This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: rkRXG0Iq2XJtGH6Opv5C9j0XYf0GZRD3m29TYKMR5/c= Subject key identifier: 62:68:45:AC:B9:25:66:70:8C:74:DE:E5:08:55:69:0D:16:6C:9B:3E Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0590 Signing time: Mon 22 Dec 2025 22:23:43 +0000 Manifest this update: Mon 22 Dec 2025 22:23:43 +0000 Manifest next update: Mon 29 Dec 2025 22:23:43 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: bge9nzjZ5HyAYQD0N1KZM+XevWOHlmzYrgPCOPVGUyc=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: qee+KTCUp6bDNFwH36fAFYsE8VZ1yRt+iGxeFmVp9gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Dec 22 22:23:43 2025 GMT Not After : Dec 29 22:23:43 2025 GMT Subject: CN=6949c4ef-0d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:bb:7c:d6:c4:fe:9e:89:de:10:49:2a:99: 05:e5:13:8b:80:81:c2:3a:a7:4e:6e:c1:0a:0e:69: 3c:9f:b0:d8:29:8a:7f:1a:cc:24:87:8c:7a:cb:cc: 4a:d2:2d:0f:3e:7c:c1:42:5e:27:ab:f8:ab:32:a1: af:31:13:56:c6:61:04:02:21:66:9f:03:77:89:f4: 09:bf:2b:16:0a:64:8f:d9:49:38:da:65:47:3b:8b: 15:d0:69:08:cc:d2:db:94:62:da:23:71:6e:cf:87: 5d:21:5b:72:3d:02:1b:e5:2d:c3:93:26:af:8d:40: 3d:91:6a:86:36:40:c5:39:e1:c3:bb:b5:41:f2:49: 80:13:89:bb:0e:fa:b6:c4:5f:29:69:9d:9c:ed:22: 46:ca:c0:8a:d8:1f:d4:bc:66:81:d3:60:fa:b0:07: d3:c9:38:f4:79:6e:cc:00:a8:61:bf:f3:7a:c6:1c: 61:c4:4d:32:d1:a2:e0:ab:8b:78:d1:32:06:29:88: d5:44:a9:8e:27:f0:36:4b:15:d8:fc:77:a2:fc:ba: 12:bd:6a:a2:b8:38:e4:b6:7c:79:90:34:2e:c5:7e: b8:97:e4:97:2a:72:94:16:2f:0f:01:fb:94:4f:22: b0:86:0d:0c:8b:99:42:c8:44:ed:91:7b:bd:51:52: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:45:AC:B9:25:66:70:8C:74:DE:E5:08:55:69:0D:16:6C:9B:3E X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:df:a6:c3:ed:5d:c3:00:4d:32:e5:94:95:c3:42:f0:50:48: a3:32:97:90:9c:73:c3:aa:20:db:c5:e6:f2:c3:ca:19:f3:f7: 1d:50:e7:c5:72:2d:16:eb:25:64:47:c6:3e:70:90:be:2f:a3: ed:bd:1a:98:de:51:a2:f1:78:21:9f:6a:c4:3f:5a:4e:23:1b: 7f:66:a9:b7:37:f2:2e:ee:8b:5b:bb:1b:64:e2:ce:69:2c:3e: 45:a3:59:20:69:29:78:b9:9f:0e:af:68:1e:d7:d8:25:d5:40: 29:d1:dc:79:69:9f:f3:73:dd:f8:a1:e0:9a:9e:9a:41:19:36: e5:9a:3f:09:cd:88:31:1d:be:cf:8e:07:4f:b2:f9:f7:51:2c: 6a:99:0a:88:27:80:a6:c1:c0:8a:33:2f:c5:ba:a4:13:d8:05: 83:60:d8:a4:da:54:4d:89:c2:ea:9f:a5:fa:b7:97:be:27:6c: df:7d:2a:d5:b8:df:7b:65:d9:b1:59:ca:65:5f:3b:98:cc:0c: 43:b1:57:bb:99:92:7c:5c:49:cc:12:2e:d9:11:53:77:89:61: 09:a7:65:ec:3f:d2:5d:f2:15:ad:1a:81:e4:03:3e:1e:76:42: d3:ee:e7:af:38:2d:d0:f6:6d:6b:47:5d:a6:d6:93:de:bf:4a: 84:24:64:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUxMjIyMjIyMzQzWhcNMjUxMjI5MjIyMzQzWjAYMRYwFAYD VQQDDA02OTQ5YzRlZi0wZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2W7fNbE/p6J3hBJKpkF5ROLgIHCOqdObsEKDmk8n7DYKYp/Gswkh4x6y8xK 0i0PPnzBQl4nq/irMqGvMRNWxmEEAiFmnwN3ifQJvysWCmSP2Uk42mVHO4sV0GkI zNLblGLaI3Fuz4ddIVtyPQIb5S3DkyavjUA9kWqGNkDFOeHDu7VB8kmAE4m7Dvq2 xF8paZ2c7SJGysCK2B/UvGaB02D6sAfTyTj0eW7MAKhhv/N6xhxhxE0y0aLgq4t4 0TIGKYjVRKmOJ/A2SxXY/Hei/LoSvWqiuDjktnx5kDQuxX64l+SXKnKUFi8PAfuU TyKwhg0Mi5lCyETtkXu9UVI1TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJoRay5 JWZwjHTe5QhVaQ0WbJs+MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe36bD7V3DAE0y5ZSVw0LwUEijMpeQnHPDqiDbxebyw8oZ8/cdUOfF ci0W6yVkR8Y+cJC+L6PtvRqY3lGi8Xghn2rEP1pOIxt/Zqm3N/Iu7otbuxtk4s5p LD5Fo1kgaSl4uZ8Or2ge19gl1UAp0dx5aZ/zc934oeCanppBGTblmj8JzYgxHb7P jgdPsvn3USxqmQqIJ4CmwcCKMy/FuqQT2AWDYNik2lRNicLqn6X6t5e+J2zffSrV uN97ZdmxWcplXzuYzAxDsVe7mZJ8XEnMEi7ZEVN3iWEJp2XsP9Jd8hWtGoHkAz4e dkLT7uevOC3Q9m1rR12m1pPev0qEJGSF -----END CERTIFICATE-----Generated at Tue Dec 23 04:00:59 2025 by rpki-client