This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: qd39cULXIsTIaEz56Fmmcnus6IedQ2yaVja2zGCoRdg= Subject key identifier: 40:BE:A1:F5:56:60:82:09:A6:B7:A8:3E:19:76:8F:98:F1:C3:E4:5D Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 0109 Signing time: Fri 05 Dec 2025 03:04:34 +0000 Manifest this update: Fri 05 Dec 2025 03:04:33 +0000 Manifest next update: Fri 12 Dec 2025 03:04:33 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: whvwSQH8LaVsgKjmVsvcqOSEsFXR83d0Eh6T/QSsL3c=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: rNoN9qQu8LQ3m6mpRD2sIdAYAMWn+KDz+Z0MyLwHYpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Dec 5 03:04:33 2025 GMT Not After : Dec 12 03:04:33 2025 GMT Subject: CN=69324bc1-a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:b6:0b:ae:b2:d6:b3:4b:8d:5e:55:b5:b0: 76:e7:d6:66:21:6d:78:26:32:ac:f7:37:3b:bd:db: 6c:44:9a:72:c8:72:47:1a:b1:14:1d:10:31:10:f4: 33:76:0d:dd:2a:4f:41:b0:8b:7e:fb:40:75:ed:3b: 4c:dd:38:59:e9:12:6d:f2:b8:72:19:64:0b:ab:c4: e0:92:47:23:1f:f6:3a:5b:14:d6:96:47:50:a6:fd: 5a:61:28:97:24:bc:85:09:9f:45:11:8a:86:d8:fd: 6f:27:bf:d7:15:c9:37:56:eb:28:b7:cc:2c:67:e1: c1:0b:cf:0e:00:61:31:70:b5:15:2d:6c:2e:03:0f: a5:7f:1c:93:3a:6a:c8:07:bd:ad:c1:50:18:0c:ff: d1:8c:e1:db:ad:94:75:31:58:13:85:39:29:a4:cf: bf:50:9a:42:8b:9c:56:9d:e6:b8:fd:5e:c2:98:61: 22:50:98:2a:9d:01:1a:51:a8:be:ed:25:99:bf:5e: f5:20:5d:de:95:a8:42:9a:b4:89:36:7f:1c:e7:09: 36:70:c6:2a:22:ba:64:07:4c:de:6d:35:77:75:9c: 5b:83:bf:73:d4:97:06:40:97:b9:e9:85:95:dd:71: 58:63:21:77:10:da:66:39:01:31:c5:bb:b7:06:59: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:A1:F5:56:60:82:09:A6:B7:A8:3E:19:76:8F:98:F1:C3:E4:5D X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3f:c7:ae:e7:54:90:bc:f2:aa:72:f7:4c:4a:06:00:43:20: fe:b1:f0:34:a0:e8:70:b1:40:fc:27:cf:79:43:ec:2f:ce:5c: f4:23:85:6c:31:e4:16:ba:3a:d0:40:49:2d:55:28:82:f5:3d: df:76:1f:f1:a6:fb:25:95:e1:4f:2e:0f:50:8b:48:68:88:00: ee:0c:f3:a2:d8:de:d1:ef:ce:9d:2d:1a:6f:a5:da:6b:87:50: 39:cf:14:26:ac:a2:cd:4c:8b:73:f4:54:4d:68:fd:ca:6e:c1: 2e:3b:ea:32:cc:e1:35:03:4d:04:8e:df:a2:8a:86:60:bb:d9: 53:3a:e6:ae:62:97:c1:a0:84:9e:45:ce:de:88:9a:00:42:cf: 13:d7:f5:d3:63:0d:05:ab:6c:8e:88:0d:7b:31:b4:87:eb:f1: d9:aa:88:f2:f3:29:db:55:4e:9c:45:56:70:14:ca:5b:19:70: 7e:26:c4:b9:79:e0:79:06:55:9b:f1:57:88:91:bd:58:66:44: 1a:44:94:86:3c:88:f2:3e:07:03:d7:1a:bf:19:d6:b1:e0:57: a2:ff:ff:39:6b:17:ae:e8:32:88:de:39:be:52:6f:36:5b:c1: fe:6e:3b:98:70:dc:0c:94:91:4f:0c:bf:86:4c:69:67:8d:ac: 87:19:5a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUxMjA1MDMwNDMzWhcNMjUxMjEyMDMwNDMzWjAYMRYwFAYD VQQDEw02OTMyNGJjMS1hMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwle2C66y1rNLjV5VtbB259ZmIW14JjKs9zc7vdtsRJpyyHJHGrEUHRAxEPQz dg3dKk9BsIt++0B17TtM3ThZ6RJt8rhyGWQLq8TgkkcjH/Y6WxTWlkdQpv1aYSiX JLyFCZ9FEYqG2P1vJ7/XFck3Vusot8wsZ+HBC88OAGExcLUVLWwuAw+lfxyTOmrI B72twVAYDP/RjOHbrZR1MVgThTkppM+/UJpCi5xWnea4/V7CmGEiUJgqnQEaUai+ 7SWZv171IF3elahCmrSJNn8c5wk2cMYqIrpkB0zebTV3dZxbg79z1JcGQJe56YWV 3XFYYyF3ENpmOQExxbu3Blk10QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC+ofVW YIIJpreoPhl2j5jxw+RdMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOP8eu51SQvPKqcvdMSgYAQyD+sfA0oOhwsUD8J895Q+wvzlz0I4Vs MeQWujrQQEktVSiC9T3fdh/xpvslleFPLg9Qi0hoiADuDPOi2N7R786dLRpvpdpr h1A5zxQmrKLNTItz9FRNaP3KbsEuO+oyzOE1A00Ejt+iioZgu9lTOuauYpfBoISe Rc7eiJoAQs8T1/XTYw0Fq2yOiA17MbSH6/HZqojy8ynbVU6cRVZwFMpbGXB+JsS5 eeB5BlWb8VeIkb1YZkQaRJSGPIjyPgcD1xq/Gdax4Fei//85axeu6DKI3jm+Um82 W8H+bjuYcNwMlJFPDL+GTGlnjayHGVoQ -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:51 2025 by rpki-client