This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: hr4feY+10cPwZnHhQbjNWNmisgNKa6uZdMrTRJvf0SU= Subject key identifier: BA:CC:9E:0D:7B:A8:01:EA:6E:FF:40:9C:91:C9:51:1C:A4:17:6E:AB Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 09EB Signing time: Mon 22 Dec 2025 19:17:30 +0000 Manifest this update: Mon 22 Dec 2025 19:17:29 +0000 Manifest next update: Mon 29 Dec 2025 19:17:29 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: 4MEpDLAjRpURHEshwsxM1cSn3VvA36SB6FNnMf0qjyQ=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: DvSBvAVly3QEdI4AtJMEHxBNtfNAhn6C/63PWm2Ji6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Dec 22 19:17:29 2025 GMT Not After : Dec 29 19:17:29 2025 GMT Subject: CN=6949994a-0abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:42:c7:9b:9d:a3:44:66:6d:8d:50:76:f1: 55:19:95:9e:5e:8c:64:a8:bb:cf:3b:a5:e7:ac:81: 2f:a9:38:16:c5:16:84:f3:d7:dd:46:35:e2:ae:28: 95:3a:a0:9e:2d:75:b8:c9:e2:fc:c5:82:fb:df:5e: fa:34:ff:2f:ae:93:a1:48:33:94:d9:bb:5b:2f:5b: 33:f2:97:1a:b7:52:10:39:a4:4f:d0:4b:f9:52:af: d7:bc:e9:0f:a4:cf:b2:2d:76:56:2f:d7:e7:18:e7: 87:d2:e4:e9:a4:5a:7f:bd:b3:85:4e:7d:06:97:0d: cc:d0:d9:37:7e:83:a4:a3:76:28:3d:78:71:22:dd: 7d:f3:b5:41:11:2a:88:5a:c9:87:c3:f1:55:f2:0c: e1:ad:df:7d:b2:0f:ce:10:74:bc:16:6a:fc:7f:77: 06:72:3e:6d:4b:3e:c1:dc:61:ad:73:96:a3:20:91: 9f:66:57:47:ff:6a:ab:f5:f3:d8:fa:ae:fc:9e:d7: 63:37:1c:bb:7a:a3:2d:ea:09:2a:16:42:fc:d9:23: 42:33:a5:0a:dd:2c:f2:1f:2d:9e:49:c6:70:f9:23: 5d:00:6b:c8:d2:11:25:59:38:4d:8a:cd:28:2a:37: 6a:6b:d3:65:9a:cc:f2:62:57:1a:fe:81:29:7a:6e: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:9E:0D:7B:A8:01:EA:6E:FF:40:9C:91:C9:51:1C:A4:17:6E:AB X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c1:7b:7b:f9:16:26:9c:40:71:22:7f:6b:64:ad:80:79:ae: 88:38:1c:ac:a5:9f:ff:42:23:e1:99:3e:fb:58:70:3b:1c:b6: 84:2a:99:f9:00:1f:1a:b0:31:fe:3f:28:87:a8:94:84:68:6b: 50:5d:dc:1a:f7:c4:5b:ab:5e:7b:45:91:07:d7:d0:51:19:4f: 59:c2:c7:28:2b:27:01:b6:67:24:53:7f:e9:47:1f:f6:cc:fa: ce:e6:32:11:3a:83:e7:20:b4:40:22:5c:e4:0d:74:0c:e8:62: ac:ec:63:8f:ef:8b:36:08:cc:41:a9:9d:cf:de:3f:f9:86:0e: b0:e2:a5:fd:77:da:5a:d3:da:82:13:6a:5f:20:3a:14:fa:c6: ab:dd:01:ca:9c:b6:20:cd:c0:87:94:a3:de:84:8b:43:6e:eb: c0:92:83:4f:67:82:5d:07:0c:30:1a:03:87:a8:2e:97:d4:7b: 12:8e:6b:87:32:ce:11:eb:31:84:28:03:c0:93:36:d1:00:5a: 09:c8:83:4c:de:7b:7a:79:98:bb:2f:1f:00:33:21:8c:3a:d4: f4:68:df:6a:ff:79:10:77:e1:8f:68:96:04:59:29:b8:4c:b4: 01:e5:00:30:96:cc:9b:5f:97:d5:7c:6a:9c:59:f3:2d:a6:c8: 08:a7:cd:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUxMjIyMTkxNzI5WhcNMjUxMjI5MTkxNzI5WjAYMRYwFAYD VQQDDA02OTQ5OTk0YS0wYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOBCx5udo0RmbY1QdvFVGZWeXoxkqLvPO6XnrIEvqTgWxRaE89fdRjXiriiV OqCeLXW4yeL8xYL73176NP8vrpOhSDOU2btbL1sz8pcat1IQOaRP0Ev5Uq/XvOkP pM+yLXZWL9fnGOeH0uTppFp/vbOFTn0Glw3M0Nk3foOko3YoPXhxIt1987VBESqI WsmHw/FV8gzhrd99sg/OEHS8Fmr8f3cGcj5tSz7B3GGtc5ajIJGfZldH/2qr9fPY +q78ntdjNxy7eqMt6gkqFkL82SNCM6UK3SzyHy2eScZw+SNdAGvI0hElWThNis0o Kjdqa9NlmszyYlca/oEpem54gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrMng17 qAHqbv9AnJHJURykF26rMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVwXt7+RYmnEBxIn9rZK2Aea6IOByspZ//QiPhmT77WHA7HLaEKpn5 AB8asDH+PyiHqJSEaGtQXdwa98Rbq157RZEH19BRGU9ZwscoKycBtmckU3/pRx/2 zPrO5jIROoPnILRAIlzkDXQM6GKs7GOP74s2CMxBqZ3P3j/5hg6w4qX9d9pa09qC E2pfIDoU+sar3QHKnLYgzcCHlKPehItDbuvAkoNPZ4JdBwwwGgOHqC6X1HsSjmuH Ms4R6zGEKAPAkzbRAFoJyINM3nt6eZi7Lx8AMyGMOtT0aN9q/3kQd+GPaJYEWSm4 TLQB5QAwlsybX5fVfGqcWfMtpsgIp80R -----END CERTIFICATE-----Generated at Tue Dec 23 13:10:35 2025 by rpki-client