This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: +3a+w/ZsbFuAMCA1hDcqmeS2iwB0E8W0Yd5ROvgicSg= Subject key identifier: EE:DE:1B:75:53:75:2C:2D:9B:DE:95:30:73:20:8A:CA:2C:D2:11:20 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0CAF Signing time: Mon 22 Dec 2025 17:55:07 +0000 Manifest this update: Mon 22 Dec 2025 17:55:07 +0000 Manifest next update: Mon 29 Dec 2025 17:55:07 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: /S6UHbdQrODFpV8VzGYcZuwjqOn5zw7WANnPuq2J8/w=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Dec 22 17:55:07 2025 GMT Not After : Dec 29 17:55:07 2025 GMT Subject: CN=694985fb-b894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:d9:23:ee:40:71:42:f6:33:99:e6:f7:7b: 3c:aa:2b:33:45:2f:0c:92:03:44:95:72:32:a9:20: 18:88:9d:15:0b:b3:fe:07:13:8d:1b:da:5d:7d:22: 8b:b2:f9:67:79:33:2c:a8:b6:07:7e:cd:24:1a:98: e9:0f:4b:28:85:64:9b:86:59:ae:72:5f:b0:8f:7e: fb:ae:11:5e:55:26:2c:f1:fc:56:fa:90:48:29:62: 7f:d2:4a:89:29:dc:c6:0c:f0:6b:05:ec:f5:b1:00: 4a:be:ed:41:da:cc:c5:34:b0:9a:24:be:24:f6:be: e8:55:58:49:a9:01:01:d9:c9:ec:b5:db:25:ba:d9: 76:a2:73:dd:ed:2f:4c:47:01:df:0b:04:d1:5a:05: a9:c0:f5:c3:aa:53:2c:91:15:8e:f6:06:f1:07:21: 45:13:3c:cb:4a:06:0d:3f:72:80:54:c4:68:91:dc: de:ef:bd:85:b6:9f:b0:75:e4:e0:45:4a:4b:7b:7a: 24:e2:45:21:b8:53:84:32:a0:fa:e6:0a:ba:48:e7: ed:ed:36:1e:75:e9:03:27:6e:7b:17:b5:ce:4c:b1: 46:90:ee:3e:6b:2e:c3:0a:6d:b0:8b:4c:92:12:8c: 76:53:87:41:f5:55:c8:48:94:54:fd:9e:9a:1e:70: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DE:1B:75:53:75:2C:2D:9B:DE:95:30:73:20:8A:CA:2C:D2:11:20 X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0b:51:75:88:7f:22:87:af:ec:a7:3e:c6:b5:15:7b:8e:2b: 76:01:cf:7b:4d:b7:34:2b:11:e0:43:80:e9:0c:2a:28:82:b1: 43:eb:b0:18:a3:fb:a9:9c:b0:78:42:1a:24:26:7d:88:60:e4: 2d:9a:78:66:47:37:57:c3:26:62:2f:d2:54:ec:92:29:9f:f5: ac:65:0e:15:3c:9b:33:f6:8a:0a:c2:58:06:e0:db:f8:be:c2: d7:bf:f5:e7:81:6d:25:97:c7:f0:6f:49:4f:c3:74:29:9d:9c: 84:25:ed:32:8c:57:37:2b:54:43:ef:c8:ed:d8:4d:cc:d5:3e: be:1e:b3:c8:15:af:b0:93:e8:47:7f:52:21:a2:a5:3f:2c:b4: a7:70:0f:43:af:57:03:40:8d:dd:a6:0c:6d:ff:e3:87:48:b5: 38:e9:f1:4f:ef:fe:e0:f6:ab:07:e6:d5:2b:0f:7a:1f:6b:c5: 3a:d7:ec:44:78:fe:2d:32:76:b4:79:c2:7c:dc:ff:a7:84:a0: 01:e5:3b:74:41:83:0a:1a:98:4a:e6:1f:ad:40:e6:6f:2a:73: 03:1a:c9:e7:d5:81:bd:97:bb:ac:0a:f9:ea:07:45:9a:63:9b: 19:2b:dc:a9:37:62:ca:dd:f8:05:59:91:ad:82:a8:04:99:66: 3b:7e:a4:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUxMjIyMTc1NTA3WhcNMjUxMjI5MTc1NTA3WjAYMRYwFAYD VQQDDA02OTQ5ODVmYi1iODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMzZI+5AcUL2M5nm93s8qiszRS8MkgNElXIyqSAYiJ0VC7P+BxONG9pdfSKL svlneTMsqLYHfs0kGpjpD0sohWSbhlmucl+wj377rhFeVSYs8fxW+pBIKWJ/0kqJ KdzGDPBrBez1sQBKvu1B2szFNLCaJL4k9r7oVVhJqQEB2cnstdslutl2onPd7S9M RwHfCwTRWgWpwPXDqlMskRWO9gbxByFFEzzLSgYNP3KAVMRokdze772Ftp+wdeTg RUpLe3ok4kUhuFOEMqD65gq6SOft7TYedekDJ257F7XOTLFGkO4+ay7DCm2wi0yS Eox2U4dB9VXISJRU/Z6aHnDnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7eG3VT dSwtm96VMHMgisos0hEgMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZC1F1iH8ih6/spz7GtRV7jit2Ac97Tbc0KxHgQ4DpDCoogrFD67AY o/upnLB4QhokJn2IYOQtmnhmRzdXwyZiL9JU7JIpn/WsZQ4VPJsz9ooKwlgG4Nv4 vsLXv/XngW0ll8fwb0lPw3QpnZyEJe0yjFc3K1RD78jt2E3M1T6+HrPIFa+wk+hH f1IhoqU/LLSncA9Dr1cDQI3dpgxt/+OHSLU46fFP7/7g9qsH5tUrD3ofa8U61+xE eP4tMna0ecJ83P+nhKAB5Tt0QYMKGphK5h+tQOZvKnMDGsnn1YG9l7usCvnqB0Wa Y5sZK9ypN2LK3fgFWZGtgqgEmWY7fqRU -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:04 2025 by rpki-client