This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: ZoRhnb3kOF/W1fhp4A7DvUrB/oOroCU2wZs1CeEd8uo= Subject key identifier: 4A:B0:72:9E:AB:7B:F9:9A:C9:25:50:B4:D7:8D:DC:E4:07:FB:F4:8D Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 0110 Signing time: Fri 19 Dec 2025 04:04:31 +0000 Manifest this update: Fri 19 Dec 2025 04:04:30 +0000 Manifest next update: Fri 26 Dec 2025 04:04:30 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: AHqmWiF5Jk1U+cRQra3EzLjGP4Es5/UIwa/ZnXTUG9c=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: rNoN9qQu8LQ3m6mpRD2sIdAYAMWn+KDz+Z0MyLwHYpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Dec 19 04:04:30 2025 GMT Not After : Dec 26 04:04:30 2025 GMT Subject: CN=6944cecf-ba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:f9:db:17:da:a1:92:54:4a:65:a2:6b:15: 8b:ea:b8:d5:ec:e5:34:fb:21:b8:cb:5c:6f:ae:c2: 44:d0:f6:00:5b:6c:87:bd:a4:8b:b0:c6:3f:c5:8d: 87:b3:28:3c:2f:63:f0:ea:05:01:ee:75:39:c6:a3: dc:a4:aa:85:54:40:7c:12:73:90:8e:d9:c2:a9:c6: a0:20:49:8f:5f:55:63:46:d2:36:17:77:93:d3:f3: 5a:e0:0d:a3:a6:1e:f7:e8:7a:5a:92:3d:d8:c5:b8: 81:43:76:5c:33:20:ae:83:34:b8:c0:07:90:36:d0: 67:f8:38:3c:3c:4b:d5:70:63:3f:d9:62:17:bf:7f: d9:2f:a1:ac:31:83:66:76:3a:60:f8:78:37:77:d1: b5:13:dd:7d:35:09:9f:da:69:eb:f5:35:99:3d:0b: 47:44:08:7d:93:0f:4b:d0:3b:95:17:7c:6f:f9:6d: e1:86:de:28:db:91:b2:2e:aa:ca:4e:23:e4:39:34: c9:7e:0b:2f:0c:b1:53:74:91:75:1a:3f:b5:4b:86: 4b:25:9c:4e:cd:4d:3c:ed:4b:76:28:48:c0:e0:cf: 91:61:64:71:c6:93:73:e5:fd:3b:00:dc:d6:15:2a: 18:ee:7d:6f:e1:b5:f6:89:5e:f0:62:a7:78:11:2f: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:72:9E:AB:7B:F9:9A:C9:25:50:B4:D7:8D:DC:E4:07:FB:F4:8D X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:53:29:69:dc:bb:e8:aa:1f:ae:bc:c8:1c:cd:8a:06:7a:c8: 1e:b8:29:bd:59:dc:93:75:11:72:11:c6:d1:1f:df:47:ae:4e: 89:99:67:75:f5:61:75:e6:dd:db:e3:bf:40:05:80:c1:e8:1f: 0a:d1:3f:dd:da:ae:e1:50:41:6a:1c:9f:eb:c2:bd:5b:5d:8c: 17:7e:ab:e5:d0:3e:9f:22:f9:92:9e:65:1a:28:67:fc:37:dd: 2a:80:b2:bb:bb:9f:67:57:81:30:28:12:51:df:15:d6:ad:0d: bc:a8:5f:9d:e5:4b:d4:7c:de:f2:09:3b:ac:b0:20:16:f0:85: 3c:d3:66:65:21:da:ed:6d:fb:1b:7f:28:50:a8:b7:54:21:8c: 32:4f:c0:5d:5a:09:18:25:97:e6:d5:44:c6:0b:8b:7b:3d:c8: 6d:5e:62:53:6b:6e:e5:d3:60:f2:7a:72:55:fd:91:95:2b:86: 23:6b:aa:66:06:5f:d3:c7:31:61:1a:95:a0:c1:08:71:aa:76: 50:50:88:ec:42:c1:22:f2:f6:14:a4:ba:d6:77:35:3e:54:b6: 51:41:f4:8c:7c:ba:43:f3:88:d3:b7:e0:46:b1:67:9c:09:e4: 75:4a:99:3c:71:b5:b2:90:ae:89:63:e3:c4:8e:6d:9f:e3:65: 75:64:cc:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUxMjE5MDQwNDMwWhcNMjUxMjI2MDQwNDMwWjAYMRYwFAYD VQQDDA02OTQ0Y2VjZi1iYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx752xfaoZJUSmWiaxWL6rjV7OU0+yG4y1xvrsJE0PYAW2yHvaSLsMY/xY2H syg8L2Pw6gUB7nU5xqPcpKqFVEB8EnOQjtnCqcagIEmPX1VjRtI2F3eT0/Na4A2j ph736Hpakj3YxbiBQ3ZcMyCugzS4wAeQNtBn+Dg8PEvVcGM/2WIXv3/ZL6GsMYNm djpg+Hg3d9G1E919NQmf2mnr9TWZPQtHRAh9kw9L0DuVF3xv+W3hht4o25GyLqrK TiPkOTTJfgsvDLFTdJF1Gj+1S4ZLJZxOzU087Ut2KEjA4M+RYWRxxpNz5f07ANzW FSoY7n1v4bX2iV7wYqd4ES9voQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqwcp6r e/maySVQtNeN3OQH+/SNMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeUylp3Lvoqh+uvMgczYoGesgeuCm9WdyTdRFyEcbRH99Hrk6JmWd1 9WF15t3b479ABYDB6B8K0T/d2q7hUEFqHJ/rwr1bXYwXfqvl0D6fIvmSnmUaKGf8 N90qgLK7u59nV4EwKBJR3xXWrQ28qF+d5UvUfN7yCTussCAW8IU802ZlIdrtbfsb fyhQqLdUIYwyT8BdWgkYJZfm1UTGC4t7PchtXmJTa27l02DyenJV/ZGVK4Yja6pm Bl/TxzFhGpWgwQhxqnZQUIjsQsEi8vYUpLrWdzU+VLZRQfSMfLpD84jTt+BGsWec CeR1Spk8cbWykK6JY+PEjm2f42V1ZMxP -----END CERTIFICATE-----Generated at Fri Dec 19 20:11:30 2025 by rpki-client