This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: 87zTEG9vGGA1YEocr/udSkRo+Gr6X4/pKq/JQWB84eA= Subject key identifier: B6:41:DA:7A:21:6F:1A:5B:C7:EA:35:78:43:08:52:5E:FA:A5:30:B7 Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 0610 Signing time: Thu 04 Dec 2025 21:35:27 +0000 Manifest this update: Thu 04 Dec 2025 21:35:26 +0000 Manifest next update: Thu 11 Dec 2025 21:35:26 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: zV8ZEUUb5e6YMupGgOXG09fD3J7I+I6YBmpfNO3U3NM=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: mwVl4hNEaIqbBNWJudlbCJK/THwSQhv97GiC3rtYAeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Dec 4 21:35:26 2025 GMT Not After : Dec 11 21:35:26 2025 GMT Subject: CN=6931fe9e-b236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:5a:a3:af:1f:4d:80:ac:42:c9:cf:45:26: 4e:98:2e:fe:47:d9:d0:8d:f0:b0:85:37:07:1c:f8: 11:b5:99:59:15:7e:7a:41:09:47:38:ba:cc:63:07: 25:60:5e:1a:a6:35:78:e4:9c:77:dc:b6:89:42:d3: 79:50:a1:61:2a:f1:a5:e4:c5:21:12:73:bb:b3:13: 14:87:64:51:60:1d:5c:5c:94:9d:f5:58:93:ca:0e: 05:cf:8d:c3:71:7c:ae:d9:ab:46:17:b8:2c:aa:e3: 14:9e:4b:96:74:34:ed:d5:82:ec:1f:84:43:de:dd: 9a:d5:0a:0c:93:3b:e3:ec:2e:61:b2:ff:ba:a8:1a: 29:70:e2:a0:8f:a5:38:e8:9f:2c:03:e8:b0:9f:25: 2b:06:48:fd:4b:1e:a4:2b:ef:75:75:b0:e7:ec:f7: ca:b7:4b:89:53:c5:01:ed:01:b4:b2:60:f1:09:93: ca:3f:c0:18:d3:49:06:e4:47:0e:fa:ee:c9:3c:91: bf:40:c7:f1:19:88:41:fe:cf:22:58:02:68:f1:a0: 5a:ee:8d:13:d6:ea:6e:cb:70:fa:04:54:c0:19:a6: af:d1:09:54:77:22:66:5f:3a:f9:a4:c3:e6:4b:85: 84:32:83:da:c3:67:63:fb:c8:95:f9:e1:9f:8e:0f: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:41:DA:7A:21:6F:1A:5B:C7:EA:35:78:43:08:52:5E:FA:A5:30:B7 X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5f:d5:7c:11:cb:81:e2:80:56:7c:fb:12:1e:be:61:64:ae: 3d:31:86:d3:8d:e3:60:85:30:80:05:f5:22:c0:75:2d:18:8f: ab:18:2e:72:8d:28:c5:90:81:b0:45:08:2e:de:1b:6f:cc:d8: c4:d1:e9:ee:62:f2:c3:8e:ce:11:f0:d4:42:73:41:fd:e7:0f: 21:7d:30:96:32:f9:00:32:a1:db:f5:a7:e0:bc:6e:82:cf:31: 27:ad:24:4b:60:1b:2f:60:f6:67:31:35:c0:ef:b1:09:15:e6: c1:cc:5b:10:7f:7f:98:84:92:5c:5c:83:bd:c7:09:30:a0:fd: 1b:07:cd:4b:55:37:a8:84:db:4b:bd:81:3e:ab:02:0f:e1:96: fb:2a:3b:f0:ab:eb:1a:cf:de:2a:20:37:30:5b:49:30:f3:7e: b0:86:b5:9e:1b:23:6c:dd:31:f0:ce:a4:04:0d:42:c4:9f:53: 66:e0:90:27:70:f4:8a:f5:65:9b:5b:c9:c3:91:0b:87:57:86: 22:31:22:8d:71:4a:46:e6:b4:27:af:f4:b9:71:be:de:65:db: 0b:6f:42:03:3d:32:fe:6a:96:8f:ed:f5:73:5b:e9:15:20:af: de:62:ed:75:03:b8:ac:56:13:57:4f:b2:8f:70:2d:57:4c:aa: 54:e6:2a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjUxMjA0MjEzNTI2WhcNMjUxMjExMjEzNTI2WjAYMRYwFAYD VQQDEw02OTMxZmU5ZS1iMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq9ao68fTYCsQsnPRSZOmC7+R9nQjfCwhTcHHPgRtZlZFX56QQlHOLrMYwcl YF4apjV45Jx33LaJQtN5UKFhKvGl5MUhEnO7sxMUh2RRYB1cXJSd9ViTyg4Fz43D cXyu2atGF7gsquMUnkuWdDTt1YLsH4RD3t2a1QoMkzvj7C5hsv+6qBopcOKgj6U4 6J8sA+iwnyUrBkj9Sx6kK+91dbDn7PfKt0uJU8UB7QG0smDxCZPKP8AY00kG5EcO +u7JPJG/QMfxGYhB/s8iWAJo8aBa7o0T1upuy3D6BFTAGaav0QlUdyJmXzr5pMPm S4WEMoPaw2dj+8iV+eGfjg//FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZB2noh bxpbx+o1eEMIUl76pTC3MB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPX9V8EcuB4oBWfPsSHr5hZK49MYbTjeNghTCABfUiwHUtGI+rGC5y jSjFkIGwRQgu3htvzNjE0enuYvLDjs4R8NRCc0H95w8hfTCWMvkAMqHb9afgvG6C zzEnrSRLYBsvYPZnMTXA77EJFebBzFsQf3+YhJJcXIO9xwkwoP0bB81LVTeohNtL vYE+qwIP4Zb7Kjvwq+saz94qIDcwW0kw836whrWeGyNs3THwzqQEDULEn1Nm4JAn cPSK9WWbW8nDkQuHV4YiMSKNcUpG5rQnr/S5cb7eZdsLb0IDPTL+apaP7fVzW+kV IK/eYu11A7isVhNXT7KPcC1XTKpU5ioE -----END CERTIFICATE-----Generated at Sat Dec 6 18:11:28 2025 by rpki-client