This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: nqQFXxX88TV32l19U1Plh/XAuoZQLSAja/GrYV/ReEw= Subject key identifier: FD:23:24:91:E2:42:6B:61:47:BA:1B:BA:AD:F1:BF:4D:9E:30:41:31 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A16 Signing time: Sat 20 Dec 2025 19:19:29 +0000 Manifest this update: Sat 20 Dec 2025 19:19:29 +0000 Manifest next update: Sat 27 Dec 2025 19:19:29 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 8mJh5Mygjq39N1CK6YaghQXeIsJJmnSKCUWcRC0gmcA=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Dec 20 19:19:29 2025 GMT Not After : Dec 27 19:19:29 2025 GMT Subject: CN=6946f6c1-a9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:b7:b7:0f:50:66:b1:5c:91:90:a9:38:37: 67:e2:e8:25:76:80:25:a7:70:3b:6a:6e:bf:bf:aa: 64:e3:1c:08:9f:76:20:c0:ad:81:4d:bf:01:ca:19: a0:9a:d4:2d:f1:86:88:2f:ee:7a:b7:6a:34:68:9d: 3b:10:b2:fe:70:60:23:23:2f:59:07:48:6a:c3:d3: 5c:1b:c0:b9:29:c8:3f:8c:8d:ef:b0:d6:ec:b8:99: a0:92:34:eb:42:1d:da:c8:20:8f:49:e8:be:7a:00: c3:7f:da:8e:3e:95:99:d8:75:3f:4f:32:f1:f2:6f: 2d:2d:43:1f:2c:f6:59:c3:43:63:cc:b3:a3:34:89: af:e5:9d:9c:c6:75:bd:f7:48:5c:39:ec:d0:0b:88: 21:b0:b1:fa:f2:9a:6c:aa:73:ff:7f:1b:4c:3b:9a: 9f:50:4c:44:89:11:40:ab:7e:a9:a1:2b:0f:3b:c4: 5e:90:17:35:07:f0:39:42:c0:27:e0:31:82:4b:cc: b6:1d:d4:19:ac:9f:9c:a5:41:c6:85:27:32:aa:ee: 03:1c:62:de:9a:26:08:2f:16:ed:4d:01:1f:37:7a: 97:23:14:cf:45:7b:40:e3:23:79:15:1b:89:09:e1: 26:2b:d4:05:cd:ed:ab:0a:7f:5e:75:a4:96:0b:44: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:23:24:91:E2:42:6B:61:47:BA:1B:BA:AD:F1:BF:4D:9E:30:41:31 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e5:24:30:f9:d6:31:79:62:7a:b9:8b:57:80:8f:8f:fa:47: 64:ac:bf:00:fc:82:cf:7c:ea:5c:de:10:0b:18:44:57:a6:27: 7a:39:54:28:9d:8e:2e:54:ba:e8:f6:6a:59:87:77:11:f5:cf: b1:97:d8:92:67:27:e8:4d:02:fb:80:03:82:56:a2:38:af:e8: b1:d5:02:2e:31:3e:01:a6:26:18:4a:be:5d:59:ca:44:bd:53: 20:3b:34:a1:22:60:81:52:20:90:b6:45:f4:2b:6b:45:e1:d9: 76:a0:99:3e:a4:35:92:2a:ab:64:7e:5b:12:5d:47:ba:b4:07: 0e:78:59:f0:77:fe:9a:bd:d2:b0:86:56:65:e7:a5:d3:f6:45: b5:99:d7:6f:a5:18:73:a9:c8:5c:b6:74:73:55:a2:45:a4:5f: bc:cd:d8:50:f2:61:96:b9:08:7c:73:3c:a3:77:6b:07:b8:dc: b4:e0:fe:d7:90:1e:7c:3a:36:d2:86:f5:22:d7:8b:b1:b4:23: 0b:66:22:be:cc:bf:ce:66:f1:11:96:41:59:77:13:c8:16:cc: 9b:30:48:77:c6:0e:fa:d1:9d:92:17:60:bf:a1:01:19:85:aa: 75:fe:30:a6:1d:79:b8:2a:23:83:5f:13:74:c3:27:3a:e6:26: 5d:d1:53:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUxMjIwMTkxOTI5WhcNMjUxMjI3MTkxOTI5WjAYMRYwFAYD VQQDDA02OTQ2ZjZjMS1hOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5O3tw9QZrFckZCpODdn4ugldoAlp3A7am6/v6pk4xwIn3YgwK2BTb8Byhmg mtQt8YaIL+56t2o0aJ07ELL+cGAjIy9ZB0hqw9NcG8C5Kcg/jI3vsNbsuJmgkjTr Qh3ayCCPSei+egDDf9qOPpWZ2HU/TzLx8m8tLUMfLPZZw0NjzLOjNImv5Z2cxnW9 90hcOezQC4ghsLH68ppsqnP/fxtMO5qfUExEiRFAq36poSsPO8RekBc1B/A5QsAn 4DGCS8y2HdQZrJ+cpUHGhScyqu4DHGLemiYILxbtTQEfN3qXIxTPRXtA4yN5FRuJ CeEmK9QFze2rCn9edaSWC0QgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0jJJHi QmthR7obuq3xv02eMEExMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW5SQw+dYxeWJ6uYtXgI+P+kdkrL8A/ILPfOpc3hALGERXpid6OVQo nY4uVLro9mpZh3cR9c+xl9iSZyfoTQL7gAOCVqI4r+ix1QIuMT4BpiYYSr5dWcpE vVMgOzShImCBUiCQtkX0K2tF4dl2oJk+pDWSKqtkflsSXUe6tAcOeFnwd/6avdKw hlZl56XT9kW1mddvpRhzqchctnRzVaJFpF+8zdhQ8mGWuQh8czyjd2sHuNy04P7X kB58OjbShvUi14uxtCMLZiK+zL/OZvERlkFZdxPIFsybMEh3xg760Z2SF2C/oQEZ hap1/jCmHXm4KiODXxN0wyc65iZd0VOc -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:58 2025 by rpki-client