This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: Dr0knxy5hEZsP8e9/nY7E+zS5U+aHx0d3aD9Lp45DXE= Subject key identifier: 8A:9F:23:31:98:5C:40:D3:17:F3:85:5E:7A:8F:8B:7A:C7:71:4C:1F Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 27DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 27B3 Signing time: Wed 24 Dec 2025 15:30:50 +0000 Manifest this update: Wed 24 Dec 2025 15:30:50 +0000 Manifest next update: Wed 31 Dec 2025 15:30:50 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: ckOJuMGP4+AM3nrx/28wniq+QHf1IvS/Ueaho6acC5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10203 (0x27db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Dec 24 15:30:50 2025 GMT Not After : Dec 31 15:30:50 2025 GMT Subject: CN=694c072a-64e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:9f:4e:34:9f:8e:bc:b2:f3:fb:44:b9:f1: c5:9e:c6:13:98:5d:00:10:69:0c:f1:7e:fc:2a:6f: 76:25:21:17:ef:59:09:5d:26:3d:25:c6:2c:26:27: 98:18:7a:7f:be:e0:b0:ea:66:f5:e9:e0:dd:91:15: ed:de:a6:bf:c3:cb:fb:d4:46:47:93:5b:81:e0:2f: 7f:65:06:ac:56:ca:36:65:a2:db:c0:e0:35:63:dd: 39:ca:80:16:e9:41:9e:2e:ba:4e:f3:fa:02:2b:e3: ef:de:7b:96:53:8f:b3:0b:15:f5:f2:15:24:b9:4b: b8:b7:87:26:22:0f:8a:8d:fa:ee:6a:45:0e:f3:d6: 66:01:77:1f:e4:fe:17:8a:4d:10:33:b1:87:04:04: c1:62:ae:3b:40:14:b3:9b:a5:f0:a2:0a:5c:eb:d8: 07:f5:7a:bd:3a:30:b7:4c:57:03:45:0e:58:09:c9: ac:81:53:ce:e9:87:c8:44:7f:c4:06:3d:7e:43:32: a7:84:96:6a:9d:b0:8d:11:39:96:f8:28:ec:2d:40: e7:f8:7c:5b:13:7c:6d:7f:a0:94:da:a5:b0:89:04: f7:8c:5d:69:82:87:5e:80:a7:55:95:a3:3d:af:a6: d3:41:35:71:5f:df:ba:e0:1f:c2:c1:a1:8c:a1:62: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:23:31:98:5C:40:D3:17:F3:85:5E:7A:8F:8B:7A:C7:71:4C:1F X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:77:77:aa:cf:33:01:ad:74:5f:1c:6c:5b:20:8f:eb:43: 3b:5f:55:bc:a5:11:51:6e:bc:87:e0:30:da:ef:9f:78:e9:39: 80:f1:c4:bc:3a:7b:31:39:65:ca:70:35:7d:c2:63:15:63:d2: e3:89:2a:a5:8c:8c:ee:10:22:a4:93:60:fd:e1:14:2b:94:2f: 58:9b:26:dc:9b:d6:79:2a:92:e4:ae:ae:c3:11:f4:0e:b2:d6: 71:14:bc:83:58:85:10:61:3b:08:d5:0f:6e:e0:b1:d1:77:b6: b4:21:18:d6:23:69:43:87:78:af:f0:38:c8:be:d2:94:49:7e: 6f:6e:94:ad:f8:11:be:28:2e:f4:4a:5e:bf:b2:9c:2b:a8:e3: 5a:ab:3f:e3:b9:49:2d:23:b9:79:75:a7:57:0a:c2:a9:96:bf: 2d:8b:69:9a:8b:00:67:dc:39:9e:f2:a8:4f:e0:82:08:23:79: 7f:01:90:2a:57:ef:32:89:75:9d:49:94:01:bd:45:ad:e2:a0: ee:f7:76:1f:1f:9e:02:aa:32:56:59:ca:20:7f:8c:32:28:e0: f9:69:d3:f2:ce:c2:ef:f1:50:66:90:c7:28:91:80:e1:9e:0b: 90:92:8d:2b:3b:d4:42:30:ac:7d:18:9e:37:5e:f7:aa:18:48: cc:63:e4:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjUxMjI0MTUzMDUwWhcNMjUxMjMxMTUzMDUwWjAYMRYwFAYD VQQDDA02OTRjMDcyYS02NGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17+fTjSfjryy8/tEufHFnsYTmF0AEGkM8X78Km92JSEX71kJXSY9JcYsJieY GHp/vuCw6mb16eDdkRXt3qa/w8v71EZHk1uB4C9/ZQasVso2ZaLbwOA1Y905yoAW 6UGeLrpO8/oCK+Pv3nuWU4+zCxX18hUkuUu4t4cmIg+KjfruakUO89ZmAXcf5P4X ik0QM7GHBATBYq47QBSzm6Xwogpc69gH9Xq9OjC3TFcDRQ5YCcmsgVPO6YfIRH/E Bj1+QzKnhJZqnbCNETmW+CjsLUDn+HxbE3xtf6CU2qWwiQT3jF1pgodegKdVlaM9 r6bTQTVxX9+64B/CwaGMoWKthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqfIzGY XEDTF/OFXnqPi3rHcUwfMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVHd3qs8zAa10XxxsWyCP60M7X1W8pRFRbryH4DDa75946TmA8cS8 OnsxOWXKcDV9wmMVY9LjiSqljIzuECKkk2D94RQrlC9Ymybcm9Z5KpLkrq7DEfQO stZxFLyDWIUQYTsI1Q9u4LHRd7a0IRjWI2lDh3iv8DjIvtKUSX5vbpSt+BG+KC70 Sl6/spwrqONaqz/juUktI7l5dadXCsKplr8ti2maiwBn3Dme8qhP4IIII3l/AZAq V+8yiXWdSZQBvUWt4qDu93YfH54CqjJWWcogf4wyKOD5adPyzsLv8VBmkMcokYDh nguQko0rO9RCMKx9GJ43XveqGEjMY+TW -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:06 2025 by rpki-client