This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: yu124k9xFoOY2BnGNHAfQn5k43nBPjsJPL++NuAXA9E= Subject key identifier: D2:6F:75:A1:07:AA:93:66:5C:41:CB:DB:E1:D9:27:44:24:6E:92:9E Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 04B0 Signing time: Mon 22 Dec 2025 22:59:01 +0000 Manifest this update: Mon 22 Dec 2025 22:59:00 +0000 Manifest next update: Mon 29 Dec 2025 22:59:00 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: jOsLtac9AgD/AkLZcJxYy++ARHGdH2nXp1hfD+gLv2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Dec 22 22:59:00 2025 GMT Not After : Dec 29 22:59:00 2025 GMT Subject: CN=6949cd35-215f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:8c:bc:80:a5:f2:31:9a:e4:e4:56:b4:50: 5b:35:c6:be:b9:65:a9:00:32:6e:eb:86:92:99:73: f9:04:ad:ca:ca:75:ae:bc:6d:5e:05:cb:9f:66:6b: 87:ca:a1:f8:9c:c1:68:03:91:c6:fb:b8:59:4c:0f: 90:30:ef:73:01:ea:f0:95:3e:29:17:2d:1a:ad:4d: 02:f2:1a:5e:43:de:b2:23:a6:a0:21:ff:4c:d0:46: c0:b1:3e:20:cc:6d:ce:08:8f:14:c6:20:cd:1e:be: 96:8e:38:c5:04:10:df:07:a8:af:92:87:1c:72:08: 23:6d:1d:14:ae:fc:a3:46:48:fe:85:24:29:c2:65: 31:90:fa:a1:ea:91:f3:ad:61:4b:65:e7:21:e6:0f: 6c:22:b8:20:f6:92:63:47:6c:da:c4:f2:1b:1e:fd: 96:34:a5:60:64:d6:ee:8d:a7:9f:e2:17:04:b4:cb: 1b:01:4d:63:07:df:79:3f:f8:9a:dd:fb:a7:fd:ef: 76:56:34:8d:ce:23:f1:48:b0:1d:63:28:9d:32:e5: 3c:e3:a0:22:fa:c4:c3:af:7d:75:53:f6:e7:f1:29: d6:c3:f7:95:62:2e:a1:dc:01:88:9e:8e:73:e7:77: ab:25:0b:02:7c:22:b0:2b:3b:19:4a:99:ee:ff:ef: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6F:75:A1:07:AA:93:66:5C:41:CB:DB:E1:D9:27:44:24:6E:92:9E X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2e:07:df:93:58:27:56:0f:c3:1d:bb:f1:b7:e3:7f:cc:ce: ae:1d:2f:f5:dc:1f:7b:71:84:bb:d9:cd:96:26:68:1f:62:49: 37:d9:af:ba:04:9a:65:46:81:f2:4c:70:42:1b:30:05:38:76: c6:d6:9b:50:3b:34:cd:2c:d1:40:e3:1f:1f:be:b1:17:27:cf: 04:7e:7d:56:47:2d:a9:5a:cd:8a:16:b5:00:21:de:2f:59:eb: 80:eb:05:2f:b4:5a:89:16:3e:8b:aa:e7:fc:d5:4c:04:47:a5: c8:41:51:7a:10:7b:8e:b1:38:47:fe:5a:46:9a:b6:42:68:c8: a6:28:29:21:3a:ab:31:02:b5:b1:86:c5:56:72:96:bf:7d:78: ae:ae:56:21:cd:ff:98:a5:b2:b1:dc:cb:29:25:b0:a7:b2:f0: f7:99:d1:b7:02:e1:e8:55:42:43:93:40:2c:46:5d:43:17:97: 4a:42:f4:ec:ee:c9:3a:96:3f:26:44:65:40:5a:46:d0:26:3a: d4:d3:14:70:89:33:37:53:fe:cd:3f:c4:95:a6:c6:4b:b7:e0: 42:b9:e4:48:a3:b0:58:ef:73:29:1b:b3:40:2f:58:92:a0:8b: 3c:56:d3:5c:c1:93:68:c2:94:56:86:73:72:39:6a:39:59:f6: b2:88:0a:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUxMjIyMjI1OTAwWhcNMjUxMjI5MjI1OTAwWjAYMRYwFAYD VQQDDA02OTQ5Y2QzNS0yMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHWMvICl8jGa5ORWtFBbNca+uWWpADJu64aSmXP5BK3KynWuvG1eBcufZmuH yqH4nMFoA5HG+7hZTA+QMO9zAerwlT4pFy0arU0C8hpeQ96yI6agIf9M0EbAsT4g zG3OCI8UxiDNHr6WjjjFBBDfB6ivkocccggjbR0UrvyjRkj+hSQpwmUxkPqh6pHz rWFLZech5g9sIrgg9pJjR2zaxPIbHv2WNKVgZNbujaef4hcEtMsbAU1jB995P/ia 3fun/e92VjSNziPxSLAdYyidMuU846Ai+sTDr311U/bn8SnWw/eVYi6h3AGIno5z 53erJQsCfCKwKzsZSpnu/++9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJvdaEH qpNmXEHL2+HZJ0QkbpKeMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKLgffk1gnVg/DHbvxt+N/zM6uHS/13B97cYS72c2WJmgfYkk32a+6 BJplRoHyTHBCGzAFOHbG1ptQOzTNLNFA4x8fvrEXJ88Efn1WRy2pWs2KFrUAId4v WeuA6wUvtFqJFj6Lquf81UwER6XIQVF6EHuOsThH/lpGmrZCaMimKCkhOqsxArWx hsVWcpa/fXiurlYhzf+YpbKx3MspJbCnsvD3mdG3AuHoVUJDk0AsRl1DF5dKQvTs 7sk6lj8mRGVAWkbQJjrU0xRwiTM3U/7NP8SVpsZLt+BCueRIo7BY73MpG7NAL1iS oIs8VtNcwZNowpRWhnNyOWo5WfayiApD -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:40 2025 by rpki-client