This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: pjr6oT5OdouBVDU17zjR6JeBafGjr/OxjyGeudUVFv0= Subject key identifier: 79:B5:C7:EB:9A:B8:07:11:E8:E4:6C:DA:83:25:E5:C5:CD:42:7E:36 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 02A2 Signing time: Sun 07 Dec 2025 00:04:37 +0000 Manifest this update: Sun 07 Dec 2025 00:04:37 +0000 Manifest next update: Sun 14 Dec 2025 00:04:37 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: fhWBApB0NlDQNdBJ1/QgD7vL0UD63B3tz/OP5O2RxkA=) 2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: 6sLu3BEdx9/7hIQ0xnLxfwDmYeLLmzHWwmPjiKZ/kzE=) 3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=) 5: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: V8FSzYBLLsXQQnxTAHA6zEryNBNGiFUPQmH0Cpz+QYg=) 6: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Dec 7 00:04:37 2025 GMT Not After : Dec 14 00:04:37 2025 GMT Subject: CN=6934c495-f75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:30:b0:76:4b:22:08:e3:a8:04:3c:e6:64: 24:1d:af:86:46:60:9e:77:b6:cc:7d:b9:d8:5a:c9: 71:01:46:8c:8e:8d:d9:55:f5:b8:56:35:d1:4a:32: f8:69:39:8c:cd:dc:9e:8c:03:01:3b:6d:4a:e8:7c: af:01:da:80:80:41:03:4b:7b:d9:1c:17:60:69:01: 26:27:1f:40:4e:5f:94:c6:13:94:2b:de:d0:86:a8: 37:9d:86:50:97:b1:00:6a:40:7f:3b:7c:7f:aa:2b: 10:15:fa:25:54:4c:f7:20:f5:f7:fc:d4:bd:f8:79: 5c:ae:72:1c:a5:a1:61:37:11:b9:a0:fc:a6:cc:3e: a5:b5:68:b3:5d:66:59:d7:7d:f8:f8:5e:2c:26:bc: 50:c2:1f:bf:13:a6:1f:50:72:1a:9a:c6:71:0f:f1: 02:4a:52:05:c0:7e:99:69:02:58:43:84:88:72:1f: 61:ac:1c:95:e5:2a:98:52:6a:d9:c3:02:ec:30:a3: d8:71:b7:f4:6c:47:5a:60:62:97:97:61:45:01:b3: e4:8e:37:b2:c8:d5:30:9f:32:bb:bf:87:73:0e:68: 28:d3:0f:3e:13:af:0b:27:38:36:a8:07:2f:b9:73: 38:ce:8e:78:90:41:fb:16:1b:06:78:a7:43:29:3b: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B5:C7:EB:9A:B8:07:11:E8:E4:6C:DA:83:25:E5:C5:CD:42:7E:36 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:68:1d:67:e8:28:a5:6f:fa:5d:f8:03:b3:a1:60:5e:4a:29: 9d:e2:e5:16:42:28:0f:8d:4b:b8:33:79:cb:f0:e5:46:73:42: 2b:e0:e3:f5:d5:6c:54:fb:89:62:7c:d2:df:ee:c6:50:8c:ae: dc:c4:b5:40:ca:98:7f:63:43:80:18:1c:00:1f:6e:d0:09:fb: 74:b0:63:c5:4d:1a:89:4d:10:0e:38:64:78:23:f8:b2:e5:df: 0a:a3:88:07:ec:8a:01:aa:61:ec:d8:f0:d7:10:1e:f5:20:74: ec:5b:03:dc:14:55:29:fe:eb:ac:e5:2a:d6:1a:27:4d:42:9f: de:89:0d:07:bc:05:3e:23:00:43:46:ac:a6:8d:f5:53:85:da: d7:4d:d2:21:90:ab:01:18:20:ab:72:f2:30:bd:0a:20:63:f5: 1e:e9:05:81:0d:8d:f5:47:09:58:23:13:af:4d:80:83:60:be: ba:6d:fc:6d:55:78:5e:6c:47:c0:ec:7b:4f:e4:5c:5c:eb:59: 9f:e5:a6:cc:7a:cf:d5:3d:f2:fe:51:f8:1e:9c:52:51:56:07: 24:44:87:8c:c0:6c:aa:8b:34:20:9d:8d:b7:e1:d1:bb:c9:29: 8f:af:da:ab:23:da:e6:4a:5f:4a:a7:51:be:bd:47:a0:be:98: 39:b2:ae:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUxMjA3MDAwNDM3WhcNMjUxMjE0MDAwNDM3WjAYMRYwFAYD VQQDEw02OTM0YzQ5NS1mNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWkwsHZLIgjjqAQ85mQkHa+GRmCed7bMfbnYWslxAUaMjo3ZVfW4VjXRSjL4 aTmMzdyejAMBO21K6HyvAdqAgEEDS3vZHBdgaQEmJx9ATl+UxhOUK97Qhqg3nYZQ l7EAakB/O3x/qisQFfolVEz3IPX3/NS9+HlcrnIcpaFhNxG5oPymzD6ltWizXWZZ 1334+F4sJrxQwh+/E6YfUHIamsZxD/ECSlIFwH6ZaQJYQ4SIch9hrByV5SqYUmrZ wwLsMKPYcbf0bEdaYGKXl2FFAbPkjjeyyNUwnzK7v4dzDmgo0w8+E68LJzg2qAcv uXM4zo54kEH7FhsGeKdDKTuI9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm1x+ua uAcR6ORs2oMl5cXNQn42MB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtaB1n6Cilb/pd+AOzoWBeSimd4uUWQigPjUu4M3nL8OVGc0Ir4OP1 1WxU+4lifNLf7sZQjK7cxLVAyph/Y0OAGBwAH27QCft0sGPFTRqJTRAOOGR4I/iy 5d8Ko4gH7IoBqmHs2PDXEB71IHTsWwPcFFUp/uus5SrWGidNQp/eiQ0HvAU+IwBD RqymjfVThdrXTdIhkKsBGCCrcvIwvQogY/Ue6QWBDY31RwlYIxOvTYCDYL66bfxt VXhebEfA7HtP5Fxc61mf5abMes/VPfL+UfgenFJRVgckRIeMwGyqizQgnY234dG7 ySmPr9qrI9rmSl9Kp1G+vUegvpg5sq67 -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:42 2025 by rpki-client