This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: aHYqJSv4AgFrCS6SBvz7/U/+Gv7wR8IZUi/aIAVD0oI= Subject key identifier: 75:70:14:DC:69:55:2B:34:C4:FB:8A:19:2D:EF:92:31:A6:10:4B:6F Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 2690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 2678 Signing time: Wed 24 Dec 2025 15:33:03 +0000 Manifest this update: Wed 24 Dec 2025 15:33:02 +0000 Manifest next update: Wed 31 Dec 2025 15:33:02 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: OfxSFZjNFwi42nE+OWLUCD8ns74NEePoDlPDU0Xl5PQ=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9872 (0x2690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Dec 24 15:33:02 2025 GMT Not After : Dec 31 15:33:02 2025 GMT Subject: CN=694c07af-b53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:40:a0:cc:2f:01:3f:f9:59:4f:f0:27:c9: 57:18:b5:d4:50:9a:a3:3f:36:ce:b0:24:58:42:a4: 50:65:be:44:59:2d:de:0a:8e:8d:25:77:7c:41:df: 12:3b:0c:74:57:3e:9c:5d:03:19:87:ef:d3:c7:fb: a6:5f:16:b8:30:f1:d1:d2:2e:58:e1:b2:8c:ff:21: 25:23:ec:94:f1:0d:ba:46:15:44:2d:30:6b:d7:d5: 6b:7d:27:90:29:ac:b8:fa:81:d8:12:76:45:3f:02: 14:bc:6f:79:56:59:3c:0d:97:ac:34:9d:1e:05:ab: 8b:bc:76:81:0f:48:17:d4:9d:4a:4e:f2:e8:39:c3: c7:a3:db:ab:3b:e3:ee:de:c0:5d:9f:da:3a:95:e6: e7:70:50:81:d0:51:94:c1:0a:c8:34:3f:1a:da:cb: 52:6b:bd:cc:80:6c:c7:38:35:14:9d:7d:22:3d:d2: 06:6b:e1:35:f2:24:66:bf:28:ff:15:9e:8e:93:c8: 88:e6:56:88:b8:08:66:f3:10:67:c4:95:f2:e4:d8: f9:ad:6c:2b:d0:62:b1:84:5a:45:6b:47:60:24:d6: 20:43:a5:d5:93:e7:9e:8a:d7:09:97:d2:15:95:a8: 02:7d:66:cf:89:14:cb:09:2d:69:93:65:7b:9e:e7: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:14:DC:69:55:2B:34:C4:FB:8A:19:2D:EF:92:31:A6:10:4B:6F X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:94:59:de:61:a0:d7:0e:ed:15:29:8f:e5:dc:61:cd:3b:6f: 21:a7:22:99:eb:9d:fe:9d:45:03:2a:1f:35:3e:4c:c5:48:9e: fe:52:06:c8:3c:a5:f2:f6:6e:59:d9:b7:2f:73:95:f8:66:ea: 71:e2:3f:d0:86:fe:f4:a0:21:c3:f7:c4:62:ae:89:eb:0d:62: c8:7e:b1:c6:4f:dd:53:7d:8d:85:6a:49:9d:ff:f0:cb:ca:58: c0:45:3f:cd:05:b9:13:64:b7:ba:66:c2:96:c3:f7:37:bd:dd: 69:59:b4:b0:24:74:d4:d1:79:03:27:fd:c5:4b:37:7b:5b:5b: 0b:17:47:31:32:ab:d0:8c:68:ee:fe:ae:ea:7d:02:a3:35:8e: b1:bd:84:4b:bd:0a:58:c1:da:e9:f6:d2:ac:e1:3b:1e:52:e7: 93:f7:77:74:c8:0d:23:8a:5f:d5:06:7a:b0:2a:79:85:19:c3: 03:c6:6c:b6:fd:16:aa:31:7b:9c:25:a9:d0:01:30:40:4f:e0: 0d:55:a0:f6:d8:0e:33:a3:e1:8a:53:f0:b5:92:32:fa:db:b2: 55:c0:f1:25:00:d0:8f:59:b1:e2:0f:1b:6a:3c:a4:73:16:61: 8a:00:06:0d:94:4c:e9:1f:d3:f8:34:9f:1d:4e:64:8c:89:14: 86:d3:a8:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUxMjI0MTUzMzAyWhcNMjUxMjMxMTUzMzAyWjAYMRYwFAYD VQQDDA02OTRjMDdhZi1iNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LhAoMwvAT/5WU/wJ8lXGLXUUJqjPzbOsCRYQqRQZb5EWS3eCo6NJXd8Qd8S Owx0Vz6cXQMZh+/Tx/umXxa4MPHR0i5Y4bKM/yElI+yU8Q26RhVELTBr19VrfSeQ Kay4+oHYEnZFPwIUvG95Vlk8DZesNJ0eBauLvHaBD0gX1J1KTvLoOcPHo9urO+Pu 3sBdn9o6lebncFCB0FGUwQrIND8a2stSa73MgGzHODUUnX0iPdIGa+E18iRmvyj/ FZ6Ok8iI5laIuAhm8xBnxJXy5Nj5rWwr0GKxhFpFa0dgJNYgQ6XVk+eeitcJl9IV lagCfWbPiRTLCS1pk2V7nudXtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVwFNxp VSs0xPuKGS3vkjGmEEtvMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNlFneYaDXDu0VKY/l3GHNO28hpyKZ653+nUUDKh81PkzFSJ7+UgbI PKXy9m5Z2bcvc5X4Zupx4j/Qhv70oCHD98RironrDWLIfrHGT91TfY2Fakmd//DL yljART/NBbkTZLe6ZsKWw/c3vd1pWbSwJHTU0XkDJ/3FSzd7W1sLF0cxMqvQjGju /q7qfQKjNY6xvYRLvQpYwdrp9tKs4TseUueT93d0yA0jil/VBnqwKnmFGcMDxmy2 /RaqMXucJanQATBAT+ANVaD22A4zo+GKU/C1kjL627JVwPElANCPWbHiDxtqPKRz FmGKAAYNlEzpH9P4NJ8dTmSMiRSG06gl -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:22 2025 by rpki-client