This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: 4o6UPjlhnVPY+mYLZPR47mkn+V5w9vo+Nj3TJ+nsNSg= Subject key identifier: 68:97:DB:F2:FF:6B:16:15:19:EE:6B:95:79:8E:86:32:34:60:8D:7E Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 099A Signing time: Thu 04 Dec 2025 19:17:53 +0000 Manifest this update: Thu 04 Dec 2025 19:17:52 +0000 Manifest next update: Thu 11 Dec 2025 19:17:52 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: 7ujG5eQtbALL4WJ0XnDNeVD3qjOdyXjXtqUnHyQKEt0=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Dec 4 19:17:52 2025 GMT Not After : Dec 11 19:17:52 2025 GMT Subject: CN=6931de60-0d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:fe:32:8e:e3:df:ae:a8:1f:dc:41:d1:93: bb:15:1f:d5:4c:ce:86:20:94:31:3a:64:91:87:d1: af:8c:b2:31:3e:ee:1e:6c:6d:e4:98:4a:be:10:b6: 71:12:73:d6:65:54:8c:f6:2f:25:49:0b:71:06:51: 72:5f:fb:d9:9f:2e:b4:5e:d5:1a:6b:c5:5d:19:f9: 5c:99:2f:a9:1c:0a:1b:d3:a8:08:8f:db:97:da:d6: 0f:46:b2:58:32:fd:64:0a:ab:5f:b6:fb:04:63:e3: 16:66:3e:27:4e:46:ed:19:e9:58:24:1b:64:9d:cf: c4:0d:01:25:58:87:cb:e7:97:6c:2c:ad:02:ac:82: 4e:af:9c:0d:59:0b:2f:b3:78:ce:14:52:21:92:0a: 46:ea:54:bd:a0:51:54:86:25:a1:8f:80:29:30:d8: 15:fd:93:fb:ce:2c:7f:13:94:36:04:de:60:98:3a: 5b:97:6b:74:fd:27:cc:8f:c5:94:76:0e:1f:61:61: 53:62:3f:2b:f1:76:b9:e0:1b:f3:1a:90:8e:1d:94: dd:6b:4d:59:4b:b5:d8:60:b4:01:61:49:fd:f3:02: 94:06:8c:5d:9c:60:6e:50:58:ae:05:18:58:9f:d4: e4:17:0b:3d:24:56:23:17:43:4e:4f:58:2d:4b:89: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:97:DB:F2:FF:6B:16:15:19:EE:6B:95:79:8E:86:32:34:60:8D:7E X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:13:b3:5d:42:dd:19:7d:ba:4c:17:84:08:d9:26:e3:98:1e: 5b:4e:08:4e:1c:cb:5b:24:6f:04:56:a2:8d:09:86:af:6e:06: 7b:1c:ea:c4:65:1f:63:1c:fb:3e:6a:9c:70:0a:12:e4:1c:38: ab:a4:28:8e:7c:da:73:c1:6b:74:43:0e:2f:f6:a3:28:10:1b: 84:2d:4b:44:3f:f9:06:ab:0b:d4:33:1d:97:da:19:02:25:fd: 8c:41:c7:bb:59:76:29:60:11:85:5b:31:ca:98:8a:ed:86:63: 44:85:10:6e:ec:3c:b5:5a:9d:f2:04:07:60:d8:15:d8:3f:48: c5:ea:e3:4e:7a:6b:8b:82:7f:ac:48:17:ba:a1:48:63:a3:a8: 6d:f8:66:f3:35:0d:8d:4b:65:5e:57:d7:35:aa:cc:ac:af:a0: 33:58:fd:05:22:b9:b7:27:23:ac:2e:c2:48:f5:7f:9e:6a:06: af:16:f2:56:ca:bc:ef:c0:a0:b8:51:cf:65:90:82:41:be:d8: b7:70:c7:0a:8b:28:8c:8f:50:19:3d:f9:ca:8f:b4:97:95:9e: 62:d2:53:ef:fb:08:f1:1f:65:3c:de:a5:10:26:25:cb:0c:a1: 45:e6:b9:49:04:8d:cc:32:a4:aa:13:ee:22:cd:1d:27:8a:6f: 40:55:7a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUxMjA0MTkxNzUyWhcNMjUxMjExMTkxNzUyWjAYMRYwFAYD VQQDEw02OTMxZGU2MC0wZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubz+Mo7j366oH9xB0ZO7FR/VTM6GIJQxOmSRh9GvjLIxPu4ebG3kmEq+ELZx EnPWZVSM9i8lSQtxBlFyX/vZny60XtUaa8VdGflcmS+pHAob06gIj9uX2tYPRrJY Mv1kCqtftvsEY+MWZj4nTkbtGelYJBtknc/EDQElWIfL55dsLK0CrIJOr5wNWQsv s3jOFFIhkgpG6lS9oFFUhiWhj4ApMNgV/ZP7zix/E5Q2BN5gmDpbl2t0/SfMj8WU dg4fYWFTYj8r8Xa54BvzGpCOHZTda01ZS7XYYLQBYUn98wKUBoxdnGBuUFiuBRhY n9TkFws9JFYjF0NOT1gtS4kl+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiX2/L/ axYVGe5rlXmOhjI0YI1+MB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfE7NdQt0ZfbpMF4QI2SbjmB5bTghOHMtbJG8EVqKNCYavbgZ7HOrE ZR9jHPs+apxwChLkHDirpCiOfNpzwWt0Qw4v9qMoEBuELUtEP/kGqwvUMx2X2hkC Jf2MQce7WXYpYBGFWzHKmIrthmNEhRBu7Dy1Wp3yBAdg2BXYP0jF6uNOemuLgn+s SBe6oUhjo6ht+GbzNQ2NS2VeV9c1qsysr6AzWP0FIrm3JyOsLsJI9X+eagavFvJW yrzvwKC4Uc9lkIJBvti3cMcKiyiMj1AZPfnKj7SXlZ5i0lPv+wjxH2U83qUQJiXL DKFF5rlJBI3MMqSqE+4izR0nim9AVXpH -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:13 2025 by rpki-client