This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: a/FU5xH4Hp9zwtkpfUPs3kHBgwBoNIOK9PqmHRcAkxQ= Subject key identifier: F7:11:6C:9A:1A:E0:19:1B:0C:77:6F:F4:85:37:F9:13:D3:F2:24:EE Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 08BC Signing time: Sat 06 Dec 2025 19:37:17 +0000 Manifest this update: Sat 06 Dec 2025 19:37:17 +0000 Manifest next update: Sat 13 Dec 2025 19:37:17 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: PRwDH3E2tLMe9hzpDrmmysB7SD8UMCsSxgyuLxlLHcM=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: p0a0nQBisH4VKwtpLEiKDNLpUVAu9yIvpOIZZoB51RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Dec 6 19:37:17 2025 GMT Not After : Dec 13 19:37:17 2025 GMT Subject: CN=693485ed-b097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:3e:8b:4d:b9:b0:da:e4:c8:f7:20:c0:ab: 60:1d:50:1b:f0:6e:3b:62:df:0d:95:4f:8c:1e:fb: b4:f9:72:06:ec:a8:a0:88:33:26:82:96:63:e6:06: d0:2e:d2:da:b2:61:a6:1a:98:16:f2:c3:68:44:d7: 68:77:ff:16:92:4c:23:16:bb:1b:ea:51:4f:ef:d6: 71:fb:79:71:60:03:ec:b1:82:4f:ab:6f:16:35:3c: 7f:93:17:3a:be:43:c5:bb:9e:c7:91:b1:f4:df:7b: 78:b9:67:cc:81:a6:ff:6c:a7:2d:8f:a6:4b:a0:16: 78:35:2c:35:b2:d0:3b:ed:2c:0d:09:88:4d:a7:f2: b1:c6:40:99:82:2d:4f:13:0e:23:da:80:98:0d:d3: 55:2a:68:88:65:28:0f:96:8b:1c:54:6b:36:96:4e: 7f:6c:91:c1:c3:f9:5b:3a:c0:72:63:1d:10:77:d4: 5a:77:2b:64:53:dc:0b:61:65:a0:f5:95:c1:99:dc: 26:a3:f0:19:b3:06:5b:cd:f6:ea:80:2d:04:7a:74: 43:a7:ec:99:f8:a9:5a:24:9f:4e:aa:08:a4:53:d5: ac:b0:f1:d4:77:b1:7d:3d:c7:d3:3a:96:77:a8:21: a9:3d:76:5e:33:7e:c2:9d:12:df:1b:d9:4f:d9:4f: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:11:6C:9A:1A:E0:19:1B:0C:77:6F:F4:85:37:F9:13:D3:F2:24:EE X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:41:a6:b3:39:8c:ec:d9:72:c7:eb:11:2f:dd:52:8a:3d:43: b7:d7:b6:8e:79:9e:17:7c:9d:ed:6e:0b:04:bf:6f:82:9c:d9: cb:a5:b8:f8:13:8f:a8:4b:57:11:1a:d2:91:db:61:6c:32:09: 72:83:94:20:42:53:e7:6f:01:08:a5:8f:fc:7a:b3:1e:f3:a7: 7d:ff:51:09:68:e9:76:14:81:b8:b6:e2:a8:b1:05:e2:72:3c: 86:07:c7:d6:90:87:5e:bd:62:55:c9:99:3f:7c:3e:b7:07:84: 0d:ae:b0:97:54:70:c5:a2:74:a2:01:40:38:1d:ce:d9:51:48: 4c:2a:85:be:fd:9b:45:00:0d:fc:88:5c:dc:28:e8:3a:92:b3: a5:c2:51:eb:19:fd:2a:e5:ec:1b:56:05:f1:f4:f6:89:28:93: ac:bf:90:1b:ee:e4:ab:1c:50:3b:79:b3:34:af:a0:ac:e6:e3: 91:ae:fb:12:c1:f0:fc:ae:d2:4d:8a:80:ef:87:bd:7f:2a:e1: 07:e6:d2:9c:6c:03:92:f3:16:eb:0e:8a:be:13:31:85:a0:ad: 10:5d:d9:10:fd:c2:10:82:a3:14:cf:6e:28:9e:57:e0:7e:c6: b4:7c:70:b1:1b:71:2e:9d:64:7b:e3:20:a8:9f:89:c0:6a:cd: d2:24:93:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUxMjA2MTkzNzE3WhcNMjUxMjEzMTkzNzE3WjAYMRYwFAYD VQQDEw02OTM0ODVlZC1iMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMM+i025sNrkyPcgwKtgHVAb8G47Yt8NlU+MHvu0+XIG7KigiDMmgpZj5gbQ LtLasmGmGpgW8sNoRNdod/8WkkwjFrsb6lFP79Zx+3lxYAPssYJPq28WNTx/kxc6 vkPFu57HkbH033t4uWfMgab/bKctj6ZLoBZ4NSw1stA77SwNCYhNp/KxxkCZgi1P Ew4j2oCYDdNVKmiIZSgPloscVGs2lk5/bJHBw/lbOsByYx0Qd9RadytkU9wLYWWg 9ZXBmdwmo/AZswZbzfbqgC0EenRDp+yZ+KlaJJ9OqgikU9WssPHUd7F9PcfTOpZ3 qCGpPXZeM37CnRLfG9lP2U9DJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcRbJoa 4BkbDHdv9IU3+RPT8iTuMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIQaazOYzs2XLH6xEv3VKKPUO317aOeZ4XfJ3tbgsEv2+CnNnLpbj4 E4+oS1cRGtKR22FsMglyg5QgQlPnbwEIpY/8erMe86d9/1EJaOl2FIG4tuKosQXi cjyGB8fWkIdevWJVyZk/fD63B4QNrrCXVHDFonSiAUA4Hc7ZUUhMKoW+/ZtFAA38 iFzcKOg6krOlwlHrGf0q5ewbVgXx9PaJKJOsv5Ab7uSrHFA7ebM0r6Cs5uORrvsS wfD8rtJNioDvh71/KuEH5tKcbAOS8xbrDoq+EzGFoK0QXdkQ/cIQgqMUz24onlfg fsa0fHCxG3EunWR74yCon4nAas3SJJOx -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:39 2025 by rpki-client