This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft File: s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json) Hash identifier: k7YHTMiNfsumdUk/gW85nLMQ94tvxkA96zPvJJBjynY= Subject key identifier: 53:6A:8E:F1:64:60:C9:9E:15:FA:4F:F9:7C:35:5D:15:E2:90:85:B8 Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C Certificate issuer: /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft Manifest number: 52 Signing time: Fri 05 Dec 2025 05:05:18 +0000 Manifest this update: Fri 05 Dec 2025 05:05:18 +0000 Manifest next update: Fri 12 Dec 2025 05:05:18 +0000 Files and hashes: 1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: ehLsee5dtn3m20U0V/YBplb3EqRYPPEKU5Z2nCPTKrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Validity Not Before: Dec 5 05:05:18 2025 GMT Not After : Dec 12 05:05:18 2025 GMT Subject: CN=6932680e-d8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:07:51:e0:95:64:c4:09:6d:62:ff:0f:2d: 82:73:fa:51:11:0f:87:01:75:2a:17:58:dc:1d:87: c7:fe:90:10:81:d6:ca:2f:6b:99:ae:ed:cb:7f:c2: d9:29:e5:13:a2:d8:96:2a:bc:51:ad:88:0b:fc:4a: 73:46:6d:83:f2:ab:7c:9d:41:20:6b:1a:5c:a3:a4: 5d:99:ec:c9:03:1b:13:28:8c:6c:0c:52:02:43:aa: 30:da:c2:6c:59:bb:15:ec:fe:06:ae:c3:a7:79:9f: db:21:20:94:cf:a0:cc:67:f7:3d:88:48:ef:93:a0: 0b:01:36:59:72:38:70:86:67:42:65:42:8e:ad:47: c4:ce:86:31:ff:d7:a3:94:38:61:42:b1:38:95:33: 21:2f:e1:4b:77:3c:45:92:94:35:d2:d4:77:b0:c7: 6d:56:b0:49:57:bb:8f:09:54:db:69:8e:7e:e5:ee: c6:74:96:df:ae:3c:ef:68:b5:78:73:5a:37:f1:06: 1e:b4:a1:ce:0e:e5:0f:c4:37:1e:ac:c0:10:5a:27: b7:84:8d:db:c9:39:41:04:02:13:6a:79:c5:11:e6: 5f:1e:a6:e5:ed:13:0c:8f:8d:3a:94:08:11:bc:bf: ec:ce:71:5c:7d:68:20:0a:63:c8:28:ce:46:b5:9b: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:8E:F1:64:60:C9:9E:15:FA:4F:F9:7C:35:5D:15:E2:90:85:B8 X509v3 Authority Key Identifier: keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:af:cb:b5:0e:5c:f0:a0:be:f5:47:bf:67:23:09:d9:89:7d: 2c:a4:21:d0:cc:28:2a:ac:d4:24:f4:c4:41:76:2e:dd:21:e8: 14:24:32:19:dc:81:7b:21:16:4d:aa:2f:47:a1:ba:05:e1:71: 78:26:53:ca:3b:05:ec:09:9b:f9:a5:bb:c7:a3:d6:59:d6:b2: 66:0c:4f:10:1a:94:1c:1d:52:20:f3:3b:11:e7:10:5e:43:65: c8:54:96:d5:1f:50:6c:c6:97:fc:ec:80:62:75:30:4c:aa:8f: 7c:1a:61:23:96:b9:fc:75:b0:c0:3a:7d:02:aa:06:c6:37:d7: 66:a0:27:84:1e:87:45:c3:43:83:25:3f:58:05:db:10:a3:20: b4:0c:d3:b6:9e:3b:a1:a8:78:17:45:29:82:6d:5e:18:65:3d: 6f:03:72:fd:59:b1:ba:f3:82:ef:2f:3a:34:82:44:b6:3c:f1: c9:7a:02:60:0c:9c:47:3e:24:6e:89:9d:44:4e:3d:27:3a:29: 3c:41:a2:9d:01:5f:9b:e9:07:8c:6d:02:90:24:df:8c:05:3b: 47:5d:9b:8a:f7:a7:15:56:7a:30:36:06:e8:d1:c6:56:df:15: ca:41:67:fe:03:3d:67:b5:93:6b:e9:60:64:ae:97:96:7a:ff: e7:96:20:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE QUExOTMzQzAeFw0yNTEyMDUwNTA1MThaFw0yNTEyMTIwNTA1MThaMBgxFjAUBgNV BAMTDTY5MzI2ODBlLWQ4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8IgdR4JVkxAltYv8PLYJz+lERD4cBdSoXWNwdh8f+kBCB1sova5mu7ct/wtkp 5ROi2JYqvFGtiAv8SnNGbYPyq3ydQSBrGlyjpF2Z7MkDGxMojGwMUgJDqjDawmxZ uxXs/gauw6d5n9shIJTPoMxn9z2ISO+ToAsBNllyOHCGZ0JlQo6tR8TOhjH/16OU OGFCsTiVMyEv4Ut3PEWSlDXS1Hewx21WsElXu48JVNtpjn7l7sZ0lt+uPO9otXhz WjfxBh60oc4O5Q/ENx6swBBaJ7eEjdvJOUEEAhNqecUR5l8epuXtEwyPjTqUCBG8 v+zOcVx9aCAKY8gozka1m1KPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU2qO8WRg yZ4V+k/5fDVdFeKQhbgwHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSvy7UOXPCgvvVHv2cjCdmJfSykIdDMKCqs1CT0xEF2Lt0h6BQkMhnc gXshFk2qL0ehugXhcXgmU8o7BewJm/mlu8ej1lnWsmYMTxAalBwdUiDzOxHnEF5D ZchUltUfUGzGl/zsgGJ1MEyqj3waYSOWufx1sMA6fQKqBsY312agJ4Qeh0XDQ4Ml P1gF2xCjILQM07aeO6GoeBdFKYJtXhhlPW8Dcv1Zsbrzgu8vOjSCRLY88cl6AmAM nEc+JG6JnUROPSc6KTxBop0BX5vpB4xtApAk34wFO0ddm4r3pxVWejA2BujRxlbf FcpBZ/4DPWe1k2vpYGSul5Z6/+eWIMs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:44 2025 by rpki-client