This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: 0bO+yQqpaMxvyjj1KSdoQgreD3ImQxplFlh2MuDSbqs= Subject key identifier: E3:17:EA:0F:F5:AA:4C:5C:65:E4:1A:A5:A0:84:3D:7B:C0:6F:7C:50 Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: A9 Signing time: Fri 05 Dec 2025 04:12:06 +0000 Manifest this update: Fri 05 Dec 2025 04:12:05 +0000 Manifest next update: Fri 12 Dec 2025 04:12:05 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: 8/+Cys3FVccyPyhWwjv5+4zjvwGUqRNo0E63lrKJ6DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Dec 5 04:12:05 2025 GMT Not After : Dec 12 04:12:05 2025 GMT Subject: CN=69325b96-a5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:ad:8a:a0:4b:39:17:7d:dc:26:54:14:da: 54:8d:7c:5e:a3:67:45:66:b8:16:8a:08:d5:95:c4: 46:cc:f6:6f:4f:c6:fe:34:6d:78:38:60:26:8a:94: 47:f2:de:f2:90:94:86:64:3c:6e:94:16:2a:e9:0f: 0d:fa:47:a5:1a:8b:df:f4:2a:9b:df:8d:dd:06:60: 50:c0:fe:f5:4f:09:8d:4b:d2:59:f9:33:df:ff:2a: ce:4a:78:a0:ed:e2:33:a7:0a:26:b9:4c:f0:7f:7c: ad:63:90:82:a0:bc:b5:3c:24:d3:fa:3b:06:6c:df: 0a:ab:67:16:b2:fa:09:82:fc:64:78:b8:6f:8b:e7: 71:82:6b:ae:48:78:fc:0f:d1:6a:4a:28:ac:b0:56: b7:f9:c9:61:16:27:5a:a8:ba:d2:1d:6b:42:12:76: aa:2c:5f:97:3e:1d:f9:ca:3d:3e:2d:cc:ae:4f:2b: 0e:35:a2:31:d8:aa:ee:ad:ff:c5:7b:85:f5:33:be: 1f:1c:c8:fd:ab:4c:6c:33:54:12:a7:f0:bb:9d:5e: 1a:60:37:f6:c6:38:35:7c:a9:23:57:9f:cf:03:fa: 3d:2d:92:57:0a:4d:36:97:e3:b8:2c:66:a5:12:1a: 55:73:96:ee:86:b9:80:7f:9f:2c:9b:fc:ed:77:9e: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:EA:0F:F5:AA:4C:5C:65:E4:1A:A5:A0:84:3D:7B:C0:6F:7C:50 X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1a:57:00:9b:89:ae:02:c3:bd:c8:44:2a:83:8a:e1:5b:f6: cf:dc:35:2c:d1:46:57:ed:e7:77:c3:d4:d6:a0:ae:51:54:0b: 31:57:c8:d7:a2:87:6c:7c:dc:89:69:91:18:cc:72:bc:c0:c2: 5d:36:b1:02:e1:38:43:17:44:7b:01:48:bc:16:a3:38:a5:1c: 66:4a:1e:c6:64:da:cd:2e:eb:57:b0:2e:35:f2:f0:67:c9:7f: d8:52:a7:48:c1:de:92:f5:d6:12:f7:4e:20:a7:5a:2e:47:1e: 60:c8:bc:9e:b8:55:ea:d1:5c:37:e2:f9:03:99:cc:d6:e2:c5: a0:3a:cc:d5:ee:24:70:c9:e2:08:7d:3f:56:01:47:a9:80:40: c0:64:1f:23:01:66:e1:fc:b9:76:2a:f3:82:1a:f4:ae:ab:7b: f1:6f:83:db:59:3b:13:ad:37:bd:60:92:3c:c0:db:10:a9:ce: 68:ab:76:ed:ad:d5:55:b3:63:88:40:dd:2a:fa:d1:dc:e4:e4: 3e:fa:eb:78:c5:8b:44:b0:0b:c2:16:93:99:d7:31:be:86:0b: e9:02:55:d9:53:db:e5:b7:c2:aa:e2:7a:9f:19:7a:a1:b2:ed: 83:c2:1e:41:c4:8f:d7:f9:39:2c:23:2b:0b:99:30:a1:cf:46: 7a:56:e6:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRFRjYxMTAvBgNVBAUTKEYyQUY5MThCMUYxNDhBQ0FFNEIwMzk0NTAyODRERTQ5 MEQ3OTBFNTkwHhcNMjUxMjA1MDQxMjA1WhcNMjUxMjEyMDQxMjA1WjAYMRYwFAYD VQQDEw02OTMyNWI5Ni1hNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SKtiqBLORd93CZUFNpUjXxeo2dFZrgWigjVlcRGzPZvT8b+NG14OGAmipRH 8t7ykJSGZDxulBYq6Q8N+kelGovf9Cqb343dBmBQwP71TwmNS9JZ+TPf/yrOSnig 7eIzpwomuUzwf3ytY5CCoLy1PCTT+jsGbN8Kq2cWsvoJgvxkeLhvi+dxgmuuSHj8 D9FqSiissFa3+clhFidaqLrSHWtCEnaqLF+XPh35yj0+LcyuTysONaIx2Krurf/F e4X1M74fHMj9q0xsM1QSp/C7nV4aYDf2xjg1fKkjV5/PA/o9LZJXCk02l+O4LGal EhpVc5buhrmAf58sm/ztd57K2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMX6g/1 qkxcZeQapaCEPXvAb3xQMB8GA1UdIwQYMBaAFPKvkYsfFIrK5LA5RQKE3kkNeQ5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEVGNi85NjQ2MzQ1OEQw RDQxMUVGQkNENTEyM0VDNEY5QUUwMi84cS1SaXg4VWlzcmtzRGxGQW9UZVNRMTVE bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEVGNi85NjQ2MzQ1OEQwRDQxMUVGQkNENTEyM0VDNEY5QUUwMi84cS1SaXg4VWlz cmtzRGxGQW9UZVNRMTVEbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFGlcAm4muAsO9yEQqg4rhW/bP3DUs0UZX7ed3w9TWoK5RVAsxV8jX oodsfNyJaZEYzHK8wMJdNrEC4ThDF0R7AUi8FqM4pRxmSh7GZNrNLutXsC418vBn yX/YUqdIwd6S9dYS904gp1ouRx5gyLyeuFXq0Vw34vkDmczW4sWgOszV7iRwyeII fT9WAUepgEDAZB8jAWbh/Ll2KvOCGvSuq3vxb4PbWTsTrTe9YJI8wNsQqc5oq3bt rdVVs2OIQN0q+tHc5OQ++ut4xYtEsAvCFpOZ1zG+hgvpAlXZU9vlt8Kq4nqfGXqh su2Dwh5BxI/X+TksIysLmTChz0Z6VuYM -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:16 2025 by rpki-client