This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft File: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json) Hash identifier: bZl12MoBvHgNN6NDd21ilVhNT1NC01XsB6aA/9+MhmI= Subject key identifier: 1D:4C:56:80:DE:E0:21:7F:6A:BD:19:2C:59:59:CC:D2:8B:31:7D:D7 Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft Manifest number: 48 Signing time: Mon 15 Dec 2025 06:45:14 +0000 Manifest this update: Mon 15 Dec 2025 06:45:13 +0000 Manifest next update: Mon 22 Dec 2025 06:45:13 +0000 Files and hashes: 1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: 5tqo3cQipSdMOtlV116lyK8HyE6h+0lmmUCWnHYx2Bc=) 2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: 6h0NC6fnyVrjlZRLQUdED+ump8j2JnnC17arwDP46lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Validity Not Before: Dec 15 06:45:13 2025 GMT Not After : Dec 22 06:45:13 2025 GMT Subject: CN=693fae7a-1ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:d4:6b:62:c6:89:16:7e:5f:7c:fb:b1:9b: 1e:29:87:83:64:a3:49:ca:ec:3d:3e:d6:d4:40:60: 36:9b:3c:74:cf:21:01:89:4d:ed:03:ad:82:96:65: a7:05:e6:88:f1:a2:4f:58:ed:46:9c:84:90:c5:4e: 86:2e:8f:4f:cc:fc:70:bd:c7:ab:cb:a8:ce:8d:5f: dd:cf:b5:b4:15:fb:2d:6e:80:27:74:5e:c3:5b:fe: 24:19:b7:ff:9c:82:be:33:1f:18:46:ce:af:49:b8: e8:f8:f0:48:97:59:84:e7:c0:3d:cb:11:6c:da:ad: 98:32:4f:7e:e8:8d:e9:ef:b2:ae:9b:47:c6:c6:51: a5:da:e5:74:be:1c:36:47:bb:1c:cd:47:73:53:84: ac:80:ee:57:48:9f:25:d4:f9:81:8c:02:dd:a8:2e: 02:a8:07:95:0c:6e:4d:20:0f:cd:4e:88:42:aa:43: 2f:ad:12:83:55:18:3a:3c:a2:17:5d:7e:c0:ac:8d: ba:12:f2:6f:d2:1d:b6:6c:b7:dd:df:93:ba:42:8d: 4b:37:03:44:4d:4c:82:bb:39:72:45:13:92:2a:36: 02:0b:ec:6e:67:70:ab:ce:a2:76:0c:99:cb:fd:37: 56:40:1d:e8:e3:a0:d0:2d:12:86:50:c5:64:2e:f3: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4C:56:80:DE:E0:21:7F:6A:BD:19:2C:59:59:CC:D2:8B:31:7D:D7 X509v3 Authority Key Identifier: keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:61:64:f0:45:79:01:91:01:6e:28:c4:a8:0d:99:17:3f: de:33:2f:e6:42:e4:4c:1e:31:f3:58:80:b0:1d:4f:8b:4f:93: 0b:80:e7:5b:74:c3:7d:9c:1b:37:d6:9c:69:5a:48:a0:4c:29: b0:fa:8f:bb:4b:bb:94:e7:27:46:83:b7:19:76:42:6e:c3:84: 94:ec:3b:76:b9:7b:7f:d0:a7:8b:47:1a:ea:a5:a8:fa:eb:ef: 9d:85:01:b9:05:de:61:43:72:d6:4c:02:e1:e0:b9:2d:ed:d4: 6e:6b:e6:df:a7:46:56:7e:d6:6a:00:e5:6d:c5:ce:85:e9:5b: eb:5c:fc:a6:9c:60:de:b8:ef:7f:f2:c2:15:bf:74:fa:c6:35: 49:68:71:99:b3:8b:b9:40:48:76:47:70:37:88:b5:5f:b6:48: 24:35:1a:96:48:48:66:2d:b9:5c:41:46:a2:e7:b5:34:19:d0: 07:bc:9b:ba:86:75:90:49:18:c1:75:b1:5c:6a:59:9e:6b:08: e4:43:a8:b7:17:55:da:ff:49:d7:11:e2:30:cb:48:5f:66:fa: 68:99:70:e3:55:44:68:3d:11:3e:88:c2:49:7b:c5:8c:6f:7e: eb:3d:e7:e1:85:ce:5a:5d:37:03:e5:49:ea:ef:0e:95:b5:a9: 31:00:6e:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTQwMjExMC8GA1UEBRMoRjBBMDBDMzFEMDkxRTI0NTcxMzdEMkE4RUYzMjY3NzQ3 RUREN0MyMjAeFw0yNTEyMTUwNjQ1MTNaFw0yNTEyMjIwNjQ1MTNaMBgxFjAUBgNV BAMMDTY5M2ZhZTdhLTFhYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxyNRrYsaJFn5ffPuxmx4ph4Nko0nK7D0+1tRAYDabPHTPIQGJTe0DrYKWZacF 5ojxok9Y7UachJDFToYuj0/M/HC9x6vLqM6NX93PtbQV+y1ugCd0XsNb/iQZt/+c gr4zHxhGzq9JuOj48EiXWYTnwD3LEWzarZgyT37ojenvsq6bR8bGUaXa5XS+HDZH uxzNR3NThKyA7ldInyXU+YGMAt2oLgKoB5UMbk0gD81OiEKqQy+tEoNVGDo8ohdd fsCsjboS8m/SHbZst93fk7pCjUs3A0RNTIK7OXJFE5IqNgIL7G5ncKvOonYMmcv9 N1ZAHejjoNAtEoZQxWQu82CxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHUxWgN7g IX9qvRksWVnM0osxfdcwHwYDVR0jBBgwFoAU8KAMMdCR4kVxN9Ko7zJndH7dfCIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNDAyLzQ3Q0I1QkM0NkRG OTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtWeE45S283ekpuZEg3ZGZD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEtBTU1kQ1I0a1Z4TjlLbzd6Sm5kSDdkZkNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NDAyLzQ3Q0I1QkM0NkRGOTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtW eE45S283ekpuZEg3ZGZDSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYyYWTwRXkBkQFuKMSoDZkXP94zL+ZC5EweMfNYgLAdT4tPkwuA51t0 w32cGzfWnGlaSKBMKbD6j7tLu5TnJ0aDtxl2Qm7DhJTsO3a5e3/Qp4tHGuqlqPrr 752FAbkF3mFDctZMAuHguS3t1G5r5t+nRlZ+1moA5W3FzoXpW+tc/KacYN6473/y whW/dPrGNUlocZmzi7lASHZHcDeItV+2SCQ1GpZISGYtuVxBRqLntTQZ0Ae8m7qG dZBJGMF1sVxqWZ5rCORDqLcXVdr/SdcR4jDLSF9m+miZcONVRGg9ET6Iwkl7xYxv fus95+GFzlpdNwPlServDpW1qTEAbvk= -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:44 2025 by rpki-client