This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: KQ/PUTB0eFhktID1ljob26HIjM7uqVoR9T3JrDvEm7k= Subject key identifier: F2:04:F7:D8:7D:94:84:D2:56:C2:D6:A4:90:FF:70:9A:BB:CE:C8:A1 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 77 Signing time: Fri 05 Dec 2025 04:43:22 +0000 Manifest this update: Fri 05 Dec 2025 04:43:21 +0000 Manifest next update: Fri 12 Dec 2025 04:43:21 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: PGP8rzMREeXFHKf/3pp6ljmNvfggh7aGURZWKLmNhZQ=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: o/13AO8mPDvXBUbVg85hPilsA+v8uBO89/ms9/UgUgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Dec 5 04:43:21 2025 GMT Not After : Dec 12 04:43:21 2025 GMT Subject: CN=693262ea-ea90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:9b:79:a1:6c:bb:bf:a2:72:e3:04:1a:5d: 99:d9:2c:00:ed:44:b3:e8:d1:fc:fd:a8:b0:79:d1: a9:9a:95:14:b8:92:77:2f:c7:f9:74:fb:75:53:35: 01:c3:6b:d3:42:b8:ec:38:0a:dd:23:c9:eb:b1:b2: f7:cd:80:56:7c:fd:75:48:ea:f2:6e:27:a6:33:30: 5a:3b:bb:c8:4a:fc:03:cb:50:8f:fb:12:82:5b:16: 5c:96:e7:4b:88:8d:de:ab:48:43:0c:c9:07:85:89: d1:e2:13:c6:56:15:9a:fc:67:7b:d4:f2:d2:31:5f: 4e:6c:20:77:e0:26:79:a7:8b:5e:97:d5:9f:29:2b: 4d:76:46:69:e2:cd:ad:c7:d1:c0:6e:78:1e:c6:cb: 82:0a:cc:b4:fc:7a:31:94:bb:95:c0:04:43:b3:b6: ea:d4:91:e1:20:f7:6b:6b:a5:7a:ff:7c:fd:f4:b1: ca:1c:15:0f:f4:7b:93:c4:68:18:db:dc:cc:fd:9c: f1:41:0e:70:25:dc:3e:4d:06:2e:36:d8:77:d6:ca: 55:09:65:fa:22:6a:b9:77:d0:17:1b:3c:d1:6f:bd: 70:e5:d2:ab:6d:71:45:65:0a:67:7d:24:83:c4:62: 2f:4c:0f:11:d7:82:35:fd:62:de:f4:82:6e:7c:3d: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:04:F7:D8:7D:94:84:D2:56:C2:D6:A4:90:FF:70:9A:BB:CE:C8:A1 X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:46:7c:07:1a:60:59:70:96:af:29:0e:ad:00:bb:7c:2a:85: 16:07:99:6c:07:85:93:4b:b4:29:74:d2:25:bd:91:f4:19:f4: ea:64:53:d7:eb:b6:96:3c:26:fe:37:87:dc:71:ff:93:87:53: cb:2c:09:3c:2a:33:7a:1a:f7:4c:26:ae:c4:96:c1:91:ae:a8: 0f:0c:fe:f8:c6:06:3a:fd:d4:0f:47:20:61:e1:5c:94:68:3c: fc:0b:45:6c:6e:6a:66:b9:6a:12:8b:d4:4b:21:24:fd:39:09: e4:97:77:01:00:e1:e4:fe:d3:f6:1a:f0:db:97:82:df:7b:fa: d1:e8:f8:16:6e:1c:a4:2e:a1:e6:38:4a:be:94:47:31:41:fb: 16:d1:ae:ac:92:d4:0b:b3:58:a9:8b:22:83:50:29:4a:30:3f: d2:f9:45:ed:b8:9b:3e:5a:6c:f7:77:08:a5:54:e4:16:89:6b: b9:9f:ad:f9:cb:99:7a:25:b2:3d:f7:28:1c:0b:50:32:c5:5c: 53:a9:c7:3f:aa:88:1b:cd:b5:d0:13:6b:a4:39:d5:36:8d:4e: f4:02:24:0e:3e:f4:ea:6e:88:38:29:6a:2d:57:be:ce:69:7a: 61:18:90:30:a1:2f:cb:81:aa:e2:9a:ee:37:4f:23:80:51:da: 88:ad:32:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTEyMDUwNDQzMjFaFw0yNTEyMTIwNDQzMjFaMBgxFjAUBgNV BAMTDTY5MzI2MmVhLWVhOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsfJt5oWy7v6Jy4wQaXZnZLADtRLPo0fz9qLB50amalRS4kncvx/l0+3VTNQHD a9NCuOw4Ct0jyeuxsvfNgFZ8/XVI6vJuJ6YzMFo7u8hK/APLUI/7EoJbFlyW50uI jd6rSEMMyQeFidHiE8ZWFZr8Z3vU8tIxX05sIHfgJnmni16X1Z8pK012Rmniza3H 0cBueB7Gy4IKzLT8ejGUu5XABEOzturUkeEg92trpXr/fP30scocFQ/0e5PEaBjb 3Mz9nPFBDnAl3D5NBi422HfWylUJZfoiarl30BcbPNFvvXDl0qttcUVlCmd9JIPE Yi9MDxHXgjX9Yt70gm58PWHxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8gT32H2U hNJWwtakkP9wmrvOyKEwHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy QUNCLzc0QkQ4NThBMUIzRDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhI UTlrSlhnT09rMkVTalQ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZGfAcaYFlwlq8pDq0Au3wqhRYHmWwHhZNLtCl00iW9kfQZ9OpkU9fr tpY8Jv43h9xx/5OHU8ssCTwqM3oa90wmrsSWwZGuqA8M/vjGBjr91A9HIGHhXJRo PPwLRWxuama5ahKL1EshJP05CeSXdwEA4eT+0/Ya8NuXgt97+tHo+BZuHKQuoeY4 Sr6URzFB+xbRrqyS1AuzWKmLIoNQKUowP9L5Re24mz5abPd3CKVU5BaJa7mfrfnL mXolsj33KBwLUDLFXFOpxz+qiBvNtdATa6Q51TaNTvQCJA4+9OpuiDgpai1Xvs5p emEYkDChL8uBquKa7jdPI4BR2oitMnk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:19 2025 by rpki-client