This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: uB9c87HWAx3wiHND21Yfn6SEadBxYmCwOAUzU/bQ7h4= Subject key identifier: B0:E8:E0:74:97:49:96:07:2C:14:A0:71:DE:08:5E:25:F3:C6:EF:AE Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: 014D Signing time: Fri 05 Dec 2025 02:22:07 +0000 Manifest this update: Fri 05 Dec 2025 02:22:07 +0000 Manifest next update: Fri 12 Dec 2025 02:22:07 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: TJSdFOb7zl81QAReVvjL+Ed3uax8SbCFsW9ePvvNObQ=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: Dec 5 02:22:07 2025 GMT Not After : Dec 12 02:22:07 2025 GMT Subject: CN=693241cf-0270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:25:6b:95:24:9f:b5:aa:01:ab:39:b4:d0: eb:87:28:e6:fe:df:40:ff:8a:8b:17:39:84:ef:c3: 78:fe:cb:93:00:73:c6:d4:2b:b0:e7:3c:fa:71:17: ff:16:bb:25:92:f7:4e:34:f8:12:f0:eb:1d:03:93: c7:ab:f0:79:e8:38:21:31:e9:e2:6a:a1:15:f1:60: 49:5f:ca:a6:bc:e7:46:6f:c6:8a:12:d2:17:fa:bb: 41:ac:18:74:e6:db:51:f2:21:53:39:65:ee:3d:7b: 83:64:af:e5:4f:02:ea:57:59:b8:43:6a:e9:0c:27: aa:a4:78:3f:a8:c4:14:5b:77:50:4a:ce:60:86:5c: c1:fd:ab:48:3c:b3:78:c3:c6:4f:0b:4f:27:58:9c: 62:b0:8f:6e:1f:e4:48:3c:49:aa:41:48:a1:10:23: 07:3b:9f:29:b4:fc:f4:a2:95:05:e0:82:cd:16:b6: 2a:1a:05:93:4b:ec:5e:2c:f4:3e:46:cd:82:5d:a2: 34:a2:80:d8:b6:06:7b:f4:a3:34:67:6c:bb:85:37: bf:42:70:f1:79:23:56:82:aa:c9:ae:c7:33:24:d4: 42:c8:33:51:b7:86:05:ff:3f:62:3d:c2:c7:0e:d3: 1b:33:bb:89:e7:ec:ad:5f:7f:a8:6b:29:dc:9e:f5: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:E0:74:97:49:96:07:2C:14:A0:71:DE:08:5E:25:F3:C6:EF:AE X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6e:56:d1:35:df:49:31:01:5f:c3:3e:97:c7:10:8d:36:dc: 78:7f:7e:5e:79:dd:68:63:0c:49:2b:f5:81:bd:2b:78:b3:7d: b9:21:39:14:d9:db:a5:5b:40:2f:62:90:ee:f5:fc:0d:63:ee: ce:6a:e3:62:13:3e:27:4a:d0:be:cd:21:ab:91:5b:28:c0:58: 45:7d:98:7c:b5:66:f2:9f:99:22:b3:96:12:92:41:73:a5:73: 1d:73:b0:92:60:56:53:4a:9f:55:da:c6:52:c3:c2:ae:28:76: fe:85:6c:5a:3d:85:7f:38:51:68:23:c9:71:4a:da:88:e1:89: bd:d5:37:ed:b7:a7:cc:d6:4d:2f:4f:91:97:28:b0:4b:66:41: 6e:12:94:da:93:d2:35:30:ff:bc:b3:48:5f:48:40:1d:45:72: da:7d:42:87:ad:33:b3:47:3c:4e:56:ac:c0:db:58:6e:8e:f8: 82:2c:21:dc:7d:30:73:e7:64:e0:56:c9:5e:79:b1:6c:e8:ae: 8e:80:4a:f4:c3:e6:18:a1:18:d9:75:3a:98:c8:1a:3a:0e:46: 94:64:8a:b8:1b:28:7c:91:8e:ce:92:4f:85:35:41:0c:71:f6: a5:30:44:a5:2a:d0:d5:e1:0c:ec:99:33:af:d4:a8:71:92:58: f5:aa:75:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjUxMjA1MDIyMjA3WhcNMjUxMjEyMDIyMjA3WjAYMRYwFAYD VQQDEw02OTMyNDFjZi0wMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rYla5Ukn7WqAas5tNDrhyjm/t9A/4qLFzmE78N4/suTAHPG1Cuw5zz6cRf/ FrslkvdONPgS8OsdA5PHq/B56DghMeniaqEV8WBJX8qmvOdGb8aKEtIX+rtBrBh0 5ttR8iFTOWXuPXuDZK/lTwLqV1m4Q2rpDCeqpHg/qMQUW3dQSs5ghlzB/atIPLN4 w8ZPC08nWJxisI9uH+RIPEmqQUihECMHO58ptPz0opUF4ILNFrYqGgWTS+xeLPQ+ Rs2CXaI0ooDYtgZ79KM0Z2y7hTe/QnDxeSNWgqrJrsczJNRCyDNRt4YF/z9iPcLH DtMbM7uJ5+ytX3+oayncnvXJ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDo4HSX SZYHLBSgcd4IXiXzxu+uMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKblbRNd9JMQFfwz6XxxCNNtx4f35eed1oYwxJK/WBvSt4s325ITkU 2dulW0AvYpDu9fwNY+7OauNiEz4nStC+zSGrkVsowFhFfZh8tWbyn5kis5YSkkFz pXMdc7CSYFZTSp9V2sZSw8KuKHb+hWxaPYV/OFFoI8lxStqI4Ym91Tftt6fM1k0v T5GXKLBLZkFuEpTak9I1MP+8s0hfSEAdRXLafUKHrTOzRzxOVqzA21hujviCLCHc fTBz52TgVsleebFs6K6OgEr0w+YYoRjZdTqYyBo6DkaUZIq4Gyh8kY7Okk+FNUEM cfalMESlKtDV4QzsmTOv1Khxklj1qnUP -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:27 2025 by rpki-client