This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: 9TwRyR2zOBaeQ3XM/TClSn4/W0NKKEFqDamefhuVrAM= Subject key identifier: EC:95:63:96:C7:8E:13:DE:07:37:E0:F9:69:8B:88:C7:8C:CF:6E:60 Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 01A7 Signing time: Sat 27 Dec 2025 02:18:39 +0000 Manifest this update: Sat 27 Dec 2025 02:18:39 +0000 Manifest next update: Sat 03 Jan 2026 02:18:39 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: MMNgTp7mywiNKz/ZME8E7RowWiYLJLOi6Cp6HJfWIA8=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: rJhU0HNeCO7s+q3+M9x1ayjXSA/Nsx02UCSMMgX+AUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: Dec 27 02:18:39 2025 GMT Not After : Jan 3 02:18:39 2026 GMT Subject: CN=694f41ff-c785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:d5:5a:1f:ac:c9:2a:03:54:b3:9d:96:d5: 60:76:3a:33:66:a3:85:b8:1a:d1:fc:b8:42:92:2f: 3a:09:1c:1c:6c:9b:79:d7:31:42:63:8c:d1:88:9f: 85:40:86:04:a9:4e:ef:bf:11:86:fc:01:e2:b0:d4: 2d:10:15:0f:3d:8b:91:ef:10:03:73:47:56:96:cb: 64:dc:4d:6c:cd:68:95:97:41:3c:5b:55:14:54:c9: 5b:e3:db:7e:48:41:2d:10:8c:27:78:d9:c2:c4:8d: 0d:a2:70:0e:7e:67:30:4a:52:35:ae:6e:d7:5a:f7: 33:ce:b4:35:a7:ce:74:ca:b6:58:fa:da:ca:07:1d: db:60:b5:af:dd:7f:4b:e3:41:88:bc:c7:f6:22:7c: bd:9e:55:44:65:78:6e:e5:68:4c:ed:3f:7a:da:5c: ff:8d:26:a8:37:5f:ee:29:b4:35:42:de:10:1b:18: c3:28:20:6a:dc:8b:c0:cc:7b:9d:65:0a:e4:4f:ee: 06:0e:12:24:93:85:25:bb:98:78:3d:51:50:d6:e5: 0c:42:43:a4:cd:07:54:bc:a1:51:03:0d:24:66:a6: 79:b5:9a:b2:74:95:68:cb:26:57:6e:f4:c0:a8:ed: f0:16:c3:2a:3f:33:76:d9:bc:47:e3:07:ae:35:04: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:63:96:C7:8E:13:DE:07:37:E0:F9:69:8B:88:C7:8C:CF:6E:60 X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:07:f4:de:12:df:55:c9:43:80:c8:24:bc:a0:40:f3:4a:09: 0b:97:c1:f3:c4:14:b2:50:ee:81:85:29:fa:3d:7a:85:32:23: 0d:80:03:11:e0:ae:29:5b:f7:d4:04:62:0c:a5:02:ad:d0:18: 39:91:83:be:83:30:55:31:b1:df:24:64:58:41:5c:1d:d4:21: 6f:36:ad:b7:43:d2:b8:52:52:8c:30:4b:53:12:2d:e1:0a:ab: be:e6:97:79:c0:07:91:d5:68:08:9f:0a:db:6e:6e:72:64:e8: c3:13:45:d8:9b:df:38:0d:b1:9f:8e:71:52:6a:23:15:a8:88: 62:cd:c9:ad:04:55:98:4d:61:34:e6:14:4f:ad:55:39:a1:79: fd:e1:24:b2:70:cd:2e:79:28:89:2d:b6:e5:af:79:83:46:fb: b5:8d:92:a8:0c:c1:e5:15:55:80:51:fe:a2:74:8b:5e:b4:cf: 91:87:66:d1:29:2d:d5:0b:8b:2f:8a:33:99:68:2f:d1:c1:9a: 75:f8:d6:12:93:86:c8:62:92:0d:e3:74:8d:6d:1b:1f:65:ba: 95:ad:54:91:0e:e2:7b:02:6c:d8:00:bb:cb:0f:47:a2:0e:ff: df:3d:9f:42:6f:ef:ba:ed:d0:0d:7c:4c:2c:9d:e2:8b:18:9b: a7:64:df:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUxMjI3MDIxODM5WhcNMjYwMTAzMDIxODM5WjAYMRYwFAYD VQQDDA02OTRmNDFmZi1jNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlzVWh+sySoDVLOdltVgdjozZqOFuBrR/LhCki86CRwcbJt51zFCY4zRiJ+F QIYEqU7vvxGG/AHisNQtEBUPPYuR7xADc0dWlstk3E1szWiVl0E8W1UUVMlb49t+ SEEtEIwneNnCxI0NonAOfmcwSlI1rm7XWvczzrQ1p850yrZY+trKBx3bYLWv3X9L 40GIvMf2Iny9nlVEZXhu5WhM7T962lz/jSaoN1/uKbQ1Qt4QGxjDKCBq3IvAzHud ZQrkT+4GDhIkk4Ulu5h4PVFQ1uUMQkOkzQdUvKFRAw0kZqZ5tZqydJVoyyZXbvTA qO3wFsMqPzN22bxH4weuNQTy9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyVY5bH jhPeBzfg+WmLiMeMz25gMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrB/TeEt9VyUOAyCS8oEDzSgkLl8HzxBSyUO6BhSn6PXqFMiMNgAMR 4K4pW/fUBGIMpQKt0Bg5kYO+gzBVMbHfJGRYQVwd1CFvNq23Q9K4UlKMMEtTEi3h Cqu+5pd5wAeR1WgInwrbbm5yZOjDE0XYm984DbGfjnFSaiMVqIhizcmtBFWYTWE0 5hRPrVU5oXn94SSycM0ueSiJLbblr3mDRvu1jZKoDMHlFVWAUf6idItetM+Rh2bR KS3VC4svijOZaC/RwZp1+NYSk4bIYpIN43SNbRsfZbqVrVSRDuJ7AmzYALvLD0ei Dv/fPZ9Cb++67dANfEwsneKLGJunZN9r -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:57 2025 by rpki-client