This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: QrJq4z+xidbYowYXiruxRuEdfIpOD3UvNyOCkn2BdbU= Subject key identifier: C4:3A:21:8F:B4:DF:57:3E:DC:57:DE:03:93:2B:FE:33:C7:E4:44:E0 Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0499 Signing time: Thu 18 Dec 2025 23:24:12 +0000 Manifest this update: Thu 18 Dec 2025 23:24:11 +0000 Manifest next update: Thu 25 Dec 2025 23:24:11 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: 0WKmnPOxMSATMuW2iUsAYNZfL7NulMXrcVuo3gpuNNM=) 2: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=) 4: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=) 5: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Dec 18 23:24:11 2025 GMT Not After : Dec 25 23:24:11 2025 GMT Subject: CN=69448d1c-c557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:09:7d:97:7b:9a:5b:5b:18:fe:f0:e7:4f: c2:bb:ec:d5:46:9c:cb:91:a3:ae:e4:5b:fe:4a:67: 7f:10:a4:44:e1:16:82:c6:95:ab:5d:c4:49:9f:f5: c8:c0:c6:1d:52:17:3d:a5:68:8d:10:26:12:ca:9b: b4:91:2f:0a:0f:91:e6:c6:8a:80:b1:83:a4:b4:6b: 6c:7a:3a:31:62:03:b3:41:63:7e:09:8a:8e:92:b8: fb:ad:9c:09:8f:06:03:7b:47:72:1f:1d:7f:28:e4: f7:d0:2a:67:79:42:73:5f:60:0d:d6:dd:a9:3b:2e: bf:5d:57:de:10:14:b2:2b:55:53:c4:35:e3:96:c1: 3e:b9:4b:7b:69:7f:0e:1d:94:a4:75:c0:48:29:d7: 16:2c:f4:c5:c7:44:2b:78:5b:f9:53:fa:88:10:c3: 8a:b6:1d:8d:f0:12:c5:a9:b6:c0:da:c8:f3:12:5f: f8:11:26:dc:b3:13:62:b7:60:56:e5:32:18:33:5f: cf:93:94:3d:f1:13:1e:ef:fe:bf:9b:06:1e:05:bd: ec:50:96:84:ee:0a:80:8c:8c:b2:14:70:bd:bd:fe: 56:26:3a:4c:a7:c7:b3:70:bc:87:bf:16:a4:bd:5d: 41:f3:60:cb:45:bc:11:ae:ad:a5:c8:88:a2:dd:3f: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3A:21:8F:B4:DF:57:3E:DC:57:DE:03:93:2B:FE:33:C7:E4:44:E0 X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e6:1b:91:d4:61:9a:ab:91:37:72:a5:a1:f1:1c:40:d5:2b: aa:d4:76:5e:5c:37:9e:53:f8:ea:f9:fe:cd:d3:96:8c:31:62: 15:c2:f8:58:53:96:c2:e9:5b:30:41:b1:bb:b5:b6:e6:ec:81: 0b:84:ef:02:c5:67:df:07:f8:14:f6:eb:b4:e6:ba:cd:c4:84: 9b:c0:29:5c:2b:e7:d1:9e:bb:61:e3:4a:f5:61:00:be:3c:aa: b9:05:91:59:0c:ff:a9:3b:38:d2:26:bf:63:f2:64:08:f2:e8: e2:87:1d:e4:80:b1:ba:0d:d0:43:2e:6d:fd:3d:04:6d:91:ed: e5:20:5c:ae:df:06:5e:64:7c:db:47:9b:88:88:c5:72:87:c9: ed:33:f3:51:0d:a0:d5:a1:f9:64:19:ea:5b:63:b4:0d:3f:58: 92:08:2d:85:81:d8:d0:23:c7:f1:2c:81:a1:4e:a0:a1:f7:23: 23:18:f3:96:f6:a0:e4:54:3e:2e:6d:ed:0b:3a:fb:42:2d:4e: 11:4f:52:ff:6a:2c:32:22:e5:83:f5:1c:6e:54:3c:94:62:ff: a0:59:e0:64:86:05:c6:9e:65:a2:78:92:95:90:52:65:a2:ad: 56:72:c8:59:a3:c0:7b:c6:1c:b3:ba:34:8e:86:87:28:08:fd: 21:66:44:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUxMjE4MjMyNDExWhcNMjUxMjI1MjMyNDExWjAYMRYwFAYD VQQDDA02OTQ0OGQxYy1jNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQsJfZd7mltbGP7w50/Cu+zVRpzLkaOu5Fv+Smd/EKRE4RaCxpWrXcRJn/XI wMYdUhc9pWiNECYSypu0kS8KD5HmxoqAsYOktGtsejoxYgOzQWN+CYqOkrj7rZwJ jwYDe0dyHx1/KOT30CpneUJzX2AN1t2pOy6/XVfeEBSyK1VTxDXjlsE+uUt7aX8O HZSkdcBIKdcWLPTFx0QreFv5U/qIEMOKth2N8BLFqbbA2sjzEl/4ESbcsxNit2BW 5TIYM1/Pk5Q98RMe7/6/mwYeBb3sUJaE7gqAjIyyFHC9vf5WJjpMp8ezcLyHvxak vV1B82DLRbwRrq2lyIii3T99FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQ6IY+0 31c+3FfeA5Mr/jPH5ETgMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg5huR1GGaq5E3cqWh8RxA1Suq1HZeXDeeU/jq+f7N05aMMWIVwvhY U5bC6VswQbG7tbbm7IELhO8CxWffB/gU9uu05rrNxISbwClcK+fRnrth40r1YQC+ PKq5BZFZDP+pOzjSJr9j8mQI8ujihx3kgLG6DdBDLm39PQRtke3lIFyu3wZeZHzb R5uIiMVyh8ntM/NRDaDVoflkGepbY7QNP1iSCC2FgdjQI8fxLIGhTqCh9yMjGPOW 9qDkVD4ube0LOvtCLU4RT1L/aiwyIuWD9RxuVDyUYv+gWeBkhgXGnmWieJKVkFJl oq1WcshZo8B7xhyzujSOhocoCP0hZkSo -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:01 2025 by rpki-client