This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: MPfDJtPA3fRfkG/z3tV1ZdksAKswTyi+A0i0TmT38Zg= Subject key identifier: 43:93:39:47:2E:CF:6D:72:9B:6B:F2:07:5B:FD:11:A5:FD:1E:07:96 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 0112 Signing time: Tue 23 Dec 2025 03:54:48 +0000 Manifest this update: Tue 23 Dec 2025 03:54:48 +0000 Manifest next update: Tue 30 Dec 2025 03:54:48 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: YhsU5u93nFkGlZRcIAC6XxABQGITmhAvk2+ufpxkqGY=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: rNoN9qQu8LQ3m6mpRD2sIdAYAMWn+KDz+Z0MyLwHYpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Dec 23 03:54:48 2025 GMT Not After : Dec 30 03:54:48 2025 GMT Subject: CN=694a1288-b441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:bf:bd:04:21:f3:3a:98:f2:f9:be:f9:bd: 6c:a8:4e:fb:28:01:c3:20:5d:cb:6d:32:61:b6:e9: bf:c9:81:4c:0a:24:22:4f:60:f7:83:f7:ef:98:6b: d5:bd:4a:37:b8:13:73:a0:13:f0:d5:c2:9e:cd:fb: c9:87:6b:ec:e7:32:e5:d3:03:d7:74:32:71:ea:53: 30:8e:de:82:42:7a:05:68:d5:c1:d8:d9:47:14:18: 56:fb:5e:27:58:76:75:93:eb:43:55:c8:a2:37:da: 9e:ab:10:94:0d:a6:db:a5:9f:14:63:92:c0:ed:ad: 81:f8:01:eb:e8:5a:63:90:7b:0e:99:ff:b0:e1:23: d3:cb:5f:fd:d2:60:f3:f0:a2:7a:e0:c6:75:80:2b: 26:fe:3b:c9:f5:14:07:91:bd:d6:fc:0f:bb:b6:96: a0:55:b1:c7:59:15:1a:a8:3e:2e:45:27:ba:74:6d: a1:49:2d:15:3f:53:ce:e7:a4:75:91:c4:33:c3:66: ba:0b:ad:39:35:f2:99:d3:d9:74:c6:4e:41:5b:fd: 5f:d3:b2:14:5f:aa:26:54:2a:ed:c5:9b:1c:01:5a: 9f:b6:bd:ea:f2:1c:7f:ee:48:09:86:12:09:88:35: be:ac:fc:fb:31:e1:4e:4d:67:d8:3c:d7:ce:82:b3: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:93:39:47:2E:CF:6D:72:9B:6B:F2:07:5B:FD:11:A5:FD:1E:07:96 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ba:f7:78:9a:c9:9d:41:cc:94:92:4a:34:4b:a7:28:8d:c7: 81:2d:78:ed:b2:37:f0:a8:b9:02:72:9d:f0:13:64:76:19:b5: 36:5d:4e:04:6f:4b:c1:1f:3c:54:e9:04:e2:c4:32:8b:49:b3: ec:b4:44:a1:54:8b:8a:a1:6b:2a:d1:47:cd:f2:f3:c9:33:19: 5e:42:e9:27:e4:01:30:79:33:3d:37:19:4a:05:d4:5c:e2:cc: b0:cb:24:c4:da:d3:bf:b4:bb:1e:a7:8c:a3:48:f4:85:45:74: 52:ff:c3:e5:0c:d0:d3:27:c1:a7:e6:86:fc:8c:a4:d2:7c:d1: 6a:da:37:e0:7d:ee:41:95:04:5d:c4:ff:96:1f:84:ac:04:54: ac:86:63:cd:c2:99:bc:f4:1f:2d:5d:26:47:88:df:ca:e6:ec: 5c:5f:21:35:c9:d2:07:47:f6:cb:48:63:5b:9c:ec:e3:1a:da: ea:41:39:d1:a9:64:ea:ca:ff:24:73:1c:9a:79:9b:af:d1:9e: ae:d1:a1:cf:71:e8:e9:04:fe:a3:7e:44:be:89:c4:e3:49:7c: 07:f0:1b:3f:5c:db:f2:40:61:8f:19:cb:36:fe:4e:48:34:06: 3c:33:d5:71:a3:ec:f5:d8:ca:1e:83:1c:eb:61:54:c8:17:29: 7e:cc:7c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUxMjIzMDM1NDQ4WhcNMjUxMjMwMDM1NDQ4WjAYMRYwFAYD VQQDDA02OTRhMTI4OC1iNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fK/vQQh8zqY8vm++b1sqE77KAHDIF3LbTJhtum/yYFMCiQiT2D3g/fvmGvV vUo3uBNzoBPw1cKezfvJh2vs5zLl0wPXdDJx6lMwjt6CQnoFaNXB2NlHFBhW+14n WHZ1k+tDVciiN9qeqxCUDabbpZ8UY5LA7a2B+AHr6FpjkHsOmf+w4SPTy1/90mDz 8KJ64MZ1gCsm/jvJ9RQHkb3W/A+7tpagVbHHWRUaqD4uRSe6dG2hSS0VP1PO56R1 kcQzw2a6C605NfKZ09l0xk5BW/1f07IUX6omVCrtxZscAVqftr3q8hx/7kgJhhIJ iDW+rPz7MeFOTWfYPNfOgrODSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOTOUcu z21ym2vyB1v9EaX9HgeWMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUuvd4msmdQcyUkko0S6cojceBLXjtsjfwqLkCcp3wE2R2GbU2XU4E b0vBHzxU6QTixDKLSbPstEShVIuKoWsq0UfN8vPJMxleQukn5AEweTM9NxlKBdRc 4sywyyTE2tO/tLsep4yjSPSFRXRS/8PlDNDTJ8Gn5ob8jKTSfNFq2jfgfe5BlQRd xP+WH4SsBFSshmPNwpm89B8tXSZHiN/K5uxcXyE1ydIHR/bLSGNbnOzjGtrqQTnR qWTqyv8kcxyaeZuv0Z6u0aHPcejpBP6jfkS+icTjSXwH8Bs/XNvyQGGPGcs2/k5I NAY8M9Vxo+z12MoegxzrYVTIFyl+zHxn -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:46 2025 by rpki-client