This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: MT08cpW52kZHXtvx0Jo0rvW+IB7Bldm8j0sR2ZFR5lY= Subject key identifier: C3:DD:A9:71:F4:B7:47:CB:26:3C:D7:D7:13:B6:07:21:65:D4:2D:3D Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0DCC Signing time: Wed 10 Dec 2025 17:17:19 +0000 Manifest this update: Wed 10 Dec 2025 17:17:18 +0000 Manifest next update: Wed 17 Dec 2025 17:17:18 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: Rwnhq3Wqp5wkYaGSDxSp3qrOQWCWRZ5ycGOGW3zIwfI=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3587 (0xe03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Dec 10 17:17:18 2025 GMT Not After : Dec 17 17:17:18 2025 GMT Subject: CN=6939ab1e-29dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:c0:d4:5c:8a:ff:bb:0a:2b:d1:a0:0a:62: 43:ba:3a:81:74:13:cb:5a:65:6e:e6:a1:e2:a0:d9: f6:91:43:44:9e:1e:a9:ca:6b:0f:c5:51:b3:4b:7d: a1:74:dc:dd:a7:6a:26:2b:92:e8:77:a1:c2:9e:fe: 00:c2:a8:62:aa:0f:85:f6:7a:bc:b4:c8:79:f1:41: e9:86:f6:28:c9:34:b3:65:c8:f0:ca:74:c8:48:6b: 88:c6:f3:87:d9:06:05:d3:63:11:1c:37:dd:34:b3: 01:88:04:99:c3:da:d5:26:cd:a8:b5:06:31:89:99: e8:bf:cd:14:4c:04:f4:4b:25:dd:ce:d5:6c:03:af: 3b:cc:e0:97:4d:f0:24:87:ea:30:ee:ed:3c:40:50: 24:bc:fc:9d:02:37:4d:c0:a4:fb:a4:c6:69:66:d7: e1:55:fc:92:06:5d:c8:0f:31:42:b5:7f:e5:cd:95: df:52:70:b8:e2:c8:9b:21:0b:37:94:55:f4:5e:cb: 66:4f:db:6c:7f:8c:b7:67:5d:91:77:6b:2c:19:36: ef:ae:1e:28:bb:41:3f:33:52:6a:98:bb:6b:98:f8: 60:c7:30:65:51:23:66:8b:cc:e5:0e:44:80:5d:51: b4:6c:0f:1c:74:78:00:d1:2c:51:39:95:4f:11:9e: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:A9:71:F4:B7:47:CB:26:3C:D7:D7:13:B6:07:21:65:D4:2D:3D X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0c:3d:39:bb:e2:a0:a7:21:a5:25:5e:6c:d6:a1:41:53:1e: d0:5e:c0:18:e6:03:a2:4d:54:14:47:69:67:73:30:e4:af:01: 76:73:25:8f:6a:03:30:e2:70:dc:c3:d2:30:aa:53:24:5d:0d: 3f:ae:bc:ac:49:bd:47:12:cd:c3:d5:4e:c7:00:8f:24:a3:0b: 1c:c5:01:0e:cb:55:c3:42:a8:f4:31:45:4b:89:89:ff:b5:18: 49:a0:0e:17:d1:d3:0f:da:6e:49:da:e3:67:82:8c:45:ef:f6: 6c:90:a7:47:31:be:67:12:16:11:4e:d8:dc:09:97:88:fe:7c: f6:f3:61:ca:1a:b9:b0:b7:d6:30:d7:b9:2d:9f:57:2c:ef:34: 53:c2:54:ca:cb:90:8a:16:14:eb:13:fe:09:18:63:48:2e:a5: 15:27:eb:92:6a:77:87:09:f3:64:86:59:24:5d:96:21:5e:51: e5:64:49:f7:65:17:8f:49:f3:bd:f1:82:7e:b0:23:13:b7:c1: 6a:56:76:f4:8d:2b:af:4c:7f:55:ce:a8:64:89:0d:46:6f:4e: d3:0b:23:1c:b3:c3:18:2f:bb:66:76:82:30:1c:f0:ce:5f:d3: 32:32:8a:a7:d5:f2:ba:f8:f6:8a:af:6f:d1:66:dd:ef:7a:58: bd:b8:fd:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUxMjEwMTcxNzE4WhcNMjUxMjE3MTcxNzE4WjAYMRYwFAYD VQQDEw02OTM5YWIxZS0yOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiLA1FyK/7sKK9GgCmJDujqBdBPLWmVu5qHioNn2kUNEnh6pymsPxVGzS32h dNzdp2omK5Lod6HCnv4Awqhiqg+F9nq8tMh58UHphvYoyTSzZcjwynTISGuIxvOH 2QYF02MRHDfdNLMBiASZw9rVJs2otQYxiZnov80UTAT0SyXdztVsA687zOCXTfAk h+ow7u08QFAkvPydAjdNwKT7pMZpZtfhVfySBl3IDzFCtX/lzZXfUnC44sibIQs3 lFX0XstmT9tsf4y3Z12Rd2ssGTbvrh4ou0E/M1JqmLtrmPhgxzBlUSNmi8zlDkSA XVG0bA8cdHgA0SxROZVPEZ56LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPdqXH0 t0fLJjzX1xO2ByFl1C09MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoDD05u+KgpyGlJV5s1qFBUx7QXsAY5gOiTVQUR2lnczDkrwF2cyWP agMw4nDcw9IwqlMkXQ0/rrysSb1HEs3D1U7HAI8kowscxQEOy1XDQqj0MUVLiYn/ tRhJoA4X0dMP2m5J2uNngoxF7/ZskKdHMb5nEhYRTtjcCZeI/nz282HKGrmwt9Yw 17ktn1cs7zRTwlTKy5CKFhTrE/4JGGNILqUVJ+uSaneHCfNkhlkkXZYhXlHlZEn3 ZRePSfO98YJ+sCMTt8FqVnb0jSuvTH9VzqhkiQ1Gb07TCyMcs8MYL7tmdoIwHPDO X9MyMoqn1fK6+PaKr2/RZt3veli9uP0M -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:46 2025 by rpki-client