This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: +/mCvyT8tq0XB6tcnVFwtp82wRGSckHDRJRiAfZMKao= Subject key identifier: 1A:C9:98:B0:52:D4:7B:4D:99:FF:76:1D:0F:C0:E5:D7:E1:F9:90:88 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0DCA Signing time: Sat 06 Dec 2025 17:21:28 +0000 Manifest this update: Sat 06 Dec 2025 17:21:27 +0000 Manifest next update: Sat 13 Dec 2025 17:21:27 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: bdXaYk/pbG4WcCb65YgT9vVFZWJc7B+7FLH9yseAjvM=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3585 (0xe01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Dec 6 17:21:27 2025 GMT Not After : Dec 13 17:21:27 2025 GMT Subject: CN=69346618-d1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:fb:93:ce:73:5a:ce:e0:1e:56:f7:a2:6e: 74:98:99:80:7a:79:0f:4b:0a:1d:de:d2:59:54:65: bc:ca:03:e5:ff:b8:ec:a9:c3:1a:05:00:61:00:83: 4b:09:c9:bd:3e:1b:47:3c:64:d3:52:d6:54:ae:30: fb:db:0e:5f:3d:77:b1:11:52:65:1f:a1:9e:c2:48: e8:b3:57:e3:6a:36:0e:19:93:2c:0d:16:a2:e9:f8: 21:aa:b2:dc:a6:a3:88:1f:08:5e:34:cf:64:1e:e4: 73:9f:90:b4:eb:bf:0f:8b:1f:3a:19:cb:03:4c:c4: 86:e9:ae:09:43:a6:44:31:d9:fa:2b:76:8a:b2:8e: b4:a8:94:36:b5:9b:59:4b:5f:b0:9d:53:3b:74:16: 73:56:54:af:7e:bd:6a:55:c0:85:97:f8:41:d8:ba: 5a:0f:67:f0:0d:b5:36:49:f6:5b:21:a9:ea:61:69: 07:12:c5:5e:b2:32:74:de:59:e4:21:be:31:ba:74: 1e:fd:e9:5b:d1:d8:94:94:33:45:53:7c:3a:9d:aa: 93:94:57:cc:35:f7:6e:d3:9b:6c:47:73:ad:04:c1: 44:2b:f8:5d:f1:52:03:5c:b5:54:2c:1b:f0:d1:55: 00:7d:02:b9:4b:62:8f:e2:90:06:f8:4e:2b:ad:49: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C9:98:B0:52:D4:7B:4D:99:FF:76:1D:0F:C0:E5:D7:E1:F9:90:88 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:68:bd:2b:42:2c:7b:6f:26:12:36:87:73:8c:13:b3:ff:ae: b7:51:c6:d0:ba:a8:94:8a:df:5a:84:3a:a6:4f:2a:da:49:33: 76:e4:c7:7e:5c:da:c1:41:a6:55:6a:28:d6:62:05:ee:a7:f2: c9:c6:27:42:8d:4c:95:a7:ec:c4:66:2a:b3:23:1b:02:0f:f1: 87:a0:4d:f8:30:4e:6a:72:28:10:86:6a:69:5b:cc:3a:ea:9d: 35:fd:e0:63:1f:8b:4d:e2:af:46:12:c5:75:87:05:aa:6d:04: db:2d:aa:9e:af:b6:0d:07:41:05:e5:09:55:7d:78:53:24:cc: 88:3d:5e:43:90:9e:34:3c:e8:43:8a:03:8d:84:61:4e:be:7d: 4d:ae:36:3a:15:4c:f8:9f:86:4a:9c:c9:5c:d6:61:f4:b0:b0: 0e:ce:40:86:ee:4e:3a:9d:53:81:8f:8f:31:ae:ae:30:0d:28: c0:37:09:16:33:f3:a7:d1:fa:46:5b:87:96:7d:fe:ee:06:39: a3:07:8d:2f:64:19:b5:68:71:9f:7c:18:9c:ed:96:6f:66:ef: c6:cb:ea:12:cc:ac:aa:dc:88:f3:76:c7:dc:7f:88:e0:25:ba: e9:f8:11:2f:a5:6a:ee:37:fe:a1:dd:df:0f:a4:1d:a9:37:5d: dc:64:43:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUxMjA2MTcyMTI3WhcNMjUxMjEzMTcyMTI3WjAYMRYwFAYD VQQDEw02OTM0NjYxOC1kMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AP7k85zWs7gHlb3om50mJmAenkPSwod3tJZVGW8ygPl/7jsqcMaBQBhAINL Ccm9PhtHPGTTUtZUrjD72w5fPXexEVJlH6Gewkjos1fjajYOGZMsDRai6fghqrLc pqOIHwheNM9kHuRzn5C0678Pix86GcsDTMSG6a4JQ6ZEMdn6K3aKso60qJQ2tZtZ S1+wnVM7dBZzVlSvfr1qVcCFl/hB2LpaD2fwDbU2SfZbIanqYWkHEsVesjJ03lnk Ib4xunQe/elb0diUlDNFU3w6naqTlFfMNfdu05tsR3OtBMFEK/hd8VIDXLVULBvw 0VUAfQK5S2KP4pAG+E4rrUn1iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrJmLBS 1HtNmf92HQ/A5dfh+ZCIMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWaL0rQix7byYSNodzjBOz/663UcbQuqiUit9ahDqmTyraSTN25Md+ XNrBQaZVaijWYgXup/LJxidCjUyVp+zEZiqzIxsCD/GHoE34ME5qcigQhmppW8w6 6p01/eBjH4tN4q9GEsV1hwWqbQTbLaqer7YNB0EF5QlVfXhTJMyIPV5DkJ40POhD igONhGFOvn1NrjY6FUz4n4ZKnMlc1mH0sLAOzkCG7k46nVOBj48xrq4wDSjANwkW M/On0fpGW4eWff7uBjmjB40vZBm1aHGffBic7ZZvZu/Gy+oSzKyq3Ijzdsfcf4jg Jbrp+BEvpWruN/6h3d8PpB2pN13cZEMH -----END CERTIFICATE-----Generated at Sun Dec 7 03:46:54 2025 by rpki-client