This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: A0MM0hB1J5AbNpkErsN5kn9UtmJywaubFDfaRulC3nA= Subject key identifier: A2:BB:31:7A:79:63:C1:52:B9:4C:3A:BF:03:F8:02:EF:8F:3D:24:92 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 26A2 Signing time: Sat 20 Dec 2025 15:34:40 +0000 Manifest this update: Sat 20 Dec 2025 15:34:39 +0000 Manifest next update: Sat 27 Dec 2025 15:34:39 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: UK4AVNUQMY4ujwlAKi9R1xP0X4zuahnRqboBMvzKRI8=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: inYPm2/qoWyhJvYPwsRqidJ8km0pHeal/3nb7zNYQCU=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 01wLk9RHRk483aM+7518CMU3cV26N05+ze+yCvqPXlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10024 (0x2728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Dec 20 15:34:39 2025 GMT Not After : Dec 27 15:34:39 2025 GMT Subject: CN=6946c20f-323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:97:b6:da:37:ee:ab:92:ad:76:04:27:f9: 10:52:23:36:98:4d:66:4a:24:2c:1a:24:ab:e8:38: 58:06:3a:8a:5a:78:de:05:f5:15:c3:95:a9:43:17: 73:3c:a7:33:dc:b8:51:b4:2f:1c:f2:d1:24:2f:f1: 81:46:3a:3f:e3:61:6a:76:14:ed:b1:ca:33:d6:ca: 86:2d:f6:31:67:0f:9a:f2:4f:8c:88:f5:4e:9c:fb: fc:59:6e:d6:f9:d2:c4:f9:b6:2f:93:d4:38:39:b3: 92:c6:04:4a:70:a3:4a:bb:50:e0:61:f5:97:1d:da: 35:61:6c:a8:66:98:6f:a0:a0:13:b6:80:ba:94:aa: 55:e1:29:7b:dd:a8:3c:bb:5e:93:b2:e4:1e:1a:3a: 5b:c3:c0:cd:8a:a9:d8:60:1f:a2:91:36:3f:60:4b: a4:d3:80:68:3b:f3:32:55:0c:e3:9a:31:66:b4:4d: 32:08:51:7e:8f:f7:42:fb:b7:c4:f4:42:5f:b1:f3: e0:4d:e6:41:c4:16:e0:43:a7:48:41:e6:dd:a0:45: 24:92:38:a9:5a:f4:2b:cc:c5:fb:3b:83:b9:0b:12: b2:16:ac:76:9f:7c:1f:4c:ef:b2:8d:a9:8f:ba:20: 95:27:db:57:ca:f4:13:11:90:a8:2c:94:23:c5:b1: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:31:7A:79:63:C1:52:B9:4C:3A:BF:03:F8:02:EF:8F:3D:24:92 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:49:32:39:01:ee:b3:f7:5c:0d:00:41:9b:93:d5:66:eb:99: 76:0b:eb:b0:fd:f3:d2:8f:d8:5d:fa:82:6a:00:85:30:0a:fb: c5:1a:7b:25:84:25:c6:d4:5f:9b:60:cb:aa:d0:e6:08:45:c0: 3e:2c:4c:42:6f:11:0b:23:db:49:c8:71:0b:3e:54:00:a8:b5: 77:7f:db:fb:76:fc:0c:6c:8c:47:d4:98:5f:d3:17:30:d5:ee: d6:d7:da:e4:88:49:58:86:79:ee:4b:ab:48:ce:6e:f2:c3:de: d4:72:13:47:a9:54:56:71:1c:58:1c:e1:db:23:38:33:42:c6: c4:00:f5:b8:a3:2b:1d:c3:37:fa:45:00:81:16:0d:74:ea:8c: 4e:a5:c5:92:34:3e:2c:85:12:40:a4:1c:6b:c3:62:ff:34:2d: 8a:83:2b:98:71:5f:89:72:70:60:51:d5:40:70:69:9d:a5:14: be:77:2e:9b:2a:9d:44:e3:32:b4:53:ad:4c:a2:91:6f:d1:19: c4:b6:f0:ba:b4:1b:a3:fd:19:c9:84:b2:27:65:69:84:be:d5: 01:79:ca:e0:e5:7c:b2:ef:c8:f2:b8:2c:a1:e1:c2:13:7b:3b: ae:35:11:16:3a:10:43:de:51:8c:1e:67:bb:34:c0:31:1a:a6: 6c:0e:c4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUxMjIwMTUzNDM5WhcNMjUxMjI3MTUzNDM5WjAYMRYwFAYD VQQDDA02OTQ2YzIwZi0zMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvGXtto37quSrXYEJ/kQUiM2mE1mSiQsGiSr6DhYBjqKWnjeBfUVw5WpQxdz PKcz3LhRtC8c8tEkL/GBRjo/42FqdhTtscoz1sqGLfYxZw+a8k+MiPVOnPv8WW7W +dLE+bYvk9Q4ObOSxgRKcKNKu1DgYfWXHdo1YWyoZphvoKATtoC6lKpV4Sl73ag8 u16TsuQeGjpbw8DNiqnYYB+ikTY/YEuk04BoO/MyVQzjmjFmtE0yCFF+j/dC+7fE 9EJfsfPgTeZBxBbgQ6dIQebdoEUkkjipWvQrzMX7O4O5CxKyFqx2n3wfTO+yjamP uiCVJ9tXyvQTEZCoLJQjxbElewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK7MXp5 Y8FSuUw6vwP4Au+PPSSSMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxSTI5Ae6z91wNAEGbk9Vm65l2C+uw/fPSj9hd+oJqAIUwCvvFGnsl hCXG1F+bYMuq0OYIRcA+LExCbxELI9tJyHELPlQAqLV3f9v7dvwMbIxH1Jhf0xcw 1e7W19rkiElYhnnuS6tIzm7yw97UchNHqVRWcRxYHOHbIzgzQsbEAPW4oysdwzf6 RQCBFg106oxOpcWSND4shRJApBxrw2L/NC2KgyuYcV+JcnBgUdVAcGmdpRS+dy6b Kp1E4zK0U61MopFv0RnEtvC6tBuj/RnJhLInZWmEvtUBecrg5Xyy78jyuCyh4cIT ezuuNREWOhBD3lGMHme7NMAxGqZsDsTw -----END CERTIFICATE-----Generated at Mon Dec 22 10:25:41 2025 by rpki-client