This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: JaM2DFQcQv2pML0WlwzyO+arK7FkxL6RjXa4yGfFmpk= Subject key identifier: 5A:B1:BD:F1:44:68:6C:41:56:A7:11:1A:E8:69:1A:A8:72:A2:82:C5 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: F2 Signing time: Thu 18 Dec 2025 14:22:47 +0000 Manifest this update: Thu 18 Dec 2025 14:22:46 +0000 Manifest next update: Thu 25 Dec 2025 14:22:46 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: L4r/3Doqtujb5xw/mOUBO3/tyq8FGGbQijzh9AsUp5I=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Dec 18 14:22:46 2025 GMT Not After : Dec 25 14:22:46 2025 GMT Subject: CN=69440e37-602e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0b:13:da:30:1f:4b:6d:ed:5d:c2:40:9f:06: 96:05:83:ac:ef:37:30:d6:35:ae:db:f1:8c:61:11: 60:24:96:14:d9:05:38:9e:0b:9b:71:61:54:ef:1a: aa:53:84:d5:01:17:2e:00:3d:bd:43:76:c2:9b:a4: 1f:4c:63:14:be:3a:39:54:64:94:78:a0:8e:68:a2: 13:00:43:a7:be:a4:7c:81:27:2c:3d:da:c1:83:0b: 99:34:a2:d3:5c:c0:d9:ff:83:df:42:c8:c9:c8:91: 6e:5d:57:a3:4e:bf:b5:3e:77:20:24:b3:e9:5a:63: df:20:5b:d1:f8:ef:5b:a3:de:1f:3e:fb:73:dc:35: df:60:a5:fe:fd:f4:cf:38:1d:f5:eb:5b:9e:48:f9: e3:05:b6:5f:89:ec:ce:7b:4e:4e:4d:d1:d4:9b:79: 55:65:a7:db:c5:21:b3:f1:94:d1:74:cf:a1:b0:66: 12:cb:ec:9a:3c:85:95:57:c6:7f:40:bf:41:66:f5: db:6a:f3:e3:87:6e:23:9c:ae:8d:ab:4c:41:ae:c0: 3a:66:0d:fa:ae:16:f0:ef:0e:a9:ac:80:0a:f7:04: 7e:16:60:5a:33:83:11:bc:d0:92:c8:28:3e:0a:bb: 4d:a8:c3:89:ef:6d:7c:92:02:00:01:e7:75:1f:44: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:BD:F1:44:68:6C:41:56:A7:11:1A:E8:69:1A:A8:72:A2:82:C5 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:76:de:b0:0e:54:ca:8b:97:be:17:9e:9c:b4:e8:cf:f3:af: 13:be:e1:5b:7b:60:25:1c:4d:6c:89:65:bf:0d:cf:13:5c:d7: 36:0c:c4:56:a3:54:bc:23:17:7a:16:1a:e7:58:a7:31:1d:72: dc:03:b1:50:a1:4e:95:fa:ad:5c:2a:45:1b:03:83:d3:b0:3a: 38:7c:a3:19:f4:c0:52:67:97:48:e2:0a:78:e8:88:dc:81:2b: f2:33:9a:78:02:f6:40:ab:f7:0a:0b:b7:4b:ae:05:62:8a:af: c2:75:c1:5f:5e:b1:f8:78:9c:cc:bb:2c:8c:bb:a8:85:16:fe: f3:1a:9b:db:a5:97:59:0e:5b:4c:82:07:f4:d2:81:af:91:5b: f0:c1:dc:db:9e:82:89:82:33:4e:fa:e8:d0:30:c6:7d:bc:76: b6:29:44:99:f9:0e:c3:5c:a8:2e:41:82:25:8a:45:81:bb:93: 24:97:91:b6:d4:f4:1d:f6:c1:81:35:ed:c0:8e:00:7f:99:4d: e7:28:79:ac:b4:3a:97:41:4a:8f:70:ba:99:04:b4:17:99:e6: 66:2a:d7:7d:e3:2b:32:d7:2a:bc:0e:cf:8b:e8:5c:1b:90:53: f7:22:96:48:4e:d1:7b:4f:3f:8b:a1:ec:00:9f:bb:9d:f3:c6: 7a:66:9c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUxMjE4MTQyMjQ2WhcNMjUxMjI1MTQyMjQ2WjAYMRYwFAYD VQQDDA02OTQ0MGUzNy02MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gsT2jAfS23tXcJAnwaWBYOs7zcw1jWu2/GMYRFgJJYU2QU4ngubcWFU7xqq U4TVARcuAD29Q3bCm6QfTGMUvjo5VGSUeKCOaKITAEOnvqR8gScsPdrBgwuZNKLT XMDZ/4PfQsjJyJFuXVejTr+1PncgJLPpWmPfIFvR+O9bo94fPvtz3DXfYKX+/fTP OB3161ueSPnjBbZfiezOe05OTdHUm3lVZafbxSGz8ZTRdM+hsGYSy+yaPIWVV8Z/ QL9BZvXbavPjh24jnK6Nq0xBrsA6Zg36rhbw7w6prIAK9wR+FmBaM4MRvNCSyCg+ CrtNqMOJ7218kgIAAed1H0T9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqxvfFE aGxBVqcRGuhpGqhyooLFMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgdt6wDlTKi5e+F56ctOjP868TvuFbe2AlHE1siWW/Dc8TXNc2DMRW o1S8Ixd6FhrnWKcxHXLcA7FQoU6V+q1cKkUbA4PTsDo4fKMZ9MBSZ5dI4gp46Ijc gSvyM5p4AvZAq/cKC7dLrgViiq/CdcFfXrH4eJzMuyyMu6iFFv7zGpvbpZdZDltM ggf00oGvkVvwwdzbnoKJgjNO+ujQMMZ9vHa2KUSZ+Q7DXKguQYIlikWBu5Mkl5G2 1PQd9sGBNe3AjgB/mU3nKHmstDqXQUqPcLqZBLQXmeZmKtd94ysy1yq8Ds+L6Fwb kFP3IpZITtF7Tz+LoewAn7ud88Z6ZpzY -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:48 2025 by rpki-client