This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft File: 8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json) Hash identifier: qmji8BbEQ41FbVVp2zkJPYl0kqwEhCotvvxo4xvDkBo= Subject key identifier: 87:1B:A4:B2:F0:F4:E2:0C:5F:B7:7F:C1:1B:14:5B:C6:1F:CF:18:27 Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft Manifest number: 10 Signing time: Fri 05 Dec 2025 05:45:52 +0000 Manifest this update: Fri 05 Dec 2025 05:45:51 +0000 Manifest next update: Fri 12 Dec 2025 05:45:51 +0000 Files and hashes: 1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: WLox9Tk8jf1kRarOBfG4JfZ3FE2vg2MP3rq2u2FjEX0=) 2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: cxYtuj/s/bSvnaQ4JfJbG+7S68mrHrbAGrbGPiwy+Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Validity Not Before: Dec 5 05:45:51 2025 GMT Not After : Dec 12 05:45:51 2025 GMT Subject: CN=6932718f-a3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:3c:e0:c3:27:1a:22:1b:2a:95:b5:1d:1b: d7:39:28:33:b9:d8:36:c6:e0:ac:39:ac:04:78:eb: dd:60:cf:2d:10:7d:44:a7:9a:de:a7:8f:fe:27:12: 25:53:bf:e1:f9:86:9f:9a:4e:6b:ab:ed:ca:3a:ec: 10:55:c6:d9:e7:00:09:ff:22:57:3d:12:7e:26:01: c5:6f:af:f3:24:08:2f:8a:31:d9:82:07:4b:0b:f9: b9:b3:f5:b2:e4:18:2d:c6:6e:cc:15:fa:a2:e3:e9: 5a:b0:61:5f:4b:96:cb:d0:e0:a1:5c:d7:50:94:f2: 7a:26:62:26:b8:2d:bf:0a:00:f9:78:1b:f8:c0:23: b2:e3:7c:6c:af:8d:8b:06:4b:b9:db:e8:80:71:c1: 1f:c2:39:a4:06:a0:c3:19:bd:00:55:96:06:82:07: 9d:36:0c:9b:67:b8:9c:02:1c:85:72:9d:3c:9d:91: 88:82:2d:ec:61:24:42:a0:1f:6a:16:2e:9f:8a:9d: b6:f9:5e:2c:6d:ac:97:e7:92:ad:72:30:37:fc:e9: 59:26:93:fe:dd:37:b1:bd:25:1e:24:00:56:21:7a: 65:7c:49:b3:f1:b2:7b:2a:5d:20:fc:81:8b:f0:27: 4f:cd:08:58:71:64:75:1e:19:f4:8a:1d:4e:10:2b: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1B:A4:B2:F0:F4:E2:0C:5F:B7:7F:C1:1B:14:5B:C6:1F:CF:18:27 X509v3 Authority Key Identifier: keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:dd:20:84:27:b5:57:d8:28:f9:70:8c:65:73:53:94:47:85: b4:a3:ae:50:ce:ce:50:eb:d1:83:bf:05:91:27:ce:53:2f:01: 3c:f3:8c:31:3c:87:64:36:fb:33:5e:fc:46:fc:b0:19:3b:15: f0:fe:13:de:06:15:0c:9d:d5:8d:e4:26:ab:74:d1:f1:04:9f: 67:56:31:40:20:75:7d:ac:16:32:75:88:42:c5:6e:74:00:1b: 06:c2:a3:ae:26:4a:8c:0e:5b:93:a1:fb:06:09:cb:69:49:ed: c6:54:6c:56:6c:5e:03:be:b1:6f:65:a4:94:ed:29:29:4e:61: 85:bb:92:e3:81:2a:ca:6a:42:97:fb:a2:13:08:fb:3a:64:d0: a3:e7:76:5f:f7:87:76:d1:cc:e7:9c:46:8c:80:af:65:e9:49: 60:97:3a:d0:26:2c:12:00:ff:a3:cb:af:85:90:06:99:2a:fd: c4:72:48:1f:c9:7c:c7:84:3d:01:99:83:b9:48:c2:15:3c:43: 6f:d5:e9:15:f9:84:17:5a:f0:2e:2d:5e:c4:69:72:df:a5:07: 2a:f7:c6:10:40:f3:05:c8:34:28:33:98:23:85:e8:d0:77:ca: b9:d4:7f:89:5b:06:43:73:73:bb:53:89:96:50:ab:f2:c8:ea: 2d:ea:e7:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUU2QTExMC8GA1UEBRMoRjA1MjFBNUI2REIwNEQ3NTZGQTI5NTJBMEYyOUEzOTEy MTJDNThCMjAeFw0yNTEyMDUwNTQ1NTFaFw0yNTEyMTIwNTQ1NTFaMBgxFjAUBgNV BAMTDTY5MzI3MThmLWEzZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrWzzgwycaIhsqlbUdG9c5KDO52DbG4Kw5rAR4691gzy0QfUSnmt6nj/4nEiVT v+H5hp+aTmur7co67BBVxtnnAAn/Ilc9En4mAcVvr/MkCC+KMdmCB0sL+bmz9bLk GC3GbswV+qLj6VqwYV9LlsvQ4KFc11CU8nomYia4Lb8KAPl4G/jAI7LjfGyvjYsG S7nb6IBxwR/COaQGoMMZvQBVlgaCB502DJtnuJwCHIVynTydkYiCLexhJEKgH2oW Lp+Knbb5XixtrJfnkq1yMDf86Vkmk/7dN7G9JR4kAFYhemV8SbPxsnsqXSD8gYvw J0/NCFhxZHUeGfSKHU4QK0d9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhxuksvD0 4gxft3/BGxRbxh/PGCcwHwYDVR0jBBgwFoAU8FIaW22wTXVvopUqDymjkSEsWLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRTZBLzIxOUQ3RDhBQkMx MjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhWdm9wVXFEeW1qa1NFc1dM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEZJYVcyMndUWFZ2b3BVcUR5bWprU0VzV0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB RTZBLzIxOUQ3RDhBQkMxMjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhW dm9wVXFEeW1qa1NFc1dMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAjdIIQntVfYKPlwjGVzU5RHhbSjrlDOzlDr0YO/BZEnzlMvATzzjDE8 h2Q2+zNe/Eb8sBk7FfD+E94GFQyd1Y3kJqt00fEEn2dWMUAgdX2sFjJ1iELFbnQA GwbCo64mSowOW5Oh+wYJy2lJ7cZUbFZsXgO+sW9lpJTtKSlOYYW7kuOBKspqQpf7 ohMI+zpk0KPndl/3h3bRzOecRoyAr2XpSWCXOtAmLBIA/6PLr4WQBpkq/cRySB/J fMeEPQGZg7lIwhU8Q2/V6RX5hBda8C4tXsRpct+lByr3xhBA8wXINCgzmCOF6NB3 yrnUf4lbBkNzc7tTiZZQq/LI6i3q5ys= -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:36 2025 by rpki-client