eb:17:9c:52:6f:6c:c6:72:b0:a3:5a:9d:a7: b8:3a:e9:e3:d7:dd:bf:25:96:66:8a:8f:7a:fa:ba: c5:6e:70:9c:03:dc:ab:2c:15:3e:4f:a7:25:e0:d5: 82:ac:3e:36:f0:d8:f2:7e:3a:c3:a8:7b:6d:1b:e6: 83:33:81:dd:aa:7c:32:53:c8:67:1e:26:de:6e:43: b3:2d:74:15:06:13:4c:15:db:a8:d6:bc:e5:3a:77: 50:67:04:7e:4a:45:5c:d3:12:12:9f:bb:4c:86:ee: c9:3c:8b:b2:c9:c7:3a:48:63:fc:e4:e5:5f:71:8f: 5b:cc:60:5c:e3:fd:b9:77:a7:6c:6e:41:01:ce:97: 67:a7:ce:d2:35:06:40:9f:5a:9e:db:77:88:31:15: 89:3a:3e:d8:cf:6e:96:a9:da:bf:47:43:0a:a9:07: 04:01:41:b4:2c:c7:fe:b6:82:5c:a2:45:83:78:31: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:70:D8:FF:54:F4:4C:62:AF:FF:23:A1:31:66:16:2E:83:EB:A4:4D X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:66:a3:a8:51:4e:07:29:75:c6:c9:0b:ad:e2:5a:6d:ab:ee: d3:11:bf:a6:a9:d0:8c:44:40:f9:3a:8e:17:ef:9f:ec:14:b6: ba:9b:9c:2b:f6:e6:ef:3e:82:4c:69:29:33:58:11:79:ed:7a: ac:6b:a0:90:ee:8d:4a:53:c1:62:fb:bc:2f:0f:7f:7f:c3:e4: fe:e2:04:b8:3f:0e:4b:0c:95:9b:6d:2f:5b:92:ca:0c:ee:fe: 4b:dc:da:4b:79:61:77:47:89:b9:64:ec:63:3a:95:ef:e9:3f: 22:69:df:a2:0b:05:89:85:d9:68:e4:25:2a:2e:8e:22:00:a5: 3a:1d:fb:71:f1:e4:c6:4b:38:66:77:bc:be:70:89:8a:6b:63: d9:3f:6e:72:b5:f8:35:1f:d7:b8:84:a0:46:96:7d:a2:58:a2: 91:17:1c:ce:ca:15:32:0b:8e:e9:f2:fe:9f:3c:39:d6:fb:c0: 79:47:4a:67:a2:69:92:1a:7d:ae:a1:a5:29:fd:50:9d:b7:59: bf:cd:f9:29:a6:06:59:0f:cf:b7:09:83:a7:38:ed:3b:91:5f: d1:03:e4:ad:59:d2:24:5d:ee:f1:9e:6d:cb:8c:3d:58:fb:ae: 7e:9f:e5:06:da:51:f5:b0:6c:85:5f:ef:5b:6a:ce:a1:13:cc: 19:a4:f9:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjUxMjE4MTUzMzM0WhcNMjUxMjI1MTUzMzM0WjAYMRYwFAYD VQQDDA02OTQ0MWVjZS0yOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtwlKyyaDqT/XB5q8tnqmE9iGaDgd3Z9guV7fJH2pIm/XFriA2EMbwJDvcCf CTgEerT1ZE7HHCGxrUS0C2ETalxbEsq3y+Ey6sWy0esXnFJvbMZysKNanae4Ounj 192/JZZmio96+rrFbnCcA9yrLBU+T6cl4NWCrD428NjyfjrDqHttG+aDM4Hdqnwy U8hnHibebkOzLXQVBhNMFduo1rzlOndQZwR+SkVc0xISn7tMhu7JPIuyycc6SGP8 5OVfcY9bzGBc4/25d6dsbkEBzpdnp87SNQZAn1qe23eIMRWJOj7Yz26Wqdq/R0MK qQcEAUG0LMf+toJcokWDeDGnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9w2P9U 9Exir/8joTFmFi6D66RNMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEZqOoUU4HKXXGyQut4lptq+7TEb+mqdCMRED5Oo4X75/sFLa6m5wr 9ubvPoJMaSkzWBF57Xqsa6CQ7o1KU8Fi+7wvD39/w+T+4gS4Pw5LDJWbbS9bksoM 7v5L3NpLeWF3R4m5ZOxjOpXv6T8iad+iCwWJhdlo5CUqLo4iAKU6Hftx8eTGSzhm d7y+cImKa2PZP25ytfg1H9e4hKBGln2iWKKRFxzOyhUyC47p8v6fPDnW+8B5R0pn ommSGn2uoaUp/VCdt1m/zfkppgZZD8+3CYOnOO07kV/RA+StWdIkXe7xnm3LjD1Y +65+n+UG2lH1sGyFX+9bas6hE8wZpPkF -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:43 2025 by rpki-client