This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: xvBMBxTIibaSkZ2dlZAqPiQ2BJCQaXvwFwrRgagpa5I= Subject key identifier: 7F:86:AE:AB:2D:EC:F5:EC:60:97:18:00:BC:92:44:8E:A2:FB:E3:22 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0839 Signing time: Thu 04 Dec 2025 19:55:21 +0000 Manifest this update: Thu 04 Dec 2025 19:55:20 +0000 Manifest next update: Thu 11 Dec 2025 19:55:20 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: B4UCHZzaRXB/7RCR91DzViWS11Hs9NPeSRJOmA9Znz4=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: mDiyXguFaGa3vR8D07iQ+K1O3uq6pL2JeIG9VyLGezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Dec 4 19:55:20 2025 GMT Not After : Dec 11 19:55:20 2025 GMT Subject: CN=6931e728-a14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:0d:65:87:e1:20:9d:cb:78:2a:b8:c2:22: e9:9d:61:b9:f8:f6:94:42:3a:bf:f8:6c:cf:f6:27: da:f4:1f:0c:d6:c2:57:f7:54:3f:82:15:76:30:34: 99:73:8c:9a:15:43:bc:8a:9f:d1:30:4f:b9:07:28: 79:c1:d5:17:b3:1d:27:e7:0f:5d:90:68:d1:6c:72: 2a:62:3f:78:6e:20:85:6b:27:02:5e:0f:4f:37:87: 00:57:74:6b:ff:e6:7d:06:d3:d7:14:79:2a:dc:1e: 00:4e:74:5f:e3:48:10:bb:6f:c7:21:97:3a:49:f4: 4b:51:d6:cc:93:67:b2:17:06:3c:bc:4a:f9:59:cf: de:61:5f:1b:ce:55:fe:e2:2a:dc:5f:9a:8d:f3:d3: 16:20:37:05:d9:94:ef:ed:8c:17:3f:7c:1f:b8:1f: 79:0d:e0:c6:9c:7e:d7:5c:59:00:fd:0a:71:89:18: b7:80:62:70:cd:af:0a:a2:81:6d:45:25:a6:e7:1f: 22:d9:17:3a:b0:89:93:a3:6a:c8:8d:19:b9:b6:e2: ff:37:cd:a0:6c:20:ec:ed:92:83:43:07:5c:db:19: e9:f2:17:3b:96:81:06:bc:41:bb:b1:a2:d2:11:f7: 6b:a0:05:16:29:27:db:da:a9:5a:7b:a0:57:d1:00: 78:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:AE:AB:2D:EC:F5:EC:60:97:18:00:BC:92:44:8E:A2:FB:E3:22 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:2e:cc:67:e3:96:16:47:85:92:39:5b:6c:d3:11:69:c8:12: 19:40:47:ee:e2:2d:d6:2d:fa:56:74:bf:90:45:21:8a:be:ed: 5b:9b:94:14:d6:7b:2b:fa:c0:53:a8:8d:6b:15:55:8d:4a:9c: 9a:08:d3:ec:d5:ba:2a:7e:ab:8b:7e:ac:f2:04:46:72:3a:bf: 9e:30:58:7d:9a:60:7a:25:c6:f2:55:29:2b:65:3f:01:8a:d2: 97:1b:17:1a:9e:7c:81:a1:bc:49:81:25:e3:b1:dc:64:20:21: bc:c0:60:31:11:a7:2a:d0:6b:99:dd:11:f7:76:cd:07:4c:80: 00:81:75:75:d4:0b:34:a8:d3:18:17:dc:d9:94:7c:5f:94:db: 6a:0a:c2:51:df:4d:04:4f:83:29:05:a4:11:07:bb:c9:5a:25: 8d:e7:ce:fd:b6:a9:e8:16:e1:a2:d5:2b:83:db:cc:ef:ee:7c: 0a:74:c3:2e:b5:62:4d:12:08:ad:d1:81:90:82:a0:f2:45:89: 74:24:38:9c:20:37:f9:66:37:17:32:9b:5b:79:07:17:62:b7: 97:38:8d:ab:f9:83:c7:c9:7a:b7:a6:b1:29:8a:87:f7:05:07: 2b:b2:ec:66:5b:a7:4b:47:8e:64:58:74:e4:49:69:21:36:4a: d0:64:e6:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUxMjA0MTk1NTIwWhcNMjUxMjExMTk1NTIwWjAYMRYwFAYD VQQDEw02OTMxZTcyOC1hMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC0NZYfhIJ3LeCq4wiLpnWG5+PaUQjq/+GzP9ifa9B8M1sJX91Q/ghV2MDSZ c4yaFUO8ip/RME+5Byh5wdUXsx0n5w9dkGjRbHIqYj94biCFaycCXg9PN4cAV3Rr /+Z9BtPXFHkq3B4ATnRf40gQu2/HIZc6SfRLUdbMk2eyFwY8vEr5Wc/eYV8bzlX+ 4ircX5qN89MWIDcF2ZTv7YwXP3wfuB95DeDGnH7XXFkA/QpxiRi3gGJwza8KooFt RSWm5x8i2Rc6sImTo2rIjRm5tuL/N82gbCDs7ZKDQwdc2xnp8hc7loEGvEG7saLS EfdroAUWKSfb2qlae6BX0QB4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+Grqst 7PXsYJcYALySRI6i++MiMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDLsxn45YWR4WSOVts0xFpyBIZQEfu4i3WLfpWdL+QRSGKvu1bm5QU 1nsr+sBTqI1rFVWNSpyaCNPs1boqfquLfqzyBEZyOr+eMFh9mmB6JcbyVSkrZT8B itKXGxcannyBobxJgSXjsdxkICG8wGAxEacq0GuZ3RH3ds0HTIAAgXV11As0qNMY F9zZlHxflNtqCsJR300ET4MpBaQRB7vJWiWN5879tqnoFuGi1SuD28zv7nwKdMMu tWJNEgit0YGQgqDyRYl0JDicIDf5ZjcXMptbeQcXYreXOI2r+YPHyXq3prEpiof3 BQcrsuxmW6dLR45kWHTkSWkhNkrQZOaJ -----END CERTIFICATE-----Generated at Sat Dec 6 15:11:07 2025 by rpki-client