This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: plub22fZLAnrwaL27uIKmCeqBswcXFTiLmViHMShQ/8= Subject key identifier: FE:A9:78:F6:33:A1:D2:58:16:B3:A9:0F:05:9F:CE:C0:76:88:41:EA Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 010B Signing time: Wed 03 Dec 2025 03:22:16 +0000 Manifest this update: Wed 03 Dec 2025 03:22:15 +0000 Manifest next update: Wed 10 Dec 2025 03:22:15 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: p1AdA9XSTSE2DF9x9almsSz4h3Eg2xxh9hhBfV1vgoc=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: P4Mm2VNQngkGMc8lCO6eHVGOp7Fy5SVP9GQX/B339mE=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Dec 3 03:22:15 2025 GMT Not After : Dec 10 03:22:15 2025 GMT Subject: CN=692face7-de3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:7a:84:ec:8d:48:71:fd:ac:49:6a:85:95: 22:b2:9b:2b:b1:19:40:d2:ae:c6:60:3f:66:94:4d: b0:c7:0b:e0:44:21:9f:da:03:f9:3e:b5:83:1b:01: 1c:b8:02:dc:c0:e6:2f:c0:e0:fa:75:07:6e:bd:4c: 64:50:ad:5c:e9:81:c8:b8:a1:fa:d3:88:bf:5d:ce: 9f:5e:59:50:8c:40:19:a6:5f:36:33:d2:ea:d0:42: 8f:0c:8e:54:2d:1c:08:b2:47:5c:0e:05:33:80:03: 97:19:40:0e:2d:82:c0:45:b9:42:f0:da:1e:d7:23: 54:a0:15:c4:94:2e:da:88:80:92:96:3e:1a:7e:7f: b8:db:39:0b:67:d0:8d:a6:d5:c7:f0:57:b2:c4:5b: 86:79:ca:e6:3a:45:76:5b:1d:72:7c:f3:69:9f:32: 4a:36:3d:ac:b4:74:d6:4f:08:89:c2:8a:57:47:31: f4:46:4b:e5:bd:87:f4:c9:da:89:90:0f:00:09:78: cd:6c:52:f7:20:1e:d1:56:8c:cb:9d:a3:fd:b0:5f: 7b:cd:93:86:35:88:91:cd:f2:32:ed:a7:f6:c7:7f: a9:ea:ad:d4:eb:65:e9:44:fc:6e:93:3e:e7:20:39: ea:c8:13:8d:ba:7e:4c:c4:dc:56:8f:6a:d4:78:fd: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:78:F6:33:A1:D2:58:16:B3:A9:0F:05:9F:CE:C0:76:88:41:EA X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a8:a0:04:fd:65:d9:96:81:ef:32:3f:65:e9:e4:75:ea:92: 36:fe:27:ca:14:29:2b:8f:fe:5c:ac:74:45:8a:45:b3:37:cb: 40:db:9a:5a:16:2e:aa:37:3b:24:88:92:2a:68:53:49:70:ab: c0:f7:56:b3:b1:92:10:d8:dd:0c:fc:a9:cb:b7:44:b3:b5:dd: d3:0b:58:09:0d:80:c6:65:50:a5:d8:bc:d7:9b:10:f5:9b:ff: 08:85:fa:6f:bc:2d:15:51:81:01:6e:fa:34:85:86:88:54:21: c8:49:1d:45:76:34:c4:84:d7:9e:59:83:e5:16:a8:d6:0a:c0: 33:b0:72:f7:ab:0a:e7:5b:00:e9:7d:12:e2:77:c1:ec:7e:24: ff:c7:23:c5:24:e2:6a:76:ba:18:8e:51:46:d4:68:c5:df:7e: 8b:92:39:90:7a:4f:65:4e:41:b3:79:cf:83:fc:b3:b0:82:2d: c3:f5:57:6c:aa:e4:11:24:2d:93:e8:42:99:03:45:b0:a0:c0: 3d:ac:9a:3d:fa:ce:04:66:f9:fb:07:ca:ed:8c:bc:d7:1a:65: 82:35:53:68:39:51:b5:2e:79:c8:df:5e:62:0a:ca:81:9d:54: 1c:51:c2:3e:63:65:47:75:60:49:f2:69:d3:b2:f6:93:ab:95: d2:2a:3f:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUxMjAzMDMyMjE1WhcNMjUxMjEwMDMyMjE1WjAYMRYwFAYD VQQDEw02OTJmYWNlNy1kZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iV6hOyNSHH9rElqhZUispsrsRlA0q7GYD9mlE2wxwvgRCGf2gP5PrWDGwEc uALcwOYvwOD6dQduvUxkUK1c6YHIuKH604i/Xc6fXllQjEAZpl82M9Lq0EKPDI5U LRwIskdcDgUzgAOXGUAOLYLARblC8Noe1yNUoBXElC7aiICSlj4afn+42zkLZ9CN ptXH8FeyxFuGecrmOkV2Wx1yfPNpnzJKNj2stHTWTwiJwopXRzH0RkvlvYf0ydqJ kA8ACXjNbFL3IB7RVozLnaP9sF97zZOGNYiRzfIy7af2x3+p6q3U62XpRPxukz7n IDnqyBONun5MxNxWj2rUeP0miQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6pePYz odJYFrOpDwWfzsB2iEHqMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJqKAE/WXZloHvMj9l6eR16pI2/ifKFCkrj/5crHRFikWzN8tA25pa Fi6qNzskiJIqaFNJcKvA91azsZIQ2N0M/KnLt0Sztd3TC1gJDYDGZVCl2LzXmxD1 m/8IhfpvvC0VUYEBbvo0hYaIVCHISR1FdjTEhNeeWYPlFqjWCsAzsHL3qwrnWwDp fRLid8HsfiT/xyPFJOJqdroYjlFG1GjF336LkjmQek9lTkGzec+D/LOwgi3D9Vds quQRJC2T6EKZA0WwoMA9rJo9+s4EZvn7B8rtjLzXGmWCNVNoOVG1LnnI315iCsqB nVQcUcI+Y2VHdWBJ8mnTsvaTq5XSKj/c -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:18 2025 by rpki-client