This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json) Hash identifier: YS+G52Ec86Xhvk1g7uROSizjnRUmNcAkHQmXC9/V2xc= Subject key identifier: B7:5E:3B:99:AB:E2:CF:0E:C7:D4:9A:3B:0E:A6:8C:36:26:3D:EF:22 Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft Manifest number: 0153 Signing time: Sun 07 Dec 2025 02:32:56 +0000 Manifest this update: Sun 07 Dec 2025 02:32:55 +0000 Manifest next update: Sun 14 Dec 2025 02:32:55 +0000 Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: rKYabR0uxbsLsA/VV3K/tkorfmWcy4LVVEtN9wjZYLs=) 2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: OyE30n/5T2aP2dUzdX/x+6s1iB5G8Z+cghgCmYn5BRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A Validity Not Before: Dec 7 02:32:55 2025 GMT Not After : Dec 14 02:32:55 2025 GMT Subject: CN=6934e758-7b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:01:47:53:a8:0a:6d:4a:48:48:cd:4e:62: 9f:8a:51:f9:ff:f5:b0:60:ac:ff:f5:2d:b1:ce:3e: d2:b4:06:89:22:13:d2:ec:4c:ef:c6:38:33:86:07: 8c:44:f8:1c:d0:cc:a5:17:58:d7:2a:4a:39:44:0b: 64:2d:6a:55:4c:dd:95:55:75:ba:ef:de:44:47:f5: 75:14:d4:05:4a:df:ac:c6:86:86:5b:e1:18:f0:f5: 77:33:b8:f6:7b:55:67:b2:70:0d:94:2e:94:0b:d3: 37:ca:fa:e8:19:09:e2:16:92:34:43:67:df:9e:0a: ff:1e:46:1a:57:c5:5e:01:55:3a:0c:ab:17:05:22: 0b:5f:fa:b1:1b:5e:28:43:bc:6d:3b:ab:a5:6d:6b: b7:5d:ce:1b:00:5b:97:0b:2d:9f:2d:3a:4f:5c:dc: cb:a8:ee:51:f0:68:cc:ab:51:cc:36:8f:c6:70:64: 98:c6:2f:3c:47:d3:55:a8:06:3f:34:17:7f:0f:12: e9:3b:72:ee:71:1f:78:10:98:eb:10:0c:83:1b:76: eb:22:1a:51:52:e5:01:94:35:6f:ad:69:78:4d:7c: 56:35:fd:ec:17:8b:65:ef:33:7f:22:c6:1a:af:5b: 4d:e3:be:3c:19:58:a9:44:ad:68:76:28:c4:c3:73: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:3B:99:AB:E2:CF:0E:C7:D4:9A:3B:0E:A6:8C:36:26:3D:EF:22 X509v3 Authority Key Identifier: keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f7:b4:a1:28:8f:81:39:33:0a:35:05:66:99:d5:22:cd:f7: 77:2e:0e:3a:df:0a:9b:f6:68:f1:80:9a:16:4e:a3:0c:a3:46: 67:e4:7d:8a:6e:cd:95:cb:7f:b4:12:3e:9e:fe:2a:e1:92:87: b8:93:b4:0b:2e:cd:bd:89:08:8c:3c:33:48:93:e0:0a:86:58: f5:4e:d1:ff:55:8b:f9:6d:d3:c3:a3:2b:6b:7a:ed:d7:54:b4: 4c:7f:e8:a1:5c:f7:5d:48:d4:b2:36:3b:76:17:2e:ea:00:d6: df:9a:fb:e1:1b:0a:db:e5:b2:68:25:6c:ab:ec:5c:83:4e:16: 98:d5:d2:28:40:7d:42:6b:27:67:96:4c:5e:85:ca:7f:f5:7a: 0b:64:20:68:e9:c5:c5:38:90:95:a8:f8:5c:24:b1:09:33:d4: 96:c2:48:ae:a1:f1:44:26:5b:fa:69:95:fc:5e:77:de:e3:6b: 9b:49:19:33:fb:33:ad:20:f9:80:f8:74:52:3f:9c:1d:53:f8: 36:6b:e6:cc:81:d4:dd:bb:26:ae:b1:e4:3f:4a:5d:8a:23:d2: 8e:79:c4:e5:65:0c:cf:9b:eb:22:06:3a:b1:98:c5:fa:33:49: 9e:ea:d8:3c:08:bf:a9:41:10:a9:89:14:03:34:6b:76:41:f6: 18:73:2b:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEYxQURCRDBFNzEzOTFERjIxMERFMzQ2MUU3NjU3OEI0 N0EwMTYyNEEwHhcNMjUxMjA3MDIzMjU1WhcNMjUxMjE0MDIzMjU1WjAYMRYwFAYD VQQDEw02OTM0ZTc1OC03YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgYBR1OoCm1KSEjNTmKfilH5//WwYKz/9S2xzj7StAaJIhPS7EzvxjgzhgeM RPgc0MylF1jXKko5RAtkLWpVTN2VVXW6795ER/V1FNQFSt+sxoaGW+EY8PV3M7j2 e1VnsnANlC6UC9M3yvroGQniFpI0Q2ffngr/HkYaV8VeAVU6DKsXBSILX/qxG14o Q7xtO6ulbWu3Xc4bAFuXCy2fLTpPXNzLqO5R8GjMq1HMNo/GcGSYxi88R9NVqAY/ NBd/DxLpO3LucR94EJjrEAyDG3brIhpRUuUBlDVvrWl4TXxWNf3sF4tl7zN/IsYa r1tN4748GVipRK1odijEw3MeOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdeO5mr 4s8Ox9SaOw6mjDYmPe8iMB8GA1UdIwQYMBaAFPGtvQ5xOR3yEN40YedleLR6AWJK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS9BOTUwREZEQUM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhmSVEzalJoNTJWNHRIb0JZ a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhhMjlEbkU1SGZJUTNqUmg1MlY0dEhvQllrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS9BOTUwREZEQUM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhm SVEzalJoNTJWNHRIb0JZa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN97ShKI+BOTMKNQVmmdUizfd3Lg463wqb9mjxgJoWTqMMo0Zn5H2K bs2Vy3+0Ej6e/irhkoe4k7QLLs29iQiMPDNIk+AKhlj1TtH/VYv5bdPDoytreu3X VLRMf+ihXPddSNSyNjt2Fy7qANbfmvvhGwrb5bJoJWyr7FyDThaY1dIoQH1Caydn lkxehcp/9XoLZCBo6cXFOJCVqPhcJLEJM9SWwkiuofFEJlv6aZX8Xnfe42ubSRkz +zOtIPmA+HRSP5wdU/g2a+bMgdTduyauseQ/Sl2KI9KOecTlZQzPm+siBjqxmMX6 M0me6tg8CL+pQRCpiRQDNGt2QfYYcysX -----END CERTIFICATE-----Generated at Mon Dec 8 10:13:34 2025 by rpki-client