This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json) Hash identifier: LTDckk5wLFFs2EoaTFmqJA5uTn+1in7FBI++qJMUePg= Subject key identifier: AC:9A:EE:D3:9C:E7:98:EF:8C:C9:EC:F4:EE:67:D4:3B:48:67:36:64 Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft Manifest number: 1C Signing time: Thu 04 Dec 2025 22:04:57 +0000 Manifest this update: Thu 04 Dec 2025 22:04:56 +0000 Manifest next update: Thu 11 Dec 2025 22:04:56 +0000 Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: 9SRuB4kSuxBhIrBfEnSZB1jfad/tJt5Sbo+XaSMxVhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Validity Not Before: Dec 4 22:04:56 2025 GMT Not After : Dec 11 22:04:56 2025 GMT Subject: CN=69320588-e911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:d9:f8:b2:1e:70:59:23:00:fa:7b:a2:89: a7:49:8d:8c:48:3e:e8:46:28:ed:ea:a9:ff:56:bf: a2:70:f0:76:f1:4e:41:55:38:d3:05:8d:31:2b:4b: bc:98:29:27:c3:96:b8:58:1f:9a:b3:b5:77:5d:05: af:f5:06:84:b8:6f:98:6f:18:40:75:83:26:83:63: e8:27:4f:09:d6:02:f8:5e:9f:4b:c1:60:93:7b:21: 8c:12:43:e4:85:7d:dd:ad:dc:92:80:a3:d0:01:fa: 83:2d:5d:f8:2d:62:42:00:52:23:59:62:0b:64:8c: 9a:28:32:59:d2:01:e0:9b:a9:7f:77:91:a1:06:74: 78:dd:9b:1c:32:a9:37:89:49:2d:50:9b:fa:c5:b1: c2:d5:e8:e5:29:89:86:1d:5d:55:7e:5e:55:59:b1: 4c:e4:05:ef:d0:de:e9:78:81:d9:a5:26:ad:04:26: df:c0:06:e9:f6:72:77:bc:75:f6:b0:01:b1:2c:67: 84:52:c7:e4:f9:d0:61:05:d8:a9:97:98:7f:75:37: ad:23:88:ee:ac:be:50:a8:99:5d:a7:0a:43:d9:8b: e7:54:8b:f4:2a:53:61:d5:3d:4c:c6:a4:bd:e7:9e: d3:2b:78:86:78:0b:b3:f3:6f:49:bd:50:f5:f8:26: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9A:EE:D3:9C:E7:98:EF:8C:C9:EC:F4:EE:67:D4:3B:48:67:36:64 X509v3 Authority Key Identifier: keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:99:38:99:b5:5d:dd:28:a7:26:c9:8e:b6:62:6b:6f:48:2f: 17:c3:ed:c5:39:34:5c:1d:e6:b9:02:8a:51:27:51:14:7e:11: 23:82:04:87:e8:82:32:cf:1d:d5:a2:e3:24:14:fe:79:8d:31: ef:3e:ff:04:76:af:82:1d:75:c3:65:1c:93:11:4f:b5:2f:a2: 7c:bb:25:f9:f5:92:13:7f:c9:14:c9:55:b8:36:b6:86:0f:57: fa:4d:ca:d2:bb:68:bb:f2:f5:78:9b:76:f6:7b:14:ce:6a:7d: fc:0e:99:39:6b:0f:73:61:9c:38:9f:4d:9d:26:51:f4:5f:e5: fc:f1:cd:05:7f:d4:13:c8:78:2d:f9:f7:31:c4:e1:ba:81:5b: 4c:b3:d5:b3:ae:02:85:90:2e:0d:7b:79:1a:95:8d:ae:e3:37: e6:40:74:74:47:dc:46:bc:cb:11:ac:ae:c2:36:cd:58:5d:a0: c3:26:00:da:27:5f:32:35:99:7c:5d:27:86:25:c4:7f:e2:0c: 4a:92:74:ad:22:ce:8d:10:5b:60:36:01:55:cd:cf:74:b1:6f: 79:10:92:12:e3:3d:6b:2d:5b:38:fb:cf:56:c7:b8:4d:8e:01: ce:9b:e6:49:20:1e:a3:cc:c6:e0:a3:f4:3a:cd:ac:16:29:b3: cd:52:0a:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTRCNzExMC8GA1UEBRMoOTdDODU3QTc1QzlBNkUyOThCMDlBMDYxRDhGN0NFMTA3 QkY5RDMzMzAeFw0yNTEyMDQyMjA0NTZaFw0yNTEyMTEyMjA0NTZaMBgxFjAUBgNV BAMTDTY5MzIwNTg4LWU5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8e9n4sh5wWSMA+nuiiadJjYxIPuhGKO3qqf9Wv6Jw8HbxTkFVONMFjTErS7yY KSfDlrhYH5qztXddBa/1BoS4b5hvGEB1gyaDY+gnTwnWAvhen0vBYJN7IYwSQ+SF fd2t3JKAo9AB+oMtXfgtYkIAUiNZYgtkjJooMlnSAeCbqX93kaEGdHjdmxwyqTeJ SS1Qm/rFscLV6OUpiYYdXVV+XlVZsUzkBe/Q3ul4gdmlJq0EJt/ABun2cne8dfaw AbEsZ4RSx+T50GEF2KmXmH91N60jiO6svlComV2nCkPZi+dUi/QqU2HVPUzGpL3n ntMreIZ4C7Pzb0m9UPX4Js9jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrJru05zn mO+Myez07mfUO0hnNmQwHwYDVR0jBBgwFoAUl8hXp1yabimLCaBh2PfOEHv50zMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNEI3L0JEOEFFRDA4QTY0 MjExRjBBQzk5NTgzM0M0RjlBRTAyL2w4aFhwMXlhYmltTENhQmgyUGZPRUh2NTB6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDhoWHAxeWFiaW1MQ2FCaDJQZk9FSHY1MHpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF NEI3L0JEOEFFRDA4QTY0MjExRjBBQzk5NTgzM0M0RjlBRTAyL2w4aFhwMXlhYmlt TENhQmgyUGZPRUh2NTB6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOZOJm1Xd0opybJjrZia29ILxfD7cU5NFwd5rkCilEnURR+ESOCBIfo gjLPHdWi4yQU/nmNMe8+/wR2r4IddcNlHJMRT7Uvony7Jfn1khN/yRTJVbg2toYP V/pNytK7aLvy9XibdvZ7FM5qffwOmTlrD3NhnDifTZ0mUfRf5fzxzQV/1BPIeC35 9zHE4bqBW0yz1bOuAoWQLg17eRqVja7jN+ZAdHRH3Ea8yxGsrsI2zVhdoMMmANon XzI1mXxdJ4YlxH/iDEqSdK0izo0QW2A2AVXNz3Sxb3kQkhLjPWstWzj7z1bHuE2O Ac6b5kkgHqPMxuCj9DrNrBYps81SCsg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:32 2025 by rpki-client