This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft File: u82QAyNOsUDtDYm7OwH7bEY_XK8.mft (raw, json) Hash identifier: 1GF3qZDOL9MoAAU3yUuGTHYM2cJAatx3VQMfBeEzSak= Subject key identifier: 1F:B4:6A:F4:03:58:CA:78:A2:E0:24:AB:1F:A4:2E:ED:5D:50:B9:0B Authority key identifier: BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF Certificate issuer: /CN=A9136F4F/serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft Manifest number: 28 Signing time: Tue 23 Dec 2025 06:31:05 +0000 Manifest this update: Tue 23 Dec 2025 06:31:05 +0000 Manifest next update: Tue 30 Dec 2025 06:31:05 +0000 Files and hashes: 1: u82QAyNOsUDtDYm7OwH7bEY_XK8.crl (hash: kBSgrESegeR0y0krK9E45puFakjjvJcD1v8OMoiQ3kM=) 2: BF6469FCA41611F0A6E79C33C4F9AE02.roa (hash: Iw9hs9kJZjRvU/kjqQsF9fh7P0eDr0FwCz9e/iK74jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F4F, serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF Validity Not Before: Dec 23 06:31:05 2025 GMT Not After : Dec 30 06:31:05 2025 GMT Subject: CN=694a3729-80eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7e:04:a2:70:e6:23:ca:0b:d8:b8:9a:87:22: 5e:b8:a8:2d:81:f5:d6:8d:04:5b:5d:c2:f4:2d:cb: 71:ae:c9:c8:04:d9:f3:ee:b7:e5:a7:13:ff:b7:fd: 92:c2:5b:a8:4a:6d:41:a8:1c:42:88:53:5f:d2:a8: 97:1f:22:6a:91:26:f3:a4:89:9e:f7:24:81:28:9c: 5b:7c:4c:e6:f2:ca:af:9c:e4:8b:95:f8:5f:7b:1f: 41:d5:52:04:02:25:ef:27:6f:e7:9c:a6:72:00:ce: 29:b5:c5:53:92:9c:fa:84:02:f8:9a:d3:76:fb:2d: 9c:d5:f6:9e:62:6c:da:4c:52:c7:7d:40:be:f1:31: c0:95:90:42:a6:d1:b5:7f:b9:e1:b2:7f:38:3e:d6: 82:16:dd:60:db:b5:04:96:a5:5c:33:25:4a:28:84: 75:76:64:92:1d:95:e3:85:ac:9a:25:88:f2:2a:9e: 2a:e5:37:6b:fc:d4:d3:9b:5e:f6:d2:57:8a:54:cf: ff:41:f1:06:be:fc:a2:94:41:ac:31:bb:38:d8:1f: f9:ee:4a:c5:5c:c1:4a:2d:67:cc:c2:28:86:f4:a2: 6d:32:c4:f7:a7:ee:e5:d0:ca:98:ac:bc:cd:c6:8b: e0:c0:fa:b0:32:08:36:41:05:fa:f3:f3:4a:3d:2a: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B4:6A:F4:03:58:CA:78:A2:E0:24:AB:1F:A4:2E:ED:5D:50:B9:0B X509v3 Authority Key Identifier: keyid:BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:68:e8:ef:77:d8:a2:77:d3:a7:1c:92:6d:ce:b3:30:cd:a5: 5b:ff:b9:3c:4b:6c:be:6b:78:61:3e:dc:c9:26:76:15:ef:42: 0a:1c:1e:18:2f:7f:aa:86:e8:7b:0e:58:10:95:f9:b6:3c:c3: 3f:d7:3a:d9:53:61:05:e3:4a:dc:52:3b:73:eb:ee:d9:fa:67: e1:31:84:98:27:6a:89:35:9f:fc:52:47:8b:54:46:14:d1:68: 20:92:0c:82:4b:cd:50:30:2b:1e:0c:23:25:48:ec:a5:ac:30: 19:ca:1d:30:7f:83:de:9c:8e:4d:10:ee:5e:10:10:d7:49:33: f2:f6:93:17:fc:dd:d5:b3:43:ac:9e:ad:d8:ee:04:7a:9f:20: 12:93:ba:f0:ee:3c:ed:57:d6:e2:5e:7a:50:52:99:d5:7b:fb: 2c:d8:3f:95:15:07:42:6f:45:f0:08:09:71:ca:0d:55:35:d7: 8c:5e:12:dd:30:3a:98:5d:df:5d:86:c2:57:97:48:34:80:37: 39:c5:63:84:04:fc:7e:66:33:82:e3:07:d8:97:06:b7:56:07: d6:2d:c4:03:bd:64:c1:2a:4c:52:e4:f1:b8:d1:e4:48:75:b8: 2f:dd:68:77:7f:50:7e:8d:2e:45:28:b7:8e:f8:7e:1d:d3:8f: 19:8e:7f:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkY0RjExMC8GA1UEBRMoQkJDRDkwMDMyMzRFQjE0MEVEMEQ4OUJCM0IwMUZCNkM0 NjNGNUNBRjAeFw0yNTEyMjMwNjMxMDVaFw0yNTEyMzAwNjMxMDVaMBgxFjAUBgNV BAMMDTY5NGEzNzI5LTgwZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjfgSicOYjygvYuJqHIl64qC2B9daNBFtdwvQty3GuycgE2fPut+WnE/+3/ZLC W6hKbUGoHEKIU1/SqJcfImqRJvOkiZ73JIEonFt8TObyyq+c5IuV+F97H0HVUgQC Je8nb+ecpnIAzim1xVOSnPqEAvia03b7LZzV9p5ibNpMUsd9QL7xMcCVkEKm0bV/ ueGyfzg+1oIW3WDbtQSWpVwzJUoohHV2ZJIdleOFrJoliPIqnirlN2v81NObXvbS V4pUz/9B8Qa+/KKUQawxuzjYH/nuSsVcwUotZ8zCKIb0om0yxPen7uXQypisvM3G i+DA+rAyCDZBBfrz80o9KrWhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH7Rq9ANY ynii4CSrH6Qu7V1QuQswHwYDVR0jBBgwFoAUu82QAyNOsUDtDYm7OwH7bEY/XK8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2RjRGLzEwN0YwRkYwQTQx NjExRjA5REU1NTczMkM0RjlBRTAyL3U4MlFBeU5Pc1VEdERZbTdPd0g3YkVZX1hL OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTgyUUF5Tk9zVUR0RFltN093SDdiRVlfWEs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 RjRGLzEwN0YwRkYwQTQxNjExRjA5REU1NTczMkM0RjlBRTAyL3U4MlFBeU5Pc1VE dERZbTdPd0g3YkVZX1hLOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxo6O932KJ306cckm3OszDNpVv/uTxLbL5reGE+3MkmdhXvQgocHhgv f6qG6HsOWBCV+bY8wz/XOtlTYQXjStxSO3Pr7tn6Z+ExhJgnaok1n/xSR4tURhTR aCCSDIJLzVAwKx4MIyVI7KWsMBnKHTB/g96cjk0Q7l4QENdJM/L2kxf83dWzQ6ye rdjuBHqfIBKTuvDuPO1X1uJeelBSmdV7+yzYP5UVB0JvRfAICXHKDVU114xeEt0w Ophd312GwleXSDSANznFY4QE/H5mM4LjB9iXBrdWB9YtxAO9ZMEqTFLk8bjR5Eh1 uC/daHd/UH6NLkUot474fh3TjxmOf88= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:31 2025 by rpki-client