This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: kI8uK1ck+1vQ3IqRkCFFIrgHd0iQAgZqD8fPMFZFHiw= Subject key identifier: FC:A1:F6:07:0D:6C:F9:7B:C2:10:DD:6C:34:DD:60:70:76:BA:87:28 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 03C6 Signing time: Mon 22 Dec 2025 23:44:14 +0000 Manifest this update: Mon 22 Dec 2025 23:44:13 +0000 Manifest next update: Mon 29 Dec 2025 23:44:13 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: MQU1sRUzO0qmUZMI7O5Q70W+ec15IeobXHWO4a6fb3k=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: XtdmJSxuSqJLeY4yGf6y31fYXsFvKu/1qBD/nGzqK1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Dec 22 23:44:13 2025 GMT Not After : Dec 29 23:44:13 2025 GMT Subject: CN=6949d7ce-1ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:71:62:bb:53:c0:07:29:86:24:53:99:c7: a3:97:b6:61:aa:81:81:68:fc:f2:81:0b:93:e7:ed: 45:47:da:6b:aa:1c:55:c9:9b:df:84:af:2b:bf:04: 4f:03:e7:83:32:bd:b2:29:e7:1a:e0:49:4c:a7:cf: 52:bb:16:db:31:62:a5:eb:92:cb:62:8a:c0:f9:7d: 73:44:d7:c6:73:d6:91:35:8e:7b:05:af:32:83:68: be:e3:dc:2d:65:be:50:d5:30:52:21:67:c3:fb:87: a3:9c:1a:7c:69:1b:83:13:b3:e1:04:15:7c:8f:30: 33:45:58:75:e0:5e:b3:4d:51:78:ce:6c:37:61:50: b4:28:10:84:cc:37:9d:85:66:3d:40:ee:09:73:f5: c9:f9:d2:98:35:52:77:ea:ba:98:10:9a:cf:cf:21: 13:d0:90:fd:bd:84:7c:71:0c:e4:44:50:48:3a:cd: 3a:1e:6d:40:47:67:65:38:3b:73:00:50:ad:91:ce: ad:64:7b:64:0c:18:35:af:5f:cf:58:4b:92:15:90: e2:ba:09:de:1b:19:bb:d3:d3:f8:4c:6c:1d:22:ef: 49:9b:ca:8e:e5:1d:b8:20:9c:a4:3b:2c:6e:b4:f7: c1:84:59:12:cf:a8:77:e7:23:bf:4d:b6:52:9d:a2: 23:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:F6:07:0D:6C:F9:7B:C2:10:DD:6C:34:DD:60:70:76:BA:87:28 X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:da:05:25:32:1c:05:44:18:37:9b:4c:af:b3:55:4e:e5:55: eb:8a:28:81:cd:73:4f:96:49:49:1d:47:d3:54:83:1b:d0:41: 11:ec:d1:ea:b7:f3:67:ea:88:cd:07:c5:a6:81:cc:4f:90:0f: f7:72:25:63:23:89:d2:7e:3d:4d:2d:83:5e:62:cb:f1:76:49: 04:68:1a:07:77:c4:17:e2:b7:95:a8:22:7e:4e:96:a0:d9:a2: 60:31:cd:7b:e6:9c:5f:30:c8:f5:69:41:fc:db:ac:3c:9b:c0: 5e:27:21:d5:ec:00:38:c5:df:20:07:a5:34:ae:f4:b3:4b:13: d5:07:d0:97:6a:c3:31:11:11:c6:1b:03:43:37:3c:f0:da:06: 7f:3e:50:b3:21:3d:e8:ed:1d:2b:30:43:4e:84:91:7b:63:3e: 6d:96:b0:b0:fe:6a:71:ab:75:64:9e:db:60:5a:87:d4:72:f4: 9b:db:37:5a:43:4f:be:c6:d7:01:12:f5:8a:6f:c4:66:58:73: eb:00:69:9a:c4:86:6a:dc:93:b7:01:2c:22:60:2b:5f:d1:68: a6:5b:8d:d9:d8:c3:b8:69:f8:5b:b8:5e:1a:2f:c1:54:ba:a6: 12:29:7e:3b:ee:4b:a0:f5:68:26:a8:21:9b:cf:72:67:cd:74: 46:eb:d9:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUxMjIyMjM0NDEzWhcNMjUxMjI5MjM0NDEzWjAYMRYwFAYD VQQDDA02OTQ5ZDdjZS0xZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK9xYrtTwAcphiRTmcejl7ZhqoGBaPzygQuT5+1FR9prqhxVyZvfhK8rvwRP A+eDMr2yKeca4ElMp89SuxbbMWKl65LLYorA+X1zRNfGc9aRNY57Ba8yg2i+49wt Zb5Q1TBSIWfD+4ejnBp8aRuDE7PhBBV8jzAzRVh14F6zTVF4zmw3YVC0KBCEzDed hWY9QO4Jc/XJ+dKYNVJ36rqYEJrPzyET0JD9vYR8cQzkRFBIOs06Hm1AR2dlODtz AFCtkc6tZHtkDBg1r1/PWEuSFZDiugneGxm709P4TGwdIu9Jm8qO5R24IJykOyxu tPfBhFkSz6h35yO/TbZSnaIjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyh9gcN bPl7whDdbDTdYHB2uocoMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB92gUlMhwFRBg3m0yvs1VO5VXriiiBzXNPlklJHUfTVIMb0EER7NHq t/Nn6ojNB8WmgcxPkA/3ciVjI4nSfj1NLYNeYsvxdkkEaBoHd8QX4reVqCJ+Tpag 2aJgMc175pxfMMj1aUH826w8m8BeJyHV7AA4xd8gB6U0rvSzSxPVB9CXasMxERHG GwNDNzzw2gZ/PlCzIT3o7R0rMENOhJF7Yz5tlrCw/mpxq3VknttgWofUcvSb2zda Q0++xtcBEvWKb8RmWHPrAGmaxIZq3JO3ASwiYCtf0WimW43Z2MO4afhbuF4aL8FU uqYSKX477kug9WgmqCGbz3JnzXRG69mU -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:33 2025 by rpki-client