This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: MKdL4aiGZ8NiK6i0B9Ix+3QwE4pz1r19aK6vD22LFUc= Subject key identifier: 51:F3:B5:EB:70:9D:4B:01:C6:C4:11:53:2E:10:BE:45:6D:95:DA:40 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A0F Signing time: Sat 06 Dec 2025 19:05:34 +0000 Manifest this update: Sat 06 Dec 2025 19:05:33 +0000 Manifest next update: Sat 13 Dec 2025 19:05:33 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: /9oQnEu+NPXhE9LUVjRGC18UDEMVIlFWbXsGcvSamXA=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Dec 6 19:05:33 2025 GMT Not After : Dec 13 19:05:33 2025 GMT Subject: CN=69347e7e-de36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:ab:89:f9:bf:1b:7c:69:5f:2b:06:d0:25: d5:99:c9:32:ae:0f:03:b4:f9:a3:40:a8:06:c7:0c: d4:f7:ab:cb:9b:d5:61:79:ff:de:58:72:23:66:7d: 33:25:9d:9e:ed:13:cb:bc:ec:a8:e7:82:ad:0e:05: 4c:04:90:ef:0f:40:f6:38:da:18:1e:d9:50:c3:b2: ad:38:6d:81:7e:f8:51:12:5f:b4:9c:d0:e6:79:50: a1:6d:01:c4:1d:3c:f8:d4:1d:5c:b8:93:6b:81:d2: c2:ec:ef:c7:10:8d:f8:8e:6c:ff:c6:9b:5f:fc:41: 66:f5:b6:96:55:96:9f:a9:02:11:08:fc:ee:4d:97: 89:62:0e:91:a9:c4:05:2d:44:c6:ae:a1:93:17:3e: 29:b9:66:27:a5:df:62:fa:0f:48:70:64:3d:14:cd: 9a:f1:ea:cd:e2:e1:a6:4e:88:ca:99:6d:5a:6a:05: d7:cb:be:79:b6:d5:6e:44:f8:5a:c9:a3:21:5a:15: c5:0e:3e:4d:c0:05:15:a2:46:db:3b:4e:17:74:8f: c9:4d:9e:ec:c5:62:da:c9:7b:05:36:21:52:e4:ab: cc:f9:e3:73:6c:40:a1:f7:ef:00:5b:1c:c4:8e:30: 94:30:35:81:a5:ff:e4:7f:18:de:ae:4f:09:60:f7: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:B5:EB:70:9D:4B:01:C6:C4:11:53:2E:10:BE:45:6D:95:DA:40 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:30:af:c7:80:c6:d1:d9:b3:42:04:0f:e4:df:55:d0:22:48: fc:af:d9:49:e5:bd:96:d1:1b:2d:83:63:ed:5c:b7:02:62:8e: c9:5f:3d:54:63:01:91:d7:a2:f8:a2:89:f9:38:18:a0:0f:f7: 51:67:2a:6f:1c:d2:25:8d:7e:b0:cd:f7:1a:3a:54:05:4c:28: 76:6b:b1:57:4d:20:2a:de:80:4a:c7:0b:1f:5a:5e:7a:e7:fe: a5:58:48:82:87:6a:e5:d6:f3:36:1e:44:d6:24:c9:f9:f2:5d: 35:65:d2:bf:f4:c2:8a:37:72:4f:15:04:9c:4c:2d:b6:7e:63: 4a:95:b4:5b:2c:43:91:64:21:fe:80:00:c1:3d:55:ba:b4:be: 78:31:cc:5c:21:c2:08:8b:8f:67:c5:a0:77:68:4e:62:a8:74: 02:f9:9b:93:fe:42:f0:87:31:8e:75:5b:55:32:f9:b5:d0:30: ab:76:af:28:41:d6:2b:0b:a8:82:d6:63:5a:d2:d2:e9:54:38: ae:b2:27:85:b3:72:27:b4:68:59:94:ce:0e:6b:44:b4:82:63: 3b:ff:d9:c2:47:52:8c:53:c7:44:01:87:72:bf:1d:1a:11:63: f3:10:81:73:7e:e9:44:d0:88:ab:be:6c:bc:e5:64:a5:e6:30: 74:9e:a6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUxMjA2MTkwNTMzWhcNMjUxMjEzMTkwNTMzWjAYMRYwFAYD VQQDEw02OTM0N2U3ZS1kZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz62rifm/G3xpXysG0CXVmckyrg8DtPmjQKgGxwzU96vLm9Vhef/eWHIjZn0z JZ2e7RPLvOyo54KtDgVMBJDvD0D2ONoYHtlQw7KtOG2BfvhREl+0nNDmeVChbQHE HTz41B1cuJNrgdLC7O/HEI34jmz/xptf/EFm9baWVZafqQIRCPzuTZeJYg6RqcQF LUTGrqGTFz4puWYnpd9i+g9IcGQ9FM2a8erN4uGmTojKmW1aagXXy755ttVuRPha yaMhWhXFDj5NwAUVokbbO04XdI/JTZ7sxWLayXsFNiFS5KvM+eNzbECh9+8AWxzE jjCUMDWBpf/kfxjerk8JYPf6mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHztetw nUsBxsQRUy4QvkVtldpAMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaMK/HgMbR2bNCBA/k31XQIkj8r9lJ5b2W0Rstg2PtXLcCYo7JXz1U YwGR16L4oon5OBigD/dRZypvHNIljX6wzfcaOlQFTCh2a7FXTSAq3oBKxwsfWl56 5/6lWEiCh2rl1vM2HkTWJMn58l01ZdK/9MKKN3JPFQScTC22fmNKlbRbLEORZCH+ gADBPVW6tL54McxcIcIIi49nxaB3aE5iqHQC+ZuT/kLwhzGOdVtVMvm10DCrdq8o QdYrC6iC1mNa0tLpVDiusieFs3IntGhZlM4Oa0S0gmM7/9nCR1KMU8dEAYdyvx0a EWPzEIFzfulE0Iirvmy85WSl5jB0nqbW -----END CERTIFICATE-----Generated at Mon Dec 8 06:01:41 2025 by rpki-client