This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: MBa1w0RGENIMJ/8RVU5Z6/pg6jV3neo5KeLnRLWojL4= Subject key identifier: 48:D8:FD:F3:8F:63:E8:34:E4:A9:5C:41:D2:79:6B:B2:39:A0:9E:0D Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0492 Signing time: Thu 04 Dec 2025 22:33:54 +0000 Manifest this update: Thu 04 Dec 2025 22:33:54 +0000 Manifest next update: Thu 11 Dec 2025 22:33:54 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: 3JnSQK3wI+Fxg03qI7r5fYAgwlJqI8L7/ksurzYz32k=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Dec 4 22:33:54 2025 GMT Not After : Dec 11 22:33:54 2025 GMT Subject: CN=69320c52-30c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:07:bf:df:c3:0f:83:72:65:42:0e:88:da: 41:9b:4d:3a:1b:6b:59:59:1d:8f:a2:43:2e:f1:6c: 66:0b:94:06:5a:a6:b3:99:2f:f4:3b:37:bc:02:ae: 10:69:76:2f:98:1a:fc:fa:63:07:c6:0b:34:14:9f: ad:f3:55:96:78:ee:e2:f9:4d:db:6d:85:e0:bc:23: 7d:de:82:a8:0c:7d:cd:5c:ee:f3:c8:41:70:fc:9b: cc:11:4b:8b:34:1c:79:58:76:ca:61:82:c1:4b:93: a9:65:38:70:07:f1:20:a4:69:57:57:81:89:70:ff: 2d:37:e3:d8:8d:f6:f4:f7:77:9c:09:52:c7:bb:53: ce:b5:c7:9c:40:8d:0f:8e:07:b5:eb:07:8e:7b:dd: ac:ef:e6:b2:09:d4:81:23:6b:40:2a:5b:e7:c3:38: b6:82:91:f2:05:01:96:77:81:14:6f:9f:ec:c1:f3: 8b:5f:11:f4:a7:36:d0:af:09:97:42:9c:cb:e0:b0: 65:a6:04:93:6a:64:1b:1e:27:f9:1a:57:92:d5:50: 79:81:d8:81:01:b3:4b:c5:d5:60:a0:51:e2:25:fd: 27:77:38:47:3a:66:da:43:b5:cc:f4:e3:b7:4a:d6: b6:7e:09:47:ba:32:a1:84:76:0d:54:5a:d7:57:dc: ff:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D8:FD:F3:8F:63:E8:34:E4:A9:5C:41:D2:79:6B:B2:39:A0:9E:0D X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:37:f1:e4:35:f4:ad:dc:9c:c1:25:57:1f:30:cd:be:11: cf:d1:ee:04:e0:79:61:1f:92:e9:72:80:1c:a3:81:5c:59:77: d7:68:3a:1c:cd:94:46:c5:53:16:2c:02:b9:6d:59:05:fd:77: d9:18:61:e5:0f:1c:71:8e:c6:a0:c0:3c:08:60:16:da:85:c5: 67:bd:03:6a:57:83:70:12:95:87:02:51:cc:76:35:79:dc:1c: f4:c3:e5:6f:58:dc:5f:e4:80:97:6b:fe:4e:23:a6:0c:ae:de: 97:0a:d1:df:1b:98:2d:a2:45:6b:5d:ff:fc:65:92:a4:3c:42: 12:fd:fa:15:f4:cf:80:1d:89:18:6c:c4:f1:d1:a4:5c:de:9f: 9a:e2:82:48:a7:df:62:3d:ab:ed:18:4a:84:90:79:6f:d3:3d: 84:b7:62:08:8f:e2:1e:c3:b1:16:96:e9:ad:e4:e3:cd:90:f1: b9:b8:87:f1:24:06:55:ac:cd:20:90:3d:51:19:4b:37:0d:49: a6:f5:de:76:3d:83:79:87:7b:88:08:69:12:22:55:e4:7d:df: b9:0b:55:f8:61:62:a1:da:35:b6:70:57:2c:f4:23:a0:53:2f: 54:b7:ea:43:9d:20:98:0e:6b:e5:9e:49:ae:b2:bd:26:41:3a: 61:e5:89:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUxMjA0MjIzMzU0WhcNMjUxMjExMjIzMzU0WjAYMRYwFAYD VQQDEw02OTMyMGM1Mi0zMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvMHv9/DD4NyZUIOiNpBm006G2tZWR2PokMu8WxmC5QGWqazmS/0Oze8Aq4Q aXYvmBr8+mMHxgs0FJ+t81WWeO7i+U3bbYXgvCN93oKoDH3NXO7zyEFw/JvMEUuL NBx5WHbKYYLBS5OpZThwB/EgpGlXV4GJcP8tN+PYjfb093ecCVLHu1POtcecQI0P jge16weOe92s7+ayCdSBI2tAKlvnwzi2gpHyBQGWd4EUb5/swfOLXxH0pzbQrwmX QpzL4LBlpgSTamQbHif5GleS1VB5gdiBAbNLxdVgoFHiJf0ndzhHOmbaQ7XM9OO3 Sta2fglHujKhhHYNVFrXV9z/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjY/fOP Y+g05KlcQdJ5a7I5oJ4NMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKCzfx5DX0rdycwSVXHzDNvhHP0e4E4HlhH5LpcoAco4FcWXfXaDoc zZRGxVMWLAK5bVkF/XfZGGHlDxxxjsagwDwIYBbahcVnvQNqV4NwEpWHAlHMdjV5 3Bz0w+VvWNxf5ICXa/5OI6YMrt6XCtHfG5gtokVrXf/8ZZKkPEIS/foV9M+AHYkY bMTx0aRc3p+a4oJIp99iPavtGEqEkHlv0z2Et2IIj+Iew7EWlumt5OPNkPG5uIfx JAZVrM0gkD1RGUs3DUmm9d52PYN5h3uICGkSIlXkfd+5C1X4YWKh2jW2cFcs9COg Uy9Ut+pDnSCYDmvlnkmusr0mQTph5Yma -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:31 2025 by rpki-client