This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: 32gLX/ouGOe25aDjlrpi51pFd/ASMZqjNcaFXmLZwZk= Subject key identifier: 11:B7:B2:32:AC:7E:01:55:87:C1:7D:25:DC:AC:4E:05:A0:B7:31:E9 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 02A3 Signing time: Mon 08 Dec 2025 23:51:07 +0000 Manifest this update: Mon 08 Dec 2025 23:51:06 +0000 Manifest next update: Mon 15 Dec 2025 23:51:06 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: 82Eklk62Mrcbc+sr8uTkyDwJ9wXRcp9jCprDWNmDbPM=) 2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: 6sLu3BEdx9/7hIQ0xnLxfwDmYeLLmzHWwmPjiKZ/kzE=) 3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=) 5: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: V8FSzYBLLsXQQnxTAHA6zEryNBNGiFUPQmH0Cpz+QYg=) 6: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 23:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Dec 8 23:51:06 2025 GMT Not After : Dec 15 23:51:06 2025 GMT Subject: CN=6937646a-21e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dc:8c:eb:1f:0d:ef:e6:10:87:24:6d:b1:a2: 20:37:83:67:ab:05:e9:1f:1a:00:64:b3:36:28:25: da:8c:3e:d0:be:dd:25:50:c9:c2:3a:0b:3e:9e:f5: 17:8c:cc:cb:1c:32:32:f7:74:9d:cb:31:78:dc:19: 70:fc:85:51:ba:04:46:1a:5e:cc:e5:d1:f3:0c:e5: 80:9b:09:ee:9a:d3:bf:09:fe:05:93:64:12:6b:71: 39:25:ea:de:21:42:42:ff:94:4e:b7:ff:1c:32:a9: bd:de:8f:93:a4:88:82:e6:7d:bb:28:7c:f4:d4:a9: c2:2f:f5:d8:75:62:ca:64:53:17:0c:6a:d6:a8:7e: b7:cf:09:d1:25:28:e1:43:b5:6f:0b:a9:59:c9:ca: fc:08:81:59:5b:2c:0c:a4:2b:41:fc:c7:25:2a:86: bc:21:98:1f:4d:58:1d:b0:25:a0:10:f7:b0:0f:d8: e4:6f:db:1e:5b:d1:05:25:d2:66:fd:65:45:60:2c: e4:89:24:83:e6:4b:32:92:64:f2:73:f5:7b:95:fa: 12:dc:73:90:65:9a:01:f1:b4:72:96:e5:23:cf:a7: b6:e1:2e:05:f5:f7:76:b0:a2:a5:11:68:4d:5b:8b: fa:90:80:59:aa:ae:b2:47:80:40:24:d8:20:62:f5: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B7:B2:32:AC:7E:01:55:87:C1:7D:25:DC:AC:4E:05:A0:B7:31:E9 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:67:c6:ff:52:40:d4:8f:73:0a:f3:cc:57:07:43:6f:34:da: 3b:bd:68:95:e4:9b:b3:41:a0:df:13:cf:15:32:1c:55:84:80: 31:96:9b:39:0b:e6:54:42:67:5e:f6:cd:73:a1:15:07:f1:90: 28:d6:e7:d3:1c:5e:6d:cc:ba:d6:fe:74:97:27:60:25:81:d9: 4e:6a:4d:c3:8f:f8:78:c6:b3:3c:19:13:22:85:e3:6e:27:e9: 34:01:8b:78:45:46:eb:25:6d:2e:59:53:a0:e2:2f:4b:a3:f4: 1c:d9:e9:c7:3a:68:70:35:8f:3c:70:3b:83:71:19:4e:d4:b8: a1:32:3f:cb:ea:91:2a:e9:29:93:ba:35:e4:4c:b1:e4:80:b2: da:d7:dc:a9:68:ca:3e:73:a6:b4:da:5f:8a:50:d3:d6:6f:e6: 2e:a1:12:f6:4e:68:4a:fd:4c:3c:48:f5:dc:5d:6e:83:19:82: 52:d1:eb:15:cc:d6:fa:d8:99:7e:3f:bb:a9:b4:94:93:11:4f: 03:6a:43:37:1b:54:7b:6f:ec:8f:24:f0:f1:8f:fe:62:d2:01: 92:e6:f8:ea:5f:46:df:04:a9:7b:2f:10:d8:aa:9a:cf:5f:17: 27:74:4f:7a:4d:10:33:6b:fd:c4:c2:6e:52:85:be:4e:9f:3c: 3e:25:b2:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUxMjA4MjM1MTA2WhcNMjUxMjE1MjM1MTA2WjAYMRYwFAYD VQQDEw02OTM3NjQ2YS0yMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dyM6x8N7+YQhyRtsaIgN4NnqwXpHxoAZLM2KCXajD7Qvt0lUMnCOgs+nvUX jMzLHDIy93SdyzF43Blw/IVRugRGGl7M5dHzDOWAmwnumtO/Cf4Fk2QSa3E5Jere IUJC/5ROt/8cMqm93o+TpIiC5n27KHz01KnCL/XYdWLKZFMXDGrWqH63zwnRJSjh Q7VvC6lZycr8CIFZWywMpCtB/MclKoa8IZgfTVgdsCWgEPewD9jkb9seW9EFJdJm /WVFYCzkiSSD5ksykmTyc/V7lfoS3HOQZZoB8bRyluUjz6e24S4F9fd2sKKlEWhN W4v6kIBZqq6yR4BAJNggYvVrxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG3sjKs fgFVh8F9JdysTgWgtzHpMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfZ8b/UkDUj3MK88xXB0NvNNo7vWiV5JuzQaDfE88VMhxVhIAxlps5 C+ZUQmde9s1zoRUH8ZAo1ufTHF5tzLrW/nSXJ2AlgdlOak3Dj/h4xrM8GRMiheNu J+k0AYt4RUbrJW0uWVOg4i9Lo/Qc2enHOmhwNY88cDuDcRlO1LihMj/L6pEq6SmT ujXkTLHkgLLa19ypaMo+c6a02l+KUNPWb+YuoRL2TmhK/Uw8SPXcXW6DGYJS0esV zNb62Jl+P7uptJSTEU8DakM3G1R7b+yPJPDxj/5i0gGS5vjqX0bfBKl7LxDYqprP XxcndE96TRAza/3Ewm5Shb5Onzw+JbL3 -----END CERTIFICATE-----Generated at Wed Dec 10 04:58:44 2025 by rpki-client