This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: bsi61KeR8tbap0Bi4xORfX+dBGP7zl/ZZGnNI09zFwQ= Subject key identifier: ED:F3:58:AF:C8:FC:C9:BA:53:A2:25:49:97:DF:B3:5B:BF:CC:C3:3A Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 0619 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 0611 Signing time: Mon 22 Dec 2025 22:01:48 +0000 Manifest this update: Mon 22 Dec 2025 22:01:48 +0000 Manifest next update: Mon 29 Dec 2025 22:01:48 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: a8aypxA/9/eGZI8ng/+6KDMuZelc/+fFNmxvfpyh3T0=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: Yz0s0SgslhEB/Ux9X8zgj1HP5jX8LMQjR8aSmtueyxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1561 (0x619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Dec 22 22:01:48 2025 GMT Not After : Dec 29 22:01:48 2025 GMT Subject: CN=6949bfcc-f5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:c8:3a:b1:a1:bf:77:12:52:e5:3d:60:ee: 55:dd:da:72:7f:0b:15:bd:c3:75:af:f5:a3:71:cc: a8:30:80:c5:85:4f:43:45:ff:c3:5d:b4:84:a3:81: d4:8d:81:f1:65:ee:6d:60:d5:5a:0f:21:c5:27:d0: 21:a8:ef:9f:81:52:08:f2:5b:9e:69:f3:08:97:89: 56:62:63:59:31:21:89:66:5b:20:5e:1a:99:66:88: 90:71:83:76:94:84:45:b1:f9:be:4e:03:ae:9b:3d: 5b:d8:1f:14:07:ea:62:8f:b1:ad:45:ec:1a:28:c3: 4f:ec:a4:69:4b:25:4c:d0:25:8f:62:48:9f:c0:0e: 34:af:b9:da:37:aa:9b:4c:80:9c:91:f1:22:13:cd: f5:3a:7c:ea:1b:53:5f:6d:b6:fb:16:c8:ae:95:98: 6a:96:45:be:2e:ec:3d:61:3e:69:c7:90:d5:e2:bb: f4:be:1b:03:ac:87:4a:ec:f2:5a:75:95:3b:dd:f6: 15:16:fa:6d:9d:9e:eb:7a:96:7b:cf:d5:6c:cd:76: 25:da:7c:d8:23:6f:83:01:75:39:cf:35:5e:d7:80: f3:30:e3:62:4b:51:34:8b:4d:d7:fb:a2:7a:ae:62: c1:b9:9b:fd:9e:2c:17:a1:fa:8a:53:76:a6:10:67: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F3:58:AF:C8:FC:C9:BA:53:A2:25:49:97:DF:B3:5B:BF:CC:C3:3A X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ed:1f:bf:62:d0:db:a9:4e:53:e5:2f:db:e9:b8:08:94:0a: b1:67:fe:bf:da:41:3b:fe:66:43:2c:90:19:46:a6:e1:bf:4d: c3:dc:04:0d:31:b0:cb:43:eb:44:05:9d:c4:b0:19:70:70:6d: 1a:f2:1a:4b:ff:91:e4:d8:3c:9d:b3:bf:c4:1c:66:a0:19:fa: f7:f1:21:d6:b5:3e:90:d0:91:41:e7:1a:c5:82:34:06:64:dc: d2:87:af:32:24:ff:67:e0:0f:36:cd:90:b3:1d:95:43:a2:85: a7:28:b6:a7:48:bd:77:b9:bf:41:88:5d:30:cb:6b:ce:4f:a3: f5:77:2b:f8:ca:86:a9:0d:fd:08:fb:4b:ca:3e:92:9f:15:dd: f3:d9:8e:5d:32:9d:fd:7f:f2:c1:21:9c:3c:2c:04:91:17:e7: 84:58:de:4d:13:15:ff:d9:b3:be:07:6f:51:11:8c:c2:e5:92: 91:f1:9d:4a:1c:8a:3c:11:e0:f3:f5:c8:c7:f6:59:88:fe:26: 62:a9:da:f9:29:f8:71:fb:8e:13:44:1f:3a:02:c6:d6:3e:3f: c0:da:c3:27:e5:0a:91:58:28:85:fd:c1:6e:33:c9:ce:8b:4f: b2:11:ce:ad:58:71:b3:0f:64:03:e4:d7:2f:9c:08:58:f2:5f: be:4d:7e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUxMjIyMjIwMTQ4WhcNMjUxMjI5MjIwMTQ4WjAYMRYwFAYD VQQDDA02OTQ5YmZjYy1mNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqDIOrGhv3cSUuU9YO5V3dpyfwsVvcN1r/WjccyoMIDFhU9DRf/DXbSEo4HU jYHxZe5tYNVaDyHFJ9AhqO+fgVII8lueafMIl4lWYmNZMSGJZlsgXhqZZoiQcYN2 lIRFsfm+TgOumz1b2B8UB+pij7GtRewaKMNP7KRpSyVM0CWPYkifwA40r7naN6qb TICckfEiE831OnzqG1Nfbbb7FsiulZhqlkW+Luw9YT5px5DV4rv0vhsDrIdK7PJa dZU73fYVFvptnZ7repZ7z9VszXYl2nzYI2+DAXU5zzVe14DzMONiS1E0i03X+6J6 rmLBuZv9niwXofqKU3amEGcy+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3zWK/I /Mm6U6IlSZffs1u/zMM6MB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq7R+/YtDbqU5T5S/b6bgIlAqxZ/6/2kE7/mZDLJAZRqbhv03D3AQN MbDLQ+tEBZ3EsBlwcG0a8hpL/5Hk2Dyds7/EHGagGfr38SHWtT6Q0JFB5xrFgjQG ZNzSh68yJP9n4A82zZCzHZVDooWnKLanSL13ub9BiF0wy2vOT6P1dyv4yoapDf0I +0vKPpKfFd3z2Y5dMp39f/LBIZw8LASRF+eEWN5NExX/2bO+B29REYzC5ZKR8Z1K HIo8EeDz9cjH9lmI/iZiqdr5Kfhx+44TRB86AsbWPj/A2sMn5QqRWCiF/cFuM8nO i0+yEc6tWHGzD2QD5NcvnAhY8l++TX4a -----END CERTIFICATE-----Generated at Tue Dec 23 04:11:47 2025 by rpki-client