This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 5sYZi9BkP8iNd/9p0ZsRrxFE8CGdx9C8A3gDkuOAeCc= Subject key identifier: E9:90:70:6A:2E:D9:89:D6:24:C3:1A:B8:F4:45:41:61:87:2C:82:CD Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 01AF Signing time: Sun 21 Dec 2025 02:28:48 +0000 Manifest this update: Sun 21 Dec 2025 02:28:47 +0000 Manifest next update: Sun 28 Dec 2025 02:28:47 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: bWwpCQ252cv0QKUE6hzZy87EQ4oDvxc5BKBEc3+5HIU=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: HRtaeBIfXS4j0TAnrmFrjM5dZZkH7hynrpn4rWDNaLw=) 3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: k/lLY0AMn3sVt+u3zakrgiqTYvFE4y1vIBdfhQf434s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Dec 21 02:28:47 2025 GMT Not After : Dec 28 02:28:47 2025 GMT Subject: CN=69475b60-b67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:2d:25:ab:18:a3:d8:0b:96:97:aa:c3:cd: 62:06:0c:89:99:a0:69:fe:c6:84:2a:aa:20:89:c2: cd:8e:e5:c5:82:3b:2a:80:88:25:8f:13:16:50:43: 0e:26:41:72:98:70:e6:c2:2b:03:cf:2c:f2:a5:a5: ca:78:ca:70:9b:80:e3:f6:46:40:21:ee:8c:ba:b0: 38:39:d6:10:33:92:35:05:3c:7f:73:3e:6e:dd:e2: d1:8f:cc:e6:29:81:0e:17:66:5d:26:e2:11:6c:cc: 44:01:5a:d5:c8:5b:12:c0:5c:b2:bc:5a:81:4c:d9: f8:68:2a:f7:a9:f6:83:4a:58:23:d9:07:99:bf:60: 49:28:d8:cf:5b:d9:65:49:df:a6:66:04:40:26:2e: 47:f4:75:d7:52:88:a4:d4:51:6d:02:72:61:b8:30: 38:5e:ac:e2:cd:ca:1d:5e:f2:21:9c:8d:15:cb:3c: 0a:75:eb:14:68:83:b9:c4:88:21:a9:8b:cc:8c:be: 16:fb:25:6a:3a:97:03:a2:52:ad:78:74:0e:b3:73: a7:74:1e:a8:fb:a2:df:0f:22:44:08:e3:48:63:a7: d6:70:b8:fe:fd:93:0f:84:c1:75:55:a7:82:cb:a3: 39:8e:7d:d8:e7:c5:85:b8:24:5d:cc:d4:db:81:c3: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:70:6A:2E:D9:89:D6:24:C3:1A:B8:F4:45:41:61:87:2C:82:CD X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:49:ec:b9:66:56:b2:4a:72:2b:e0:a0:02:e8:ae:64:d4:35: 6b:61:4f:d0:53:08:bc:87:40:6a:fa:a1:61:84:7f:82:d3:03: c7:83:90:cf:9d:0b:79:70:eb:45:d0:58:82:9e:29:27:ed:5d: 8f:1c:4b:4a:a8:6a:ba:09:c5:5b:68:16:25:d5:7e:11:90:4e: 3d:07:34:25:19:d3:90:12:12:ad:75:84:bf:4a:26:cc:17:95: 60:1b:ae:81:76:27:da:e8:1c:c7:6a:5f:79:44:c3:bc:7e:ef: 0e:6b:9a:6f:1d:d5:82:d4:c7:53:59:1c:fc:bb:fa:d1:6f:bb: 81:36:34:0c:73:0f:98:b9:15:01:fd:de:9b:2f:6b:6c:18:ed: 9a:17:8f:9a:b3:f8:ef:54:9f:bc:7b:c0:12:93:da:8c:51:46: b4:ed:ec:ca:92:dd:f0:e2:88:34:dd:47:cf:f6:45:83:37:08: 0d:9c:4c:6e:c1:ab:a3:ab:f3:3b:fe:04:4f:bc:a3:57:e2:2b: 3c:01:63:bd:10:eb:38:a2:0a:31:fc:3f:d1:c4:94:28:1a:84: f7:a9:77:9a:15:3a:6a:d0:04:f7:13:e7:15:3a:3f:0f:b6:7e: 15:60:a1:f2:49:fc:9e:51:78:8a:e8:91:4f:3a:d0:ca:eb:9f: 11:5a:60:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUxMjIxMDIyODQ3WhcNMjUxMjI4MDIyODQ3WjAYMRYwFAYD VQQDDA02OTQ3NWI2MC1iNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT0tJasYo9gLlpeqw81iBgyJmaBp/saEKqogicLNjuXFgjsqgIgljxMWUEMO JkFymHDmwisDzyzypaXKeMpwm4Dj9kZAIe6MurA4OdYQM5I1BTx/cz5u3eLRj8zm KYEOF2ZdJuIRbMxEAVrVyFsSwFyyvFqBTNn4aCr3qfaDSlgj2QeZv2BJKNjPW9ll Sd+mZgRAJi5H9HXXUoik1FFtAnJhuDA4XqzizcodXvIhnI0VyzwKdesUaIO5xIgh qYvMjL4W+yVqOpcDolKteHQOs3OndB6o+6LfDyJECONIY6fWcLj+/ZMPhMF1VaeC y6M5jn3Y58WFuCRdzNTbgcNa5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmQcGou 2YnWJMMauPRFQWGHLILNMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcSey5ZlaySnIr4KAC6K5k1DVrYU/QUwi8h0Bq+qFhhH+C0wPHg5DP nQt5cOtF0FiCnikn7V2PHEtKqGq6CcVbaBYl1X4RkE49BzQlGdOQEhKtdYS/SibM F5VgG66Bdifa6BzHal95RMO8fu8Oa5pvHdWC1MdTWRz8u/rRb7uBNjQMcw+YuRUB /d6bL2tsGO2aF4+as/jvVJ+8e8ASk9qMUUa07ezKkt3w4og03UfP9kWDNwgNnExu waujq/M7/gRPvKNX4is8AWO9EOs4ogox/D/RxJQoGoT3qXeaFTpq0AT3E+cVOj8P tn4VYKHySfyeUXiK6JFPOtDK658RWmD8 -----END CERTIFICATE-----Generated at Sun Dec 21 21:50:43 2025 by rpki-client