This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: hIXgEAPVx4OQpRJFemvKhxqvYx3pBb86PUf41hbBjO0= Subject key identifier: 0E:C5:3A:73:E1:58:99:95:1F:5E:09:62:8E:00:F4:54:E4:23:BE:D4 Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 020F Signing time: Fri 19 Dec 2025 01:29:06 +0000 Manifest this update: Fri 19 Dec 2025 01:29:06 +0000 Manifest next update: Fri 26 Dec 2025 01:29:06 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: IFSaJMtJIMpB1Ve6vqQSmuxqixANFGRdDzMKVj/l+CE=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 475LzmYCu9I1wtql81HCosh9WiMF26s1jk6v328c/zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: Dec 19 01:29:06 2025 GMT Not After : Dec 26 01:29:06 2025 GMT Subject: CN=6944aa62-63c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:ff:d0:f1:69:dc:03:4a:da:26:f0:13:f6: d0:a1:07:b4:4a:c0:59:14:7b:a4:9d:e8:76:02:74: aa:36:0b:23:14:38:41:27:08:3f:db:a5:09:ed:8d: 89:1c:cf:21:c9:43:c4:c1:b5:ee:0d:b4:ef:08:62: 9a:98:77:41:37:aa:5d:c9:a1:25:be:01:13:60:78: 83:7a:35:bb:f5:d9:0f:7d:70:c8:8c:83:a8:10:60: 84:c2:23:e7:09:e4:85:cd:05:ab:c8:41:4f:de:60: b3:a1:cd:fe:76:f7:55:d8:a8:ea:2f:a8:1c:84:df: 66:74:37:f5:e0:8f:77:94:e2:a5:74:ff:05:a8:66: 09:41:6b:9d:db:08:79:1b:fb:ff:3c:f5:93:99:e6: 34:b8:48:0d:43:84:d7:1f:76:ef:2b:74:07:b8:d5: 66:6a:dd:e3:05:e9:eb:49:8e:f1:d4:fe:c9:4e:8c: 90:d4:c3:9e:c0:3e:c8:19:36:ba:1a:aa:7d:b7:fc: c6:3e:e3:43:91:80:04:4d:be:68:d9:3c:84:cb:c7: 60:d0:1d:26:d6:3c:67:d1:0a:d8:7f:a8:c6:4a:6f: 09:0a:bd:91:55:04:6c:b8:90:a0:b2:59:f1:37:8d: 1c:18:8a:ba:b4:c8:5f:14:6a:4c:92:e7:9b:15:a3: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C5:3A:73:E1:58:99:95:1F:5E:09:62:8E:00:F4:54:E4:23:BE:D4 X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d6:21:0b:0f:e1:43:9f:af:78:56:3d:84:76:09:a2:a8:48: 08:45:9b:b2:8a:65:0c:ae:83:d9:31:8f:76:4d:87:74:50:52: 6c:b1:94:0e:56:49:d8:0c:94:7e:e5:52:c6:84:2f:1d:98:a8: 02:b0:91:8a:f0:13:77:6a:db:8d:0c:bc:98:a2:0a:b9:25:ca: 6c:cd:d4:fc:d5:1e:64:9a:2c:db:8b:5c:9d:8c:62:30:78:f7: 15:b0:54:ce:ab:56:fd:2b:71:d8:1f:32:cb:0a:d6:56:59:29: 98:90:e0:19:89:5c:aa:3a:eb:87:e3:b7:0d:da:dd:20:fc:91: 19:db:62:99:14:17:91:d0:2f:e4:fc:e6:f8:81:6f:58:90:a2: f1:ce:6d:dd:a9:e3:96:cf:0e:23:67:b3:6f:8e:0a:1c:73:6a: 75:c7:ae:af:eb:5a:c5:ac:1a:43:b0:aa:cf:fe:44:4a:91:3f: 4c:b3:99:0b:67:ee:3e:cc:6e:de:ee:12:22:3f:31:3f:a9:93: f9:d8:2f:36:36:d3:86:c6:82:19:a1:df:5d:9a:74:41:29:d7: ac:d3:59:60:79:5a:c8:a5:55:3f:d6:a0:54:bb:3b:2e:d8:2b: de:b5:03:25:39:95:d7:76:e0:14:93:8b:be:0e:d3:ca:d9:08: 79:13:36:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUxMjE5MDEyOTA2WhcNMjUxMjI2MDEyOTA2WjAYMRYwFAYD VQQDDA02OTQ0YWE2Mi02M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39b/0PFp3ANK2ibwE/bQoQe0SsBZFHukneh2AnSqNgsjFDhBJwg/26UJ7Y2J HM8hyUPEwbXuDbTvCGKamHdBN6pdyaElvgETYHiDejW79dkPfXDIjIOoEGCEwiPn CeSFzQWryEFP3mCzoc3+dvdV2KjqL6gchN9mdDf14I93lOKldP8FqGYJQWud2wh5 G/v/PPWTmeY0uEgNQ4TXH3bvK3QHuNVmat3jBenrSY7x1P7JToyQ1MOewD7IGTa6 Gqp9t/zGPuNDkYAETb5o2TyEy8dg0B0m1jxn0QrYf6jGSm8JCr2RVQRsuJCgslnx N40cGIq6tMhfFGpMkuebFaNtuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7FOnPh WJmVH14JYo4A9FTkI77UMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV1iELD+FDn694Vj2EdgmiqEgIRZuyimUMroPZMY92TYd0UFJssZQO VknYDJR+5VLGhC8dmKgCsJGK8BN3atuNDLyYogq5JcpszdT81R5kmizbi1ydjGIw ePcVsFTOq1b9K3HYHzLLCtZWWSmYkOAZiVyqOuuH47cN2t0g/JEZ22KZFBeR0C/k /Ob4gW9YkKLxzm3dqeOWzw4jZ7Nvjgocc2p1x66v61rFrBpDsKrP/kRKkT9Ms5kL Z+4+zG7e7hIiPzE/qZP52C82NtOGxoIZod9dmnRBKdes01lgeVrIpVU/1qBUuzsu 2CvetQMlOZXXduAUk4u+DtPK2Qh5Ezae -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:51 2025 by rpki-client