This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: DZDFVpSpv0o5DWjWfTg0vTivnq1wBLDRxepJTiAxHaY= Subject key identifier: 34:AD:DD:05:31:0C:23:92:4F:5D:CF:D7:E2:1A:BB:17:9D:8E:08:1B Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: B1 Signing time: Sun 21 Dec 2025 05:13:47 +0000 Manifest this update: Sun 21 Dec 2025 05:13:47 +0000 Manifest next update: Sun 28 Dec 2025 05:13:47 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: I7oVV7UZ9pT7UKiSFcgYAhCtCC2l21l/PR9q6GbfMIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Dec 21 05:13:47 2025 GMT Not After : Dec 28 05:13:47 2025 GMT Subject: CN=6947820b-4342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:74:f6:da:dd:80:8e:b0:d1:2f:c9:7d:99:e4: 3e:c1:3c:9b:ac:45:f1:1c:00:c0:6e:2f:49:a6:2d: 2d:3f:85:f8:ac:27:af:50:37:03:67:6c:c3:75:e4: ed:c4:73:ab:99:dd:71:a4:0e:42:11:9b:92:59:cc: 18:6f:54:62:a2:2c:f3:7a:33:2d:fd:27:d3:0e:89: 44:38:31:9f:5f:cb:3a:5e:22:7b:59:5b:f2:cf:33: 51:e1:7a:14:05:b0:d5:e5:72:74:18:52:97:a4:41: 10:42:7a:4f:fc:94:f6:7c:4c:2f:93:0d:5f:60:f2: f3:43:b9:1e:11:aa:30:dc:d7:39:5f:37:83:e6:c7: d4:5c:ab:e3:30:62:96:fb:0b:da:c6:4e:36:63:fc: f6:de:17:c7:71:c3:a8:06:0a:1f:6e:9f:96:21:2d: f1:f2:92:f9:3c:aa:dd:3b:80:53:c0:2d:38:35:3d: 0d:60:aa:a5:76:ef:ea:ba:69:77:41:91:1b:d4:23: b4:cb:7d:eb:08:cf:16:31:7e:44:e0:f1:7b:d2:d9: 5a:18:4c:47:7b:5d:48:06:27:27:0c:25:38:db:44: 0d:42:67:52:18:51:14:44:6c:ea:c6:8f:e0:85:61: 8c:9e:8f:b8:ea:d8:de:d7:c2:1d:89:d3:b1:d6:53: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:DD:05:31:0C:23:92:4F:5D:CF:D7:E2:1A:BB:17:9D:8E:08:1B X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:99:78:9a:d5:bf:ee:43:76:d8:90:01:15:40:46:9b:81:94: 86:6c:2a:20:cb:5f:a8:86:09:65:ae:0b:7d:9a:08:be:78:cd: 2d:ba:4c:fc:78:dc:09:80:83:37:78:6d:40:b9:a6:8d:80:17: 56:37:47:24:f6:bf:07:32:a3:5f:be:a1:22:9f:42:ed:8e:42: 39:74:43:11:1f:5b:4a:0e:6f:ca:36:74:ed:9d:4f:78:b7:3a: 27:44:c4:44:dc:d7:b9:d8:03:49:9b:53:ef:93:89:46:c8:01: 43:79:fd:fc:fe:69:92:88:89:5d:3a:bb:1c:49:42:e7:2f:2a: 9d:4c:2b:4c:e0:d7:e3:72:cb:74:e4:90:f6:89:27:db:14:78: 29:df:b4:31:ae:c8:88:fa:2c:02:77:e1:f8:79:94:0e:95:2d: e2:27:e7:0c:bb:7e:47:97:9a:b5:45:29:ae:78:09:67:33:eb: c8:c6:47:92:79:ed:a7:01:11:dc:ce:58:97:4d:1c:f3:b0:d4: 24:83:47:4f:a6:7e:5b:38:69:3e:11:2d:33:ff:df:69:8f:91: 05:1d:a5:35:0f:b2:c3:bd:12:de:d5:8e:3c:ef:b4:f3:94:5e: 64:15:6a:4b:e6:50:55:86:3d:78:06:3d:97:96:be:72:37:ec: 2c:49:26:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRFRjYxMTAvBgNVBAUTKEYyQUY5MThCMUYxNDhBQ0FFNEIwMzk0NTAyODRERTQ5 MEQ3OTBFNTkwHhcNMjUxMjIxMDUxMzQ3WhcNMjUxMjI4MDUxMzQ3WjAYMRYwFAYD VQQDDA02OTQ3ODIwYi00MzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhHT22t2AjrDRL8l9meQ+wTybrEXxHADAbi9Jpi0tP4X4rCevUDcDZ2zDdeTt xHOrmd1xpA5CEZuSWcwYb1RioizzejMt/SfTDolEODGfX8s6XiJ7WVvyzzNR4XoU BbDV5XJ0GFKXpEEQQnpP/JT2fEwvkw1fYPLzQ7keEaow3Nc5XzeD5sfUXKvjMGKW +wvaxk42Y/z23hfHccOoBgofbp+WIS3x8pL5PKrdO4BTwC04NT0NYKqldu/quml3 QZEb1CO0y33rCM8WMX5E4PF70tlaGExHe11IBicnDCU420QNQmdSGFEURGzqxo/g hWGMno+46tje18IdidOx1lMC8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSt3QUx DCOST13P1+IauxedjggbMB8GA1UdIwQYMBaAFPKvkYsfFIrK5LA5RQKE3kkNeQ5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEVGNi85NjQ2MzQ1OEQw RDQxMUVGQkNENTEyM0VDNEY5QUUwMi84cS1SaXg4VWlzcmtzRGxGQW9UZVNRMTVE bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEVGNi85NjQ2MzQ1OEQwRDQxMUVGQkNENTEyM0VDNEY5QUUwMi84cS1SaXg4VWlz cmtzRGxGQW9UZVNRMTVEbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAmXia1b/uQ3bYkAEVQEabgZSGbCogy1+ohgllrgt9mgi+eM0tukz8 eNwJgIM3eG1AuaaNgBdWN0ck9r8HMqNfvqEin0LtjkI5dEMRH1tKDm/KNnTtnU94 tzonRMRE3Ne52ANJm1Pvk4lGyAFDef38/mmSiIldOrscSULnLyqdTCtM4Nfjcst0 5JD2iSfbFHgp37QxrsiI+iwCd+H4eZQOlS3iJ+cMu35Hl5q1RSmueAlnM+vIxkeS ee2nARHczliXTRzzsNQkg0dPpn5bOGk+ES0z/99pj5EFHaU1D7LDvRLe1Y4877Tz lF5kFWpL5lBVhj14Bj2Xlr5yN+wsSSaD -----END CERTIFICATE-----Generated at Sun Dec 21 21:51:00 2025 by rpki-client