This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: u76m4uSnO8bJfz7K2wXYgqEkx3+wN3klbQKFc2mnzIk= Subject key identifier: 54:41:FB:37:C7:28:7E:8F:1D:C8:E0:8F:AF:96:4A:AE:95:00:FB:94 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 010C Signing time: Fri 05 Dec 2025 03:00:32 +0000 Manifest this update: Fri 05 Dec 2025 03:00:32 +0000 Manifest next update: Fri 12 Dec 2025 03:00:32 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: w4ZiuPcEEUpjOGK0Xlze+lRwHiUN/H3YpAucXZkQczo=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: P4Mm2VNQngkGMc8lCO6eHVGOp7Fy5SVP9GQX/B339mE=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Dec 5 03:00:32 2025 GMT Not After : Dec 12 03:00:32 2025 GMT Subject: CN=69324ad0-c797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:8f:49:a8:65:24:cd:a9:83:1d:45:92:4f: 48:9f:56:86:76:ba:8b:1e:d8:97:a6:b3:ef:cc:74: e7:5c:20:56:91:aa:c0:9a:65:6a:6c:0f:2c:4e:29: 54:87:3c:d5:95:f2:43:0f:d5:bb:87:b4:37:e9:67: cb:ef:5c:67:78:b1:cf:55:22:25:23:c1:5a:69:0f: d6:63:77:99:77:7b:fc:d6:14:da:d3:89:c4:b8:83: dc:7e:ea:7b:32:b6:9f:c8:bb:98:65:62:72:dd:60: 2c:8d:b8:95:d1:0c:94:16:5a:72:86:15:ca:64:9b: 52:e8:fc:64:da:20:8c:97:2f:2c:44:36:fd:06:f0: 38:26:4e:96:c5:e9:f0:ad:0c:ad:0a:bc:aa:22:2d: d9:b2:4b:a9:6c:2c:28:5c:5f:13:f8:7e:00:02:63: 6b:2e:98:81:95:75:b7:76:d1:4b:ec:83:a1:ad:bd: 45:53:15:9b:29:ee:0d:31:a3:2c:79:1f:c4:6f:77: a9:b1:b0:46:67:86:05:03:a5:11:ea:a1:e6:f6:cb: 98:53:a5:d6:e3:d4:ce:28:30:af:1a:b2:48:8d:da: 02:c2:9e:32:68:95:1e:f3:ea:f0:7d:52:e3:73:f2: ae:2a:c8:7a:a4:eb:75:e4:45:10:16:72:25:3f:b1: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:FB:37:C7:28:7E:8F:1D:C8:E0:8F:AF:96:4A:AE:95:00:FB:94 X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:35:3f:59:7b:d6:89:82:bd:40:8f:a6:81:89:97:4f:e3:63: fb:e9:12:3c:ed:03:f6:b5:ab:68:c3:ee:74:8c:50:c3:24:7d: de:cc:10:ce:64:6d:cb:4d:e1:cc:06:b1:a9:2e:1c:db:63:ed: 2a:74:89:00:14:66:82:d7:f6:88:2f:1d:97:72:3c:bb:e7:f1: 39:c4:36:48:f3:f3:58:40:f9:5a:46:1b:6a:fc:cb:3b:c1:cd: 7e:11:25:17:c9:08:ad:14:68:a2:e2:c4:bb:df:14:3a:55:06: 4b:ae:b5:f3:e0:d2:f4:3e:84:ca:e5:5e:ee:94:27:84:fb:4a: 2e:22:31:78:74:1f:bd:63:30:a8:0e:b3:14:ae:39:64:63:76: 63:4d:d7:5f:26:89:c6:13:b2:bc:ba:4b:e8:aa:b3:a4:71:ae: 6e:ab:53:b2:3a:74:7b:71:68:07:64:f0:5e:63:5c:44:e8:39: 3b:71:a0:4a:f6:02:18:9b:a1:68:5f:2c:ca:65:fb:ff:77:f9: f4:97:75:bb:43:82:2e:56:5c:76:9d:d7:1f:c3:b9:ce:84:88: c9:b9:5f:a0:59:61:25:aa:17:7b:91:f3:8d:c3:0b:58:4b:9c: ad:7e:a1:5a:8e:05:dd:ae:7a:c4:24:73:7d:f5:ab:f6:de:65: 2d:a6:1c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUxMjA1MDMwMDMyWhcNMjUxMjEyMDMwMDMyWjAYMRYwFAYD VQQDEw02OTMyNGFkMC1jNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64yPSahlJM2pgx1Fkk9In1aGdrqLHtiXprPvzHTnXCBWkarAmmVqbA8sTilU hzzVlfJDD9W7h7Q36WfL71xneLHPVSIlI8FaaQ/WY3eZd3v81hTa04nEuIPcfup7 MrafyLuYZWJy3WAsjbiV0QyUFlpyhhXKZJtS6Pxk2iCMly8sRDb9BvA4Jk6Wxenw rQytCryqIi3ZskupbCwoXF8T+H4AAmNrLpiBlXW3dtFL7IOhrb1FUxWbKe4NMaMs eR/Eb3epsbBGZ4YFA6UR6qHm9suYU6XW49TOKDCvGrJIjdoCwp4yaJUe8+rwfVLj c/KuKsh6pOt15EUQFnIlP7GtPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRB+zfH KH6PHcjgj6+WSq6VAPuUMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3NT9Ze9aJgr1Aj6aBiZdP42P76RI87QP2tatow+50jFDDJH3ezBDO ZG3LTeHMBrGpLhzbY+0qdIkAFGaC1/aILx2Xcjy75/E5xDZI8/NYQPlaRhtq/Ms7 wc1+ESUXyQitFGii4sS73xQ6VQZLrrXz4NL0PoTK5V7ulCeE+0ouIjF4dB+9YzCo DrMUrjlkY3ZjTddfJonGE7K8ukvoqrOkca5uq1OyOnR7cWgHZPBeY1xE6Dk7caBK 9gIYm6FoXyzKZfv/d/n0l3W7Q4IuVlx2ndcfw7nOhIjJuV+gWWElqhd7kfONwwtY S5ytfqFajgXdrnrEJHN99av23mUtphxJ -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:39 2025 by rpki-client