This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: MBPz3fRR6kokeKyk4VQtnUFSrkb2o2gCs/2oF3I70DE= Subject key identifier: BD:66:FE:E3:95:42:A9:59:BD:42:56:15:76:78:51:E4:A6:3D:86:B6 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0D08 Signing time: Sat 06 Dec 2025 17:27:27 +0000 Manifest this update: Sat 06 Dec 2025 17:27:26 +0000 Manifest next update: Sat 13 Dec 2025 17:27:26 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: TzmplUSVlDxTSS8jS1jSszVsMsGF9DvCk8jFQHGt6iA=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Dec 6 17:27:26 2025 GMT Not After : Dec 13 17:27:26 2025 GMT Subject: CN=6934677f-1a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:13:b7:93:bc:a9:86:58:ec:78:ca:c7:78: b6:3e:65:e1:47:e9:fd:c6:ef:b6:f3:e3:de:e8:bd: cc:17:38:3d:4c:8e:d0:6c:50:da:19:a1:bc:3c:a1: fb:2d:1b:e8:9c:5d:ff:98:ff:73:e4:6f:36:9c:b7: c5:b1:6c:c5:91:9f:44:c0:d8:9d:91:75:07:8d:60: 7a:1b:00:75:4c:59:7a:ac:10:cd:1b:96:30:b4:b3: 78:09:2c:bf:43:47:94:34:e3:85:63:58:17:69:50: fc:c9:24:ec:54:86:d4:be:92:87:3d:75:d2:1a:aa: c5:30:37:63:53:e1:6e:38:ee:25:0b:47:16:a7:66: 18:c7:cc:03:d5:6e:d0:2f:59:24:ec:f0:ef:46:89: bb:7f:c5:95:20:ad:08:aa:b7:89:36:d3:4c:6d:ad: 55:8e:db:67:c8:67:0b:b1:a4:a9:1f:15:f9:9b:fb: 0e:fb:0c:3b:78:c2:5c:8a:64:3f:17:77:78:34:33: 49:66:a6:f9:dc:c3:6a:b2:c7:9c:f3:59:8e:1c:80: 16:ae:96:a4:60:b3:81:cc:e7:ea:e1:30:70:f1:b0: dc:14:f9:d2:97:87:c7:ad:0e:0e:e3:4f:b3:ce:ff: df:53:3d:5d:53:8e:5e:f1:73:27:a4:1d:52:e3:f1: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:66:FE:E3:95:42:A9:59:BD:42:56:15:76:78:51:E4:A6:3D:86:B6 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ab:96:15:80:45:0b:a5:f6:97:a0:90:b7:88:ad:3d:5b:de: 18:ac:a4:3a:38:82:00:8b:0b:2d:b5:5b:2f:18:29:dc:84:18: f4:c7:95:4a:4e:1a:48:ed:04:9a:31:57:ec:6a:7c:1f:94:e9: b0:18:cc:9f:ee:14:46:38:ff:df:2c:20:d1:a5:58:ea:8c:1c: 4a:3c:e5:d3:d1:8f:da:00:a6:6c:21:66:c5:63:2d:26:f1:ae: 80:bb:7b:1c:35:d3:2e:b6:e9:53:a6:1a:72:90:68:96:70:12: 04:ef:fb:82:91:28:2c:ee:d5:58:14:1b:00:81:e9:e9:4a:31: b9:8d:84:8e:77:7b:8c:4a:cb:ad:a8:ea:85:a1:84:e5:62:d0: 5e:c0:68:45:04:25:16:11:3a:d9:54:1e:1c:35:a4:11:3d:eb: 51:73:72:63:e8:e7:44:96:07:62:67:31:ea:a6:be:81:ea:d6: 08:7e:70:fb:65:98:86:3a:6a:08:57:67:08:e2:35:98:53:b1: be:37:e6:37:92:75:ac:a0:f3:62:6f:4e:b0:bc:1c:18:39:c2: a0:c9:ad:10:b3:95:79:f1:15:00:2c:9b:f4:ea:27:a7:49:58: 6a:5f:14:7a:09:d7:93:11:9d:6f:01:21:3c:01:6c:6f:3b:13: 72:ed:1f:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUxMjA2MTcyNzI2WhcNMjUxMjEzMTcyNzI2WjAYMRYwFAYD VQQDEw02OTM0Njc3Zi0xYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQETt5O8qYZY7HjKx3i2PmXhR+n9xu+28+Pe6L3MFzg9TI7QbFDaGaG8PKH7 LRvonF3/mP9z5G82nLfFsWzFkZ9EwNidkXUHjWB6GwB1TFl6rBDNG5YwtLN4CSy/ Q0eUNOOFY1gXaVD8ySTsVIbUvpKHPXXSGqrFMDdjU+FuOO4lC0cWp2YYx8wD1W7Q L1kk7PDvRom7f8WVIK0IqreJNtNMba1VjttnyGcLsaSpHxX5m/sO+ww7eMJcimQ/ F3d4NDNJZqb53MNqssec81mOHIAWrpakYLOBzOfq4TBw8bDcFPnSl4fHrQ4O40+z zv/fUz1dU45e8XMnpB1S4/EWIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1m/uOV QqlZvUJWFXZ4UeSmPYa2MB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuq5YVgEULpfaXoJC3iK09W94YrKQ6OIIAiwsttVsvGCnchBj0x5VK ThpI7QSaMVfsanwflOmwGMyf7hRGOP/fLCDRpVjqjBxKPOXT0Y/aAKZsIWbFYy0m 8a6Au3scNdMutulTphpykGiWcBIE7/uCkSgs7tVYFBsAgenpSjG5jYSOd3uMSsut qOqFoYTlYtBewGhFBCUWETrZVB4cNaQRPetRc3Jj6OdElgdiZzHqpr6B6tYIfnD7 ZZiGOmoIV2cI4jWYU7G+N+Y3knWsoPNib06wvBwYOcKgya0Qs5V58RUALJv06ien SVhqXxR6CdeTEZ1vASE8AWxvOxNy7R8j -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:37 2025 by rpki-client