This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json) Hash identifier: KSLx1/31BDQtf+MgcjnlE+OZKPBGIMtTAR1LvLkBHtw= Subject key identifier: 52:97:AE:BA:F5:D6:35:25:D0:F8:B6:D8:E9:17:4D:C1:CF:7F:E1:D7 Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft Manifest number: 1D Signing time: Sat 06 Dec 2025 22:15:28 +0000 Manifest this update: Sat 06 Dec 2025 22:15:27 +0000 Manifest next update: Sat 13 Dec 2025 22:15:27 +0000 Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: ddpt3izd4pMcNtL4O6Q09h9rnfDsS+JT47eZiFrsdN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Validity Not Before: Dec 6 22:15:27 2025 GMT Not After : Dec 13 22:15:27 2025 GMT Subject: CN=6934aaff-7d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:26:75:18:54:09:0e:d5:09:46:31:25:7c: 04:96:21:e4:ca:34:dc:88:06:77:2f:3a:94:2c:6b: b6:72:b5:de:51:94:86:e8:5c:fe:0f:66:50:89:f6: c8:5a:9e:01:3a:76:81:89:1e:a8:a2:fc:a1:7f:59: a4:90:b9:b4:88:64:5e:d1:29:33:8f:76:7c:65:14: ad:4b:9d:a7:6a:cd:0c:ea:cf:b2:21:f2:11:93:e7: 99:b8:ee:f0:99:19:b2:b6:97:12:69:5b:7d:91:3c: c4:dd:b3:14:2b:2c:a3:43:7c:a1:ee:bd:a5:5c:30: 61:0d:94:5d:f2:29:ff:56:b3:a0:d9:2a:41:44:a9: 1e:36:17:a3:ba:ef:3f:42:c3:7e:9b:82:a1:18:4c: 11:94:0e:c8:59:67:2b:7a:9a:4d:8e:1e:6d:a5:11: 16:32:17:1c:43:0a:73:32:27:25:d5:5e:7c:98:19: 11:da:2e:9e:ec:56:11:0b:9d:a6:20:d7:32:0b:aa: eb:1e:92:3c:2b:ad:0d:72:99:3f:18:86:09:1a:1d: 91:06:ae:ce:f5:af:b3:ce:25:ce:c2:8d:51:85:4b: 80:23:a6:33:3b:fc:6a:ef:50:66:c0:e5:59:1b:33: 15:4b:8e:10:e7:cd:cb:a2:e3:d7:23:2c:cb:72:f3: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:AE:BA:F5:D6:35:25:D0:F8:B6:D8:E9:17:4D:C1:CF:7F:E1:D7 X509v3 Authority Key Identifier: keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:71:e9:c2:72:77:9e:6c:12:68:28:66:fd:39:fd:c9:9c:9f: 1e:64:55:28:7c:d1:99:c2:7c:74:04:1d:bf:5c:30:be:4e:3c: a4:15:e9:0b:91:67:ae:33:d0:f8:af:65:39:f1:ee:d9:e9:88: 6a:c4:31:54:3e:53:fb:10:fc:04:40:52:3b:27:a3:03:f9:60: d5:78:e1:7f:ed:cc:2b:59:3e:e4:4a:c9:40:f3:f6:8d:10:2e: 54:c2:6f:1d:7f:b2:74:2f:45:7f:3a:85:d6:78:7a:b9:ab:93: 4e:a1:6d:00:86:b3:f3:18:ce:30:fc:eb:f1:b0:27:b3:e7:f2: e0:37:22:65:16:5d:65:a9:92:33:f8:7a:05:81:1a:d1:dd:cb: 2f:90:03:fe:93:5c:a7:e3:ad:d6:ed:ec:d4:dc:bd:18:10:3c: c8:6a:b3:52:8c:19:55:81:4b:d1:a8:d9:d1:db:9d:93:e5:47: 4d:34:14:91:f6:46:7f:07:05:82:70:4d:74:25:3c:96:54:e8: 54:2e:bb:5b:8c:82:57:d4:36:cd:66:34:3f:0e:e6:27:d9:9e: 18:13:16:75:34:d0:ad:5f:4e:cb:93:60:de:57:03:44:9b:91: 01:c8:45:56:49:a3:dd:ce:b3:ef:c9:95:5c:17:7e:06:5f:72: e2:8e:77:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTRCNzExMC8GA1UEBRMoOTdDODU3QTc1QzlBNkUyOThCMDlBMDYxRDhGN0NFMTA3 QkY5RDMzMzAeFw0yNTEyMDYyMjE1MjdaFw0yNTEyMTMyMjE1MjdaMBgxFjAUBgNV BAMTDTY5MzRhYWZmLTdkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDemSZ1GFQJDtUJRjElfASWIeTKNNyIBncvOpQsa7Zytd5RlIboXP4PZlCJ9sha ngE6doGJHqii/KF/WaSQubSIZF7RKTOPdnxlFK1LnadqzQzqz7Ih8hGT55m47vCZ GbK2lxJpW32RPMTdsxQrLKNDfKHuvaVcMGENlF3yKf9Ws6DZKkFEqR42F6O67z9C w36bgqEYTBGUDshZZyt6mk2OHm2lERYyFxxDCnMyJyXVXnyYGRHaLp7sVhELnaYg 1zILqusekjwrrQ1ymT8YhgkaHZEGrs71r7POJc7CjVGFS4AjpjM7/GrvUGbA5Vkb MxVLjhDnzcui49cjLMty86XTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUpeuuvXW NSXQ+LbY6RdNwc9/4dcwHwYDVR0jBBgwFoAUl8hXp1yabimLCaBh2PfOEHv50zMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNEI3L0JEOEFFRDA4QTY0 MjExRjBBQzk5NTgzM0M0RjlBRTAyL2w4aFhwMXlhYmltTENhQmgyUGZPRUh2NTB6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDhoWHAxeWFiaW1MQ2FCaDJQZk9FSHY1MHpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF NEI3L0JEOEFFRDA4QTY0MjExRjBBQzk5NTgzM0M0RjlBRTAyL2w4aFhwMXlhYmlt TENhQmgyUGZPRUh2NTB6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABx6cJyd55sEmgoZv05/cmcnx5kVSh80ZnCfHQEHb9cML5OPKQV6QuR Z64z0PivZTnx7tnpiGrEMVQ+U/sQ/ARAUjsnowP5YNV44X/tzCtZPuRKyUDz9o0Q LlTCbx1/snQvRX86hdZ4ermrk06hbQCGs/MYzjD86/GwJ7Pn8uA3ImUWXWWpkjP4 egWBGtHdyy+QA/6TXKfjrdbt7NTcvRgQPMhqs1KMGVWBS9Go2dHbnZPlR000FJH2 Rn8HBYJwTXQlPJZU6FQuu1uMglfUNs1mND8O5ifZnhgTFnU00K1fTsuTYN5XA0Sb kQHIRVZJo93Os+/JlVwXfgZfcuKOd4o= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:08 2025 by rpki-client