This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: y0dt+Kv65JSjQL7SPl2eORH+nJ9towvuoIe2sWCpttg= Subject key identifier: 34:A0:11:6F:EC:3D:35:65:54:FB:27:11:BA:B3:BB:66:0C:3A:D2:69 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0181 Signing time: Tue 23 Dec 2025 02:44:31 +0000 Manifest this update: Tue 23 Dec 2025 02:44:31 +0000 Manifest next update: Tue 30 Dec 2025 02:44:31 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: xUa5HKRoi6lrzqFZHqHOB5jdfIC+1hkRrCqQrd6hkHU=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: qaJjnM/nFYTPN1/4OCWjrzD56e+pIDcvzqv8I7CMWas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Dec 23 02:44:31 2025 GMT Not After : Dec 30 02:44:31 2025 GMT Subject: CN=694a020f-fb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:86:d2:56:a1:41:e4:d9:a4:44:fd:57:0a: 90:96:a2:e8:b8:30:c5:ff:8a:9c:76:46:3a:dc:69: dc:cb:0d:0b:c3:b3:54:0d:1c:bf:a4:c8:d7:5f:8b: de:38:8d:71:5b:cb:cb:b9:8b:1b:93:e4:b3:e4:13: b0:db:28:42:b0:90:54:30:8b:f1:7a:4e:fe:cb:c3: d6:c1:6a:ba:b6:a7:86:0e:b1:1d:7a:b6:ed:4c:49: ac:63:a4:d3:d8:0f:9e:d7:a3:77:50:d7:c9:e1:27: 33:d1:a9:5b:a0:c5:a6:c7:f1:62:ed:7c:c2:67:d0: a6:ea:f8:2d:db:32:89:c7:64:0a:6b:6c:80:26:0c: 99:9e:ac:ef:7b:54:c4:8c:ab:7a:cc:41:52:24:7e: d5:9e:fa:26:4e:22:ef:52:fb:c5:72:7f:35:09:be: 7c:4e:01:89:8c:58:30:84:ef:20:db:77:ca:99:96: 0f:d5:f2:e3:05:1c:45:70:0d:6f:77:10:a8:56:c7: ce:b8:5a:d6:71:e9:7b:6e:2e:6a:63:9b:02:5f:f2: 36:ce:78:74:49:85:bb:55:11:02:81:b9:56:97:a5: 60:5d:e4:ac:cc:a8:18:2c:8a:26:fa:c3:21:27:46: 90:26:2b:a1:54:c3:ec:69:85:5c:96:63:84:1d:25: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A0:11:6F:EC:3D:35:65:54:FB:27:11:BA:B3:BB:66:0C:3A:D2:69 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:fd:76:9a:34:9d:0a:2a:e9:37:19:bc:e5:e2:58:45:c5:11: 74:eb:77:44:49:33:dc:dd:bd:f1:b9:fe:75:65:b5:19:c4:eb: 45:40:97:e2:66:d3:20:e1:2e:42:34:ce:a3:1e:74:01:a0:69: 3b:09:a5:63:01:fa:6a:f6:d2:ed:9f:aa:bc:e2:b0:70:42:92: 89:27:15:1a:bd:1c:3b:b3:b1:6f:42:a8:22:1b:5b:06:2c:bc: ca:7a:a9:58:76:f7:aa:49:fe:c6:39:46:5b:f4:27:c4:ab:cb: 1d:8a:2a:c4:0c:ad:8b:bb:7d:ea:47:cd:55:a7:da:01:68:97: 32:43:3f:95:ac:da:d6:35:3c:f9:c0:73:1c:92:79:63:c1:06: 5d:75:8f:1d:35:a6:87:01:20:6c:39:a3:6e:dd:f0:23:f7:6c: e4:e1:64:33:1b:f8:da:5e:7e:5e:7f:a2:28:65:7d:19:7a:d7: 67:70:c6:8d:65:69:87:8f:48:27:2e:24:b5:cd:f6:ca:7e:d3: 18:6e:0d:10:ea:32:64:5a:44:7c:62:6b:27:b8:75:b0:aa:ce: d2:73:e7:9f:ff:be:b3:55:f1:08:19:64:65:d8:d1:58:f6:94: 1d:72:dc:28:9b:a6:35:bf:53:7d:7b:e7:6f:70:a2:2f:07:7b: d6:0c:a0:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUxMjIzMDI0NDMxWhcNMjUxMjMwMDI0NDMxWjAYMRYwFAYD VQQDDA02OTRhMDIwZi1mYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7USG0lahQeTZpET9VwqQlqLouDDF/4qcdkY63Gncyw0Lw7NUDRy/pMjXX4ve OI1xW8vLuYsbk+Sz5BOw2yhCsJBUMIvxek7+y8PWwWq6tqeGDrEderbtTEmsY6TT 2A+e16N3UNfJ4Scz0alboMWmx/Fi7XzCZ9Cm6vgt2zKJx2QKa2yAJgyZnqzve1TE jKt6zEFSJH7VnvomTiLvUvvFcn81Cb58TgGJjFgwhO8g23fKmZYP1fLjBRxFcA1v dxCoVsfOuFrWcel7bi5qY5sCX/I2znh0SYW7VRECgblWl6VgXeSszKgYLIom+sMh J0aQJiuhVMPsaYVclmOEHSUyxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSgEW/s PTVlVPsnEbqzu2YMOtJpMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1/XaaNJ0KKuk3Gbzl4lhFxRF063dESTPc3b3xuf51ZbUZxOtFQJfi ZtMg4S5CNM6jHnQBoGk7CaVjAfpq9tLtn6q84rBwQpKJJxUavRw7s7FvQqgiG1sG LLzKeqlYdveqSf7GOUZb9CfEq8sdiirEDK2Lu33qR81Vp9oBaJcyQz+VrNrWNTz5 wHMcknljwQZddY8dNaaHASBsOaNu3fAj92zk4WQzG/jaXn5ef6IoZX0ZetdncMaN ZWmHj0gnLiS1zfbKftMYbg0Q6jJkWkR8YmsnuHWwqs7Sc+ef/76zVfEIGWRl2NFY 9pQdctwom6Y1v1N9e+dvcKIvB3vWDKDn -----END CERTIFICATE-----Generated at Tue Dec 23 13:58:40 2025 by rpki-client