This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: 7oVksxQ+Si8/LHsh2/q4r9c7/jfzTB/gSAzOHxNDr1U= Subject key identifier: 8B:6D:A9:2E:FD:1A:CB:2F:80:1D:05:C1:22:B0:8E:CF:30:1E:EB:09 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 017F Signing time: Fri 19 Dec 2025 02:54:12 +0000 Manifest this update: Fri 19 Dec 2025 02:54:12 +0000 Manifest next update: Fri 26 Dec 2025 02:54:12 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: iIK3MQxKUp5RsxJpIDsQZjbsLUOe/X3Cr8p6r9pIhUk=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: qaJjnM/nFYTPN1/4OCWjrzD56e+pIDcvzqv8I7CMWas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Dec 19 02:54:12 2025 GMT Not After : Dec 26 02:54:12 2025 GMT Subject: CN=6944be54-5c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:ff:b2:e0:1e:b0:25:2f:d7:24:93:31:be: 75:89:67:75:d6:f3:e7:dd:56:43:02:20:a2:93:10: e4:21:68:20:88:81:7b:14:8d:20:17:38:02:da:2e: 1f:0c:70:6f:bc:5d:aa:39:a6:5d:81:86:80:0d:39: 43:c0:d5:ec:16:29:8a:1c:a3:d2:84:32:04:5d:48: a2:b4:15:30:d4:d6:2b:05:1c:2d:78:90:76:24:a0: 7b:21:5b:1c:8b:7a:ce:49:40:a1:65:94:c9:4f:46: 36:66:d3:2d:f7:c0:da:8a:66:d2:d2:ab:eb:95:c8: 11:53:cd:f9:c6:a8:85:95:3f:07:7f:9a:1d:59:af: 63:4f:33:5d:a0:89:d3:9d:2f:78:55:66:a6:2e:a2: 39:47:a5:22:c3:d4:b6:16:3c:1b:b7:e7:01:a7:78: b0:35:2e:2e:54:05:12:f0:d7:9a:a9:4f:af:49:b6: 9a:38:2a:da:2b:1e:36:b8:f5:b7:89:88:32:e9:94: 52:b6:37:89:a9:66:b8:2f:3f:46:5f:84:cd:fd:b6: cb:dd:35:86:0e:d8:f9:b7:6f:00:f4:3f:2e:db:e3: a9:1a:6b:89:52:40:df:6a:8c:b9:4b:db:a5:3b:4f: 42:73:e4:8d:92:85:f2:24:d4:9d:27:86:71:2e:12: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6D:A9:2E:FD:1A:CB:2F:80:1D:05:C1:22:B0:8E:CF:30:1E:EB:09 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fb:e2:21:05:b9:cf:55:7b:0a:b5:e6:a9:99:98:ad:86:3b: bc:6e:73:01:ef:25:3f:8e:e1:48:3d:da:72:a1:01:e9:fb:65: 68:8b:c0:e4:7b:5c:41:7d:96:f8:c7:fd:b1:f0:35:f7:54:b7: e1:f2:83:c4:18:87:4d:6b:b5:9b:cf:42:62:06:98:c1:c3:93: 8a:e8:7f:47:9a:88:5b:6f:2e:d5:8a:67:fa:47:14:d7:9d:3a: 8a:4b:f4:ab:36:39:67:f7:97:b8:91:d0:c9:3e:ac:70:3b:4c: e1:15:91:53:0a:65:5f:8d:03:17:18:6b:72:02:9b:0c:7c:fb: ce:40:45:03:4a:7e:52:ca:62:09:9a:e4:7a:89:c7:b7:ac:74: 68:11:25:28:d4:17:84:42:74:55:b0:fd:87:8d:16:40:2e:ef: 8c:9e:39:6f:15:05:62:20:05:eb:a8:8f:f8:2f:0a:f4:39:72: 2e:a5:f4:8f:34:29:47:54:c7:2d:f1:22:0a:25:5c:96:1f:31: a7:12:e1:1f:f8:44:1d:4e:f9:af:0b:09:9b:dc:ff:e5:71:b1: d0:56:56:87:ed:9b:a1:bb:d0:5f:3f:e1:2a:c2:ff:fe:c4:21: 40:54:f8:b3:2d:62:33:0c:9a:8c:fc:22:f1:a7:4e:0d:7c:3e: 86:af:98:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUxMjE5MDI1NDEyWhcNMjUxMjI2MDI1NDEyWjAYMRYwFAYD VQQDDA02OTQ0YmU1NC01YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRf/suAesCUv1ySTMb51iWd11vPn3VZDAiCikxDkIWggiIF7FI0gFzgC2i4f DHBvvF2qOaZdgYaADTlDwNXsFimKHKPShDIEXUiitBUw1NYrBRwteJB2JKB7IVsc i3rOSUChZZTJT0Y2ZtMt98DaimbS0qvrlcgRU835xqiFlT8Hf5odWa9jTzNdoInT nS94VWamLqI5R6Uiw9S2Fjwbt+cBp3iwNS4uVAUS8NeaqU+vSbaaOCraKx42uPW3 iYgy6ZRStjeJqWa4Lz9GX4TN/bbL3TWGDtj5t28A9D8u2+OpGmuJUkDfaoy5S9ul O09Cc+SNkoXyJNSdJ4ZxLhL0IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIttqS79 GssvgB0FwSKwjs8wHusJMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq++IhBbnPVXsKteapmZithju8bnMB7yU/juFIPdpyoQHp+2Voi8Dk e1xBfZb4x/2x8DX3VLfh8oPEGIdNa7Wbz0JiBpjBw5OK6H9Hmohbby7Vimf6RxTX nTqKS/SrNjln95e4kdDJPqxwO0zhFZFTCmVfjQMXGGtyApsMfPvOQEUDSn5SymIJ muR6ice3rHRoESUo1BeEQnRVsP2HjRZALu+MnjlvFQViIAXrqI/4Lwr0OXIupfSP NClHVMct8SIKJVyWHzGnEuEf+EQdTvmvCwmb3P/lcbHQVlaH7Zuhu9BfP+Eqwv/+ xCFAVPizLWIzDJqM/CLxp04NfD6Gr5g5 -----END CERTIFICATE-----Generated at Fri Dec 19 19:19:51 2025 by rpki-client