This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft File: sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json) Hash identifier: WsrqzsPlOdiAKFnuXv0b2ZavwAskJ4ueb6x/u7PyM7o= Subject key identifier: 8B:15:D1:6B:27:2E:58:85:2E:D6:F9:06:C7:12:09:25:AD:DF:EA:09 Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50 Certificate issuer: /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft Manifest number: 08 Signing time: Fri 19 Dec 2025 06:59:47 +0000 Manifest this update: Fri 19 Dec 2025 06:59:47 +0000 Manifest next update: Fri 26 Dec 2025 06:59:47 +0000 Files and hashes: 1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: 9Q1aqSNcryx6kAFf2u+4j9MNqb648CqA/3sxZd4bCYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50 Validity Not Before: Dec 19 06:59:47 2025 GMT Not After : Dec 26 06:59:47 2025 GMT Subject: CN=6944f7e3-1c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:a0:93:c1:41:a6:72:ce:49:ed:71:fd:16: 87:2d:81:a3:89:d6:a2:0d:ea:22:35:8c:c4:be:a7: a1:6c:55:5a:53:3c:34:58:fc:4b:16:1b:ba:3c:04: 06:b6:8b:ce:9a:42:0d:a8:7e:9f:18:71:93:55:cc: 8a:c3:69:91:fa:1b:8e:2b:9e:8a:2c:d9:d5:62:b1: 8c:df:47:6a:35:f4:05:61:be:46:0b:e8:44:4e:19: 47:20:b4:68:b0:c9:3f:c0:02:8a:5e:23:fb:ab:65: a0:52:d9:5f:6d:dc:2f:b5:b4:bf:c9:0b:1e:70:56: 30:1a:98:4a:be:e1:21:10:dc:9b:fc:9f:d8:e1:95: f8:82:1e:85:b5:d0:ea:48:88:f8:1b:b8:c9:eb:cb: ec:d5:97:5c:37:76:13:5e:3b:cd:52:a9:7b:e6:ff: 75:9f:4d:f4:52:37:8e:f5:67:89:9b:09:0b:b4:f2: ed:6d:b7:4b:38:60:20:b3:8a:4f:ab:c3:1b:82:2d: 9f:08:ec:4b:a7:70:78:d1:5d:a1:72:33:7a:dc:1c: 20:00:dd:fb:22:42:f9:8c:d6:69:2a:28:ca:fe:db: 72:b0:34:ee:27:1d:8f:db:e6:0f:dd:34:b6:6b:b1: 4e:6f:44:eb:24:02:a6:41:12:f0:c0:88:2c:42:6e: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:15:D1:6B:27:2E:58:85:2E:D6:F9:06:C7:12:09:25:AD:DF:EA:09 X509v3 Authority Key Identifier: keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b8:d4:d5:f9:9f:a7:36:77:9c:cc:39:7c:b0:37:19:37:a8: de:06:70:87:bf:cb:8b:4f:4e:c5:7d:f6:09:2c:a9:44:60:78: d1:69:97:3d:29:2e:78:fd:71:7a:2a:7a:57:ba:83:bd:0c:7c: d3:28:ea:1d:69:fa:9c:28:6d:7b:9d:48:42:da:89:14:2e:f0: f1:60:06:8e:b6:73:b4:d7:33:33:f5:19:9e:7b:d6:09:11:dc: 93:f3:25:f9:c3:f5:5e:12:2d:10:e3:f3:c7:0f:01:39:b4:7f: 27:ac:5e:f2:49:62:54:a0:49:0c:8f:9e:47:3c:7e:ca:e0:14: 99:1e:cd:be:40:5c:3b:8a:a3:f4:e1:ab:0d:d7:9a:0c:2b:5c: 57:10:ad:60:cf:9a:f5:87:a9:87:3a:1b:63:b8:7d:30:8f:e2: 73:9f:e4:d1:85:10:9c:ee:cc:83:5c:c9:77:43:e5:cb:a7:8f: 80:af:0a:ab:94:76:e7:42:25:75:5a:c3:75:30:71:8f:46:29: 44:6c:d7:d3:97:ff:85:17:f9:8b:d0:1c:bc:54:a7:3f:80:30: 53:45:c2:d4:db:c9:2f:07:57:29:cb:72:a7:a7:a3:6c:b8:87: 0b:1a:d0:b9:88:cb:9e:13:9d:67:06:81:5c:7c:59:0a:90:d2: 9a:56:07:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkJERTExMC8GA1UEBRMoQjFDNzhFOEVCNDM5MzFCMDNFOTBCQkI1NTM1NzlENzlF RDE5RkQ1MDAeFw0yNTEyMTkwNjU5NDdaFw0yNTEyMjYwNjU5NDdaMBgxFjAUBgNV BAMMDTY5NDRmN2UzLTFjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeR6CTwUGmcs5J7XH9FoctgaOJ1qIN6iI1jMS+p6FsVVpTPDRY/EsWG7o8BAa2 i86aQg2ofp8YcZNVzIrDaZH6G44rnoos2dVisYzfR2o19AVhvkYL6EROGUcgtGiw yT/AAopeI/urZaBS2V9t3C+1tL/JCx5wVjAamEq+4SEQ3Jv8n9jhlfiCHoW10OpI iPgbuMnry+zVl1w3dhNeO81SqXvm/3WfTfRSN471Z4mbCQu08u1tt0s4YCCzik+r wxuCLZ8I7EuncHjRXaFyM3rcHCAA3fsiQvmM1mkqKMr+23KwNO4nHY/b5g/dNLZr sU5vROskAqZBEvDAiCxCbrP5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUixXRaycu WIUu1vkGxxIJJa3f6gkwHwYDVR0jBBgwFoAUsceOjrQ5MbA+kLu1U1edee0Z/VAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzQzNUJGMUFDRDNG QzExRjBCOUY5NjQzMkM0RjlBRTAyL3NjZU9qclE1TWJBLWtMdTFVMWVkZWUwWl9W QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2NlT2pyUTVNYkEta0x1MVUxZWRlZTBaX1ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QkRFLzQzNUJGMUFDRDNGQzExRjBCOUY5NjQzMkM0RjlBRTAyL3NjZU9qclE1TWJB LWtMdTFVMWVkZWUwWl9WQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABi41NX5n6c2d5zMOXywNxk3qN4GcIe/y4tPTsV99gksqURgeNFplz0p Lnj9cXoqele6g70MfNMo6h1p+pwobXudSELaiRQu8PFgBo62c7TXMzP1GZ571gkR 3JPzJfnD9V4SLRDj88cPATm0fyesXvJJYlSgSQyPnkc8fsrgFJkezb5AXDuKo/Th qw3XmgwrXFcQrWDPmvWHqYc6G2O4fTCP4nOf5NGFEJzuzINcyXdD5cunj4CvCquU dudCJXVaw3UwcY9GKURs19OX/4UX+YvQHLxUpz+AMFNFwtTbyS8HVynLcqeno2y4 hwsa0LmIy54TnWcGgVx8WQqQ0ppWB48= -----END CERTIFICATE-----Generated at Fri Dec 19 22:03:46 2025 by rpki-client