This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft File: 8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json) Hash identifier: gtuKWmaj04ZH+CaofulMmjTfvqv4qD34y+65GziZpfg= Subject key identifier: E9:7C:B0:CD:C2:85:DE:A4:5C:25:A9:AB:09:5C:EB:6C:CC:23:B7:12 Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 Certificate issuer: /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft Manifest number: 017A Signing time: Fri 19 Dec 2025 02:58:44 +0000 Manifest this update: Fri 19 Dec 2025 02:58:43 +0000 Manifest next update: Fri 26 Dec 2025 02:58:43 +0000 Files and hashes: 1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: yRqYhDVs8DMorIU52p5n5rKe5RrsM4IJLY46P7quz6E=) 2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: IbmxLUVq5zJbzh/NtGUH6yfYyyueMk0MrjAMiNwdH/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Validity Not Before: Dec 19 02:58:43 2025 GMT Not After : Dec 26 02:58:43 2025 GMT Subject: CN=6944bf64-8f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:4c:62:70:47:d8:79:de:8c:a9:33:8d:14: e2:87:be:cc:f9:08:f6:8c:e4:f2:03:c3:67:75:fe: 4c:fa:ad:bf:64:bf:d0:81:ff:9a:c3:92:0a:7b:af: 74:5b:6d:82:fa:3b:da:33:12:d9:78:f8:6f:05:b3: 79:58:53:5f:1e:7f:10:d1:6f:18:a2:12:2c:81:84: 82:e3:60:64:fa:e5:c8:49:dc:a3:3d:f3:88:1f:cb: d8:ad:4c:b1:d5:87:0b:e7:3e:f1:b0:78:3c:65:69: da:f7:a3:7a:92:a9:55:3b:f8:c1:84:8a:5b:d5:4a: 29:2b:7f:a8:f9:a5:3d:b0:62:2d:48:f6:65:24:58: 47:2d:9b:36:c9:7f:03:44:71:73:9d:21:bb:56:50: c1:29:66:7e:2b:35:53:26:68:d5:01:ef:42:95:2e: b4:cf:bf:ee:b9:de:7a:50:12:0e:b4:c6:d9:c3:d3: 48:09:04:de:cd:67:ae:28:d9:b6:02:39:55:79:97: 45:7d:f7:d8:e7:2c:4f:02:44:36:2f:e4:3d:c4:0c: 54:6f:bb:d5:b6:aa:51:5f:67:b6:bd:e3:ea:5c:0a: db:c4:68:86:72:d8:34:ab:34:da:56:37:09:11:c7: 11:a8:c3:41:e3:9e:80:51:61:29:86:4c:c3:b6:91: bf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7C:B0:CD:C2:85:DE:A4:5C:25:A9:AB:09:5C:EB:6C:CC:23:B7:12 X509v3 Authority Key Identifier: keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:57:23:2e:97:cf:e7:07:b8:a1:52:bb:77:99:60:a4:d2:16: d9:c6:d9:5d:50:9d:02:f8:88:32:73:6d:a7:ec:e0:ad:e3:8a: 51:8b:56:b2:62:3a:ff:fe:d4:7f:c6:fe:3b:57:2f:66:9f:f3: 24:e2:b1:91:a8:d4:3e:8c:80:00:74:26:6d:b7:88:f0:52:da: 6e:c0:6d:51:d2:de:65:b3:da:ff:a7:b8:0c:fd:59:1f:a1:88: 6c:2d:82:04:52:6b:59:d5:51:76:fe:77:c7:83:f3:62:43:09: 5a:55:6f:ab:ab:55:53:5e:ed:32:7b:65:8b:87:6c:c3:e2:39: 2d:92:44:53:72:30:4c:b8:2e:e9:fa:be:81:0f:71:77:9d:7d: 44:d1:7e:da:4b:a0:27:df:c2:18:9e:22:1f:96:b3:e5:eb:13: fe:13:94:61:a1:5c:7c:f8:87:c8:ea:1c:f2:25:fa:65:31:59: a0:eb:f7:fe:39:44:8c:ee:92:28:ec:fc:0c:f1:ef:06:a5:c5: e2:8f:a3:77:66:3c:c4:63:64:f7:e7:6a:21:ec:4c:17:dc:86: ef:4a:14:bd:85:61:0f:e4:0f:5d:6f:7f:bd:47:59:e7:d6:c8: 00:d7:5b:d2:b4:13:ab:5b:f2:fd:ff:33:26:32:ff:ed:6c:d4: ec:6b:1b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky MkU2MzE5ODQwHhcNMjUxMjE5MDI1ODQzWhcNMjUxMjI2MDI1ODQzWjAYMRYwFAYD VQQDDA02OTQ0YmY2NC04ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KZMYnBH2HnejKkzjRTih77M+Qj2jOTyA8Nndf5M+q2/ZL/Qgf+aw5IKe690 W22C+jvaMxLZePhvBbN5WFNfHn8Q0W8YohIsgYSC42Bk+uXISdyjPfOIH8vYrUyx 1YcL5z7xsHg8ZWna96N6kqlVO/jBhIpb1UopK3+o+aU9sGItSPZlJFhHLZs2yX8D RHFznSG7VlDBKWZ+KzVTJmjVAe9ClS60z7/uud56UBIOtMbZw9NICQTezWeuKNm2 AjlVeZdFfffY5yxPAkQ2L+Q9xAxUb7vVtqpRX2e2vePqXArbxGiGctg0qzTaVjcJ EccRqMNB456AUWEphkzDtpG//wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl8sM3C hd6kXCWpqwlc62zMI7cSMB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCOS9GQjA3NEY0NjlDQzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVY bFVkanotaVJadWtpNWpHWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxVyMul8/nB7ihUrt3mWCk0hbZxtldUJ0C+Igyc22n7OCt44pRi1ay Yjr//tR/xv47Vy9mn/Mk4rGRqNQ+jIAAdCZtt4jwUtpuwG1R0t5ls9r/p7gM/Vkf oYhsLYIEUmtZ1VF2/nfHg/NiQwlaVW+rq1VTXu0ye2WLh2zD4jktkkRTcjBMuC7p +r6BD3F3nX1E0X7aS6An38IYniIflrPl6xP+E5RhoVx8+IfI6hzyJfplMVmg6/f+ OUSM7pIo7PwM8e8GpcXij6N3ZjzEY2T352oh7EwX3IbvShS9hWEP5A9db3+9R1nn 1sgA11vStBOrW/L9/zMmMv/tbNTsaxt1 -----END CERTIFICATE-----Generated at Sat Dec 20 13:19:21 2025 by rpki-client