This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json) Hash identifier: TNpiRicYwj3vIzLiH5lpFhBsLoMBMsW/sQ8jU4WgP3s= Subject key identifier: 93:BF:5A:AB:24:F9:B9:78:00:B5:CF:24:22:D4:A8:C2:8C:EE:0B:8B Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft Manifest number: 50 Signing time: Sun 07 Dec 2025 05:24:12 +0000 Manifest this update: Sun 07 Dec 2025 05:24:11 +0000 Manifest next update: Sun 14 Dec 2025 05:24:11 +0000 Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: 9RiH5ke2IwhDBwELDJGKv7kw3pZxjEdGKiWTcM1M9JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Validity Not Before: Dec 7 05:24:11 2025 GMT Not After : Dec 14 05:24:11 2025 GMT Subject: CN=69350f7c-018b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:27:71:03:0b:f5:3b:5c:10:1c:dd:c7:bf: f4:3a:a8:cc:82:3b:5f:b6:c7:58:c6:56:15:16:0e: 1c:0f:a2:c1:61:b4:ec:43:a1:e2:dc:04:4b:4d:34: f8:c7:44:59:e5:c9:2d:7e:53:d7:1e:85:df:5d:35: 28:e7:75:dd:d3:a2:07:bf:79:38:7a:6e:58:c9:97: f0:3b:5a:18:fc:39:68:74:2f:5e:cf:47:f1:2e:77: 0e:3c:3b:bb:c9:4f:0e:be:73:84:35:03:da:5f:07: b2:32:2f:8a:10:7c:02:8b:1c:06:8f:97:ae:9d:9c: e0:04:8d:9c:de:10:b2:cf:20:e1:c6:2a:a7:ce:8c: 12:c6:39:a1:c2:24:01:d0:90:64:39:fe:46:da:80: 40:c0:4d:c5:a2:f5:d4:fa:6e:c6:54:59:00:f8:4e: 20:28:de:09:af:7c:bf:a9:76:36:a9:43:d1:ec:77: ea:e6:16:68:72:c6:e1:ac:06:e7:de:e8:e2:6e:1b: 9c:51:71:27:b5:ef:70:7c:e2:6c:a3:0b:30:d9:b0: 0e:b2:27:b9:69:5d:4a:af:24:ab:8a:d1:91:e9:96: 25:96:b4:05:e0:9a:4a:cb:0a:ac:05:2c:e9:65:59: 2b:7a:b5:c0:56:7e:d7:e4:a9:5c:69:10:6c:b5:14: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BF:5A:AB:24:F9:B9:78:00:B5:CF:24:22:D4:A8:C2:8C:EE:0B:8B X509v3 Authority Key Identifier: keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:cd:5d:cd:d5:d5:b5:3a:ff:6b:f9:a2:7d:f8:e4:38:09:70: 44:fc:ed:d2:93:e4:84:7b:95:ba:26:0d:66:2d:e4:57:0e:44: e3:51:68:84:0a:33:e5:72:9b:e3:17:01:0f:60:19:8a:3f:02: 60:e5:66:e0:54:2d:40:40:80:7c:93:f5:e5:dd:85:14:d1:51: 7f:ff:c7:6b:91:42:a3:9d:02:82:c4:d2:d4:0f:00:61:9c:87: b1:69:0b:e0:40:93:b4:d4:33:f1:90:be:56:4b:18:66:47:b0: e2:37:d3:9b:21:b6:36:a6:d0:07:28:01:ef:59:e8:81:c4:a1: ad:26:8c:09:72:d5:96:2c:7a:68:2b:c9:37:0d:6e:61:18:df: d8:a7:ba:90:c8:b7:01:94:a9:e2:33:1f:d3:4f:fe:e8:38:4e: 14:5b:1f:2e:2f:d2:fd:e2:29:b4:af:9a:84:99:fa:33:25:a5: 90:c8:ce:5a:e0:ff:a0:bd:42:d3:20:79:e6:a1:27:cf:51:5c: b7:69:8e:83:c4:36:14:c6:b0:fa:ea:2a:d8:05:b0:dd:8b:86: 3a:78:c6:8f:18:7d:02:3f:44:e5:c2:76:2a:8a:63:15:76:48: 4c:69:4e:a0:9f:05:02:49:04:7c:7d:5f:75:26:eb:6e:40:17: 7b:cf:1a:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDMzMjExMC8GA1UEBRMoRjE0MkZBOTA3NEYxNTU1OTNENDRDM0QxRDAxNEE3REUz OTczNzMwNTAeFw0yNTEyMDcwNTI0MTFaFw0yNTEyMTQwNTI0MTFaMBgxFjAUBgNV BAMTDTY5MzUwZjdjLTAxOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfBidxAwv1O1wQHN3Hv/Q6qMyCO1+2x1jGVhUWDhwPosFhtOxDoeLcBEtNNPjH RFnlyS1+U9cehd9dNSjndd3Toge/eTh6bljJl/A7Whj8OWh0L17PR/Eudw48O7vJ Tw6+c4Q1A9pfB7IyL4oQfAKLHAaPl66dnOAEjZzeELLPIOHGKqfOjBLGOaHCJAHQ kGQ5/kbagEDATcWi9dT6bsZUWQD4TiAo3gmvfL+pdjapQ9Hsd+rmFmhyxuGsBufe 6OJuG5xRcSe173B84myjCzDZsA6yJ7lpXUqvJKuK0ZHpliWWtAXgmkrLCqwFLOll WSt6tcBWftfkqVxpEGy1FIObAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk79aqyT5 uXgAtc8kItSowozuC4swHwYDVR0jBBgwFoAU8UL6kHTxVVk9RMPR0BSn3jlzcwUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwMzMyLzQ3RTFDNjE2NjVG MjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZrOVJNUFIwQlNuM2psemN3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFVMNmtIVHhWVms5Uk1QUjBCU24zamx6Y3dVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw MzMyLzQ3RTFDNjE2NjVGMjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZr OVJNUFIwQlNuM2psemN3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTNXc3V1bU6/2v5on345DgJcET87dKT5IR7lbomDWYt5FcORONRaIQK M+Vym+MXAQ9gGYo/AmDlZuBULUBAgHyT9eXdhRTRUX//x2uRQqOdAoLE0tQPAGGc h7FpC+BAk7TUM/GQvlZLGGZHsOI305shtjam0AcoAe9Z6IHEoa0mjAly1ZYsemgr yTcNbmEY39inupDItwGUqeIzH9NP/ug4ThRbHy4v0v3iKbSvmoSZ+jMlpZDIzlrg /6C9QtMgeeahJ89RXLdpjoPENhTGsPrqKtgFsN2Lhjp4xo8YfQI/ROXCdiqKYxV2 SExpTqCfBQJJBHx9X3Um625AF3vPGqM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:03 2025 by rpki-client