This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: YcsfbnEt4HgNtZidqnMSb6GJkyRNHo2xxV5Me27rxN0= Subject key identifier: B5:09:14:DC:83:67:A7:E7:B8:7C:9C:B7:F6:52:4D:5E:FA:0E:30:7C Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 09A1 Signing time: Thu 18 Dec 2025 19:36:39 +0000 Manifest this update: Thu 18 Dec 2025 19:36:39 +0000 Manifest next update: Thu 25 Dec 2025 19:36:39 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: z/vJcmXypTahz9A+Hi8QsKRjm4YT0DwTSUVkETjbrkI=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Dec 18 19:36:39 2025 GMT Not After : Dec 25 19:36:39 2025 GMT Subject: CN=694457c7-845a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:19:5a:63:3e:49:c4:08:06:e8:92:0f:84: 83:cd:84:24:d5:ba:0b:40:5c:6e:3a:88:fd:6d:e0: 2a:59:e0:4a:66:41:07:41:66:77:34:cc:8b:32:7e: 0b:2f:c0:c4:cb:47:a9:d9:f5:87:89:55:3d:fc:dc: 41:fe:8a:44:1b:c6:96:03:e4:99:81:1a:22:f1:4f: dc:ec:62:91:87:aa:b3:69:1e:1f:2c:73:c2:db:9e: 79:e8:e2:3d:96:15:8b:c3:55:ea:9b:83:06:db:a5: 66:be:d3:ff:61:82:a5:e6:1b:59:db:5d:fa:2b:67: a1:dc:0d:f4:a8:e7:31:ae:db:82:5d:3d:ad:ca:56: 9a:3c:44:5e:5c:b1:dd:87:17:55:53:d9:cc:e5:44: 34:e4:f1:c8:be:dd:2e:f3:e9:10:87:b1:d8:1f:78: 39:7a:92:b1:bc:ab:ab:b0:47:38:df:7c:30:21:14: 60:7c:cb:09:73:d4:4c:b6:f6:3f:f3:50:9e:6a:0a: 2c:2c:0a:bb:32:e4:51:ec:60:1d:f5:78:bb:fa:9f: 6c:14:dd:1c:9a:9b:c9:88:66:cd:cb:8d:c8:c4:41: e8:c5:c8:60:68:ed:16:e2:2d:3e:cc:66:c4:68:54: 2a:29:a8:6a:fa:00:e9:a8:9e:dd:25:92:c9:bd:75: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:09:14:DC:83:67:A7:E7:B8:7C:9C:B7:F6:52:4D:5E:FA:0E:30:7C X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:97:a0:76:c5:85:6f:51:a4:45:0b:81:74:e2:89:ae:7b:55: eb:61:c3:08:e6:a0:ad:9f:5d:c1:34:7a:c3:a2:8c:11:2a:93: 4e:1d:ed:18:bd:f4:b1:54:34:91:2a:7f:ae:8d:ff:a4:e2:6f: 59:a2:9b:e5:79:50:df:1f:6e:39:34:a0:b1:62:8d:94:44:cc: 68:7b:52:e0:d7:f2:9d:0c:2f:53:da:10:cb:2e:41:10:23:59: ae:0b:1f:c2:2b:00:bb:d1:63:12:78:26:7c:fb:f0:6a:6e:37: d2:17:7f:25:7d:0c:40:f7:9c:25:1f:94:ca:1f:2c:ce:30:e8: 97:ed:05:c8:97:e3:ed:f3:28:88:1c:e3:30:a1:05:3d:79:cc: 5e:4f:0e:35:c9:63:65:4b:5c:ea:7e:1a:10:73:fc:95:43:3f: ac:fc:a1:2e:7f:63:77:ee:1f:5e:7c:90:43:60:16:70:82:24: ee:e4:d8:ca:34:89:bb:0f:52:08:c7:27:64:48:19:d0:c4:9e: ed:96:c0:46:b8:8c:cc:19:61:ee:34:93:f4:6b:bd:e3:c5:4d: 95:e9:28:33:b7:55:7d:7e:a1:91:63:87:f5:97:62:ef:0a:67: c1:47:8a:af:7a:54:2e:6e:1b:f2:b7:38:3d:cf:39:aa:27:9f: e8:62:35:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUxMjE4MTkzNjM5WhcNMjUxMjI1MTkzNjM5WjAYMRYwFAYD VQQDDA02OTQ0NTdjNy04NDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3QZWmM+ScQIBuiSD4SDzYQk1boLQFxuOoj9beAqWeBKZkEHQWZ3NMyLMn4L L8DEy0ep2fWHiVU9/NxB/opEG8aWA+SZgRoi8U/c7GKRh6qzaR4fLHPC25556OI9 lhWLw1Xqm4MG26VmvtP/YYKl5htZ2136K2eh3A30qOcxrtuCXT2tylaaPEReXLHd hxdVU9nM5UQ05PHIvt0u8+kQh7HYH3g5epKxvKursEc433wwIRRgfMsJc9RMtvY/ 81CeagosLAq7MuRR7GAd9Xi7+p9sFN0cmpvJiGbNy43IxEHoxchgaO0W4i0+zGbE aFQqKahq+gDpqJ7dJZLJvXX5MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUJFNyD Z6fnuHyct/ZSTV76DjB8MB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASl6B2xYVvUaRFC4F04omue1XrYcMI5qCtn13BNHrDoowRKpNOHe0Y vfSxVDSRKn+ujf+k4m9ZopvleVDfH245NKCxYo2URMxoe1Lg1/KdDC9T2hDLLkEQ I1muCx/CKwC70WMSeCZ8+/BqbjfSF38lfQxA95wlH5TKHyzOMOiX7QXIl+Pt8yiI HOMwoQU9ecxeTw41yWNlS1zqfhoQc/yVQz+s/KEuf2N37h9efJBDYBZwgiTu5NjK NIm7D1IIxydkSBnQxJ7tlsBGuIzMGWHuNJP0a73jxU2V6Sgzt1V9fqGRY4f1l2Lv CmfBR4qvelQubhvytzg9zzmqJ5/oYjXu -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:52 2025 by rpki-client