This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft File: 8T313f28CQG_wEdBIIjaNJOg8kQ.mft (raw, json) Hash identifier: LzLWp1rxxLExqI0tr+p0prtI3+/Eppg3+Kt3+K20DYE= Subject key identifier: D5:B7:A4:8E:25:1C:17:75:7E:D5:F7:D1:29:54:C1:AD:C4:F5:B1:37 Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44 Certificate issuer: /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft Manifest number: 08 Signing time: Tue 23 Dec 2025 06:54:59 +0000 Manifest this update: Tue 23 Dec 2025 06:54:59 +0000 Manifest next update: Tue 30 Dec 2025 06:54:59 +0000 Files and hashes: 1: 8T313f28CQG_wEdBIIjaNJOg8kQ.crl (hash: eOIRnbZM00MYRV5j8JXKzzkJzodbUZIhOzf06f8DfQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244 Validity Not Before: Dec 23 06:54:59 2025 GMT Not After : Dec 30 06:54:59 2025 GMT Subject: CN=694a3cc3-a3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:88:1a:b8:e3:42:94:c5:34:41:50:f7:c2: be:78:04:a6:e9:10:40:93:33:19:da:00:83:43:ca: f4:fa:b4:be:1a:38:c6:00:32:fc:02:3f:a1:22:94: e8:f9:e2:02:a0:e0:94:84:e8:12:63:fd:56:3b:8f: c3:76:de:85:a2:a7:b0:98:cd:e0:87:c5:dd:e1:a4: 9d:bf:52:eb:d5:36:6c:35:6f:05:d6:53:e5:ac:65: 4c:a3:d7:88:2f:4d:16:fa:8f:a0:ab:41:77:06:c5: 50:ec:5d:2e:00:e5:b4:68:8b:b5:4c:6a:f8:26:60: ec:6c:39:8b:6d:24:fd:e9:78:ba:83:8d:5d:7a:c7: b8:4d:7b:c9:46:d7:36:89:dd:62:37:e4:d0:32:5e: af:1a:3a:6b:fb:61:60:40:81:63:5e:a1:2a:60:92: f6:18:94:fd:de:76:c2:0c:e7:84:23:b4:86:54:0e: 4f:3c:73:d5:d3:fb:a5:bf:dc:d4:be:0d:b3:eb:70: a4:a9:ca:89:84:d3:d0:58:47:92:14:09:bc:a9:06: ca:37:79:38:46:0c:3f:92:ce:4f:01:55:bb:7a:b7: f2:5b:45:e1:b7:de:84:a1:1e:2b:29:5a:71:bc:c8: 9c:3f:98:a2:3a:c4:9b:a7:58:a7:9f:de:21:db:ab: aa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B7:A4:8E:25:1C:17:75:7E:D5:F7:D1:29:54:C1:AD:C4:F5:B1:37 X509v3 Authority Key Identifier: keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:37:35:11:b0:f9:f7:03:23:1c:b6:a1:12:c2:12:b3:2b: fb:c1:3f:52:6e:2a:15:c8:7d:12:fb:80:37:5f:46:e9:58:50: eb:ab:7c:8a:5a:ad:af:41:22:0b:56:92:5e:e1:67:70:5f:c0: ba:6f:95:1d:d3:79:02:c5:8b:52:07:9f:e1:02:24:e5:84:b4: 82:00:df:39:6f:18:4a:2b:51:54:3c:c6:fe:0b:27:d5:e2:c6: 83:00:3d:6e:17:5a:04:f2:c1:5c:e6:b7:2a:71:5e:37:b3:ca: c9:1e:14:da:82:5c:a4:13:22:24:49:43:40:53:d6:5f:63:8c: 22:90:99:3b:83:05:4f:43:0b:fa:83:76:43:83:f8:a5:b9:06: 27:92:7b:af:f1:17:c5:2f:29:94:6b:0c:6b:bc:67:c1:cb:bc: 0c:d7:ca:88:80:f6:d2:ef:97:98:83:81:56:e0:a0:30:33:e1: ea:3d:2f:6a:2b:39:c8:3d:25:b8:46:bd:c8:a6:b3:3a:11:a8: ce:e5:a9:ab:93:75:f9:98:e8:e5:8a:e9:70:d1:e4:66:6f:32: 17:cc:e0:7a:20:6b:73:f5:52:24:1e:5e:25:95:4e:8e:41:eb: 32:59:1c:41:85:be:0d:6f:b0:b6:bf:aa:dd:2a:12:5f:db:83: 57:3f:cd:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTFDNjExMC8GA1UEBRMoRjEzREY1RERGREJDMDkwMUJGQzA0NzQxMjA4OERBMzQ5 M0EwRjI0NDAeFw0yNTEyMjMwNjU0NTlaFw0yNTEyMzAwNjU0NTlaMBgxFjAUBgNV BAMMDTY5NGEzY2MzLWEzZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBVogauONClMU0QVD3wr54BKbpEECTMxnaAINDyvT6tL4aOMYAMvwCP6EilOj5 4gKg4JSE6BJj/VY7j8N23oWip7CYzeCHxd3hpJ2/UuvVNmw1bwXWU+WsZUyj14gv TRb6j6CrQXcGxVDsXS4A5bRoi7VMavgmYOxsOYttJP3peLqDjV16x7hNe8lG1zaJ 3WI35NAyXq8aOmv7YWBAgWNeoSpgkvYYlP3edsIM54QjtIZUDk88c9XT+6W/3NS+ DbPrcKSpyomE09BYR5IUCbypBso3eThGDD+Szk8BVbt6t/JbReG33oShHispWnG8 yJw/mKI6xJunWKef3iHbq6qlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1bekjiUc F3V+1ffRKVTBrcT1sTcwHwYDVR0jBBgwFoAU8T313f28CQG/wEdBIIjaNJOg8kQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMUM2LzQyRTBCNkIyRDUx RjExRjA4NzkyQjU3REM0RjlBRTAyLzhUMzEzZjI4Q1FHX3dFZEJJSWphTkpPZzhr US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFQzMTNmMjhDUUdfd0VkQklJamFOSk9nOGtRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF MUM2LzQyRTBCNkIyRDUxRjExRjA4NzkyQjU3REM0RjlBRTAyLzhUMzEzZjI4Q1FH X3dFZEJJSWphTkpPZzhrUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwNNzURsPn3AyMctqESwhKzK/vBP1JuKhXIfRL7gDdfRulYUOurfIpa ra9BIgtWkl7hZ3BfwLpvlR3TeQLFi1IHn+ECJOWEtIIA3zlvGEorUVQ8xv4LJ9Xi xoMAPW4XWgTywVzmtypxXjezyskeFNqCXKQTIiRJQ0BT1l9jjCKQmTuDBU9DC/qD dkOD+KW5BieSe6/xF8UvKZRrDGu8Z8HLvAzXyoiA9tLvl5iDgVbgoDAz4eo9L2or Ocg9JbhGvcimszoRqM7lqauTdfmY6OWK6XDR5GZvMhfM4Hoga3P1UiQeXiWVTo5B 6zJZHEGFvg1vsLa/qt0qEl/bg1c/zWA= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:01 2025 by rpki-client