This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft File: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json) Hash identifier: ythwjpvY5W4CYWwxOmuiWO6H70a9u+NGgeYkUTkjsN4= Subject key identifier: 74:B4:A6:40:0B:45:D0:59:5A:2A:D6:AE:E8:78:80:E6:32:07:04:DC Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft Manifest number: 43 Signing time: Fri 05 Dec 2025 05:16:50 +0000 Manifest this update: Fri 05 Dec 2025 05:16:49 +0000 Manifest next update: Fri 12 Dec 2025 05:16:49 +0000 Files and hashes: 1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: lTb0CyIzs+Veq+BSUbDpBkBFTenhafSiIa7FAk2eQuQ=) 2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: 6h0NC6fnyVrjlZRLQUdED+ump8j2JnnC17arwDP46lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Validity Not Before: Dec 5 05:16:49 2025 GMT Not After : Dec 12 05:16:49 2025 GMT Subject: CN=69326ac1-8d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:f3:9c:70:d4:41:87:f5:a1:72:17:78:67: b9:35:6d:25:17:a9:69:1d:ff:4c:83:ae:69:54:5f: 40:ac:98:94:ce:9b:7d:7f:24:1f:71:df:d1:1e:91: ea:cc:4c:cc:e8:50:1a:ed:45:d7:18:d6:7e:13:1d: 22:ce:ca:81:82:6a:a7:0d:ba:de:79:36:b5:c2:fb: d1:5d:d9:2e:cc:bb:b5:c5:c4:2b:08:35:2b:69:7b: 14:51:d2:70:96:a2:c7:51:5f:ca:c5:05:e2:19:d8: a5:63:be:55:52:01:49:c6:63:7e:7a:04:92:68:87: 56:62:81:57:65:0c:69:5a:5a:00:05:2f:1a:8c:42: 3d:fe:9a:0d:ae:ab:95:e1:6f:90:b2:f8:cf:db:04: 91:85:eb:1b:75:f0:c0:0e:36:6d:57:c3:25:71:83: 34:c2:ea:4e:94:89:8b:1d:18:f3:2c:38:42:3e:05: ad:87:d3:6f:c1:a9:b6:b9:62:b1:69:cb:f1:f7:b9: 16:93:e0:1c:99:07:40:36:8e:c2:96:ca:cd:2a:16: 4c:e8:c3:7b:9b:6c:ef:a6:15:d2:5c:f8:81:14:b3: 6a:f1:a6:3e:05:d2:55:12:d6:08:70:7b:62:9d:27: 04:c1:05:04:d9:04:e0:d4:3d:1b:5d:07:1c:07:19: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:A6:40:0B:45:D0:59:5A:2A:D6:AE:E8:78:80:E6:32:07:04:DC X509v3 Authority Key Identifier: keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cc:05:7b:0a:24:5e:c8:d4:9d:ce:dd:7e:07:a1:d0:9e:83: f5:72:9c:70:94:30:04:44:3b:73:d5:0a:f7:47:02:c4:23:53: 16:7f:2a:e8:fa:e9:46:18:ca:6d:e0:ea:28:e4:ed:1f:ed:25: 01:a4:ec:78:7d:b0:9c:4c:9d:b4:d8:4b:58:73:18:16:f9:9b: 76:bf:e1:59:8d:65:44:b9:8a:00:80:f2:87:52:9a:6c:cb:9c: a7:76:ab:8f:1a:64:70:e8:79:6f:fe:a4:86:a1:02:7e:a0:ef: 6d:6e:50:b5:e1:77:d3:84:ae:54:5a:2d:18:82:2e:98:f7:09: 1f:28:a6:66:a8:62:4b:7b:4b:ed:41:bd:9a:56:62:a0:01:2e: 2f:c4:73:fe:f5:92:bd:27:fc:50:63:6b:d3:8c:6c:91:95:e3: 5a:68:e1:5b:fb:bd:45:ee:4b:19:3d:b2:b0:57:d5:6c:e4:01: 0c:c0:44:cd:a2:12:fa:3a:8e:bc:65:fe:92:19:d9:cc:ee:b0: 55:28:f5:26:65:aa:bf:b4:7b:5e:ff:39:51:7e:96:82:d8:ce: b0:b8:27:5d:4a:8e:63:2f:2f:89:f2:45:4f:24:22:ff:e4:83: a6:88:b9:47:d7:82:2c:06:24:46:00:a5:9e:38:4d:cc:7c:8b: bd:cd:31:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTQwMjExMC8GA1UEBRMoRjBBMDBDMzFEMDkxRTI0NTcxMzdEMkE4RUYzMjY3NzQ3 RUREN0MyMjAeFw0yNTEyMDUwNTE2NDlaFw0yNTEyMTIwNTE2NDlaMBgxFjAUBgNV BAMTDTY5MzI2YWMxLThkOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7HfOccNRBh/Whchd4Z7k1bSUXqWkd/0yDrmlUX0CsmJTOm31/JB9x39EekerM TMzoUBrtRdcY1n4THSLOyoGCaqcNut55NrXC+9Fd2S7Mu7XFxCsINStpexRR0nCW osdRX8rFBeIZ2KVjvlVSAUnGY356BJJoh1ZigVdlDGlaWgAFLxqMQj3+mg2uq5Xh b5Cy+M/bBJGF6xt18MAONm1XwyVxgzTC6k6UiYsdGPMsOEI+Ba2H02/Bqba5YrFp y/H3uRaT4ByZB0A2jsKWys0qFkzow3ubbO+mFdJc+IEUs2rxpj4F0lUS1ghwe2Kd JwTBBQTZBODUPRtdBxwHGevZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdLSmQAtF 0FlaKtau6HiA5jIHBNwwHwYDVR0jBBgwFoAU8KAMMdCR4kVxN9Ko7zJndH7dfCIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNDAyLzQ3Q0I1QkM0NkRG OTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtWeE45S283ekpuZEg3ZGZD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEtBTU1kQ1I0a1Z4TjlLbzd6Sm5kSDdkZkNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NDAyLzQ3Q0I1QkM0NkRGOTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtW eE45S283ekpuZEg3ZGZDSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrMBXsKJF7I1J3O3X4HodCeg/VynHCUMAREO3PVCvdHAsQjUxZ/Kuj6 6UYYym3g6ijk7R/tJQGk7Hh9sJxMnbTYS1hzGBb5m3a/4VmNZUS5igCA8odSmmzL nKd2q48aZHDoeW/+pIahAn6g721uULXhd9OErlRaLRiCLpj3CR8opmaoYkt7S+1B vZpWYqABLi/Ec/71kr0n/FBja9OMbJGV41po4Vv7vUXuSxk9srBX1WzkAQzARM2i Evo6jrxl/pIZ2czusFUo9SZlqr+0e17/OVF+loLYzrC4J11KjmMvL4nyRU8kIv/k g6aIuUfXgiwGJEYApZ44Tcx8i73NMQM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:58 2025 by rpki-client