This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: hAVmuRoCVLDyAEYFO5mk4SpRnwARJOixCMT+VnUcSuU= Subject key identifier: 4A:38:F3:BD:25:60:3D:05:92:04:AD:45:3B:58:36:11:77:CD:DF:07 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A1C Signing time: Wed 31 Dec 2025 19:31:23 +0000 Manifest this update: Wed 31 Dec 2025 19:31:22 +0000 Manifest next update: Wed 07 Jan 2026 19:31:22 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: G94QA8mS5aDmfBzNEgVWl9IX1zken1foEGXTgPUOs9o=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 19:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Dec 31 19:31:22 2025 GMT Not After : Jan 7 19:31:22 2026 GMT Subject: CN=69557a0b-7c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:c0:60:5d:e1:30:af:a1:5e:ce:ea:96:05: 7a:12:a9:97:6c:c1:16:0e:f3:7c:13:ba:0f:75:86: 94:62:cf:ce:a3:9c:33:95:60:8d:f5:17:0c:12:52: 60:c2:69:9f:cc:f6:2c:9d:ff:69:7a:56:74:2f:03: 5f:c0:e7:c7:73:af:95:bf:0c:b1:ab:ff:7b:df:20: 04:51:d5:62:ae:bc:7c:08:45:c9:af:bf:31:c1:68: 0a:bc:4a:56:30:dc:95:85:15:22:b0:d1:de:5f:10: bd:37:12:61:35:ae:73:f0:1b:57:e4:61:b5:4a:e9: 98:41:8c:37:5d:16:88:0b:6f:0c:51:3a:63:85:05: 2e:88:69:a3:0d:72:c0:a0:38:97:c2:f1:65:2e:19: ff:3b:a1:bb:47:08:61:32:a8:87:be:87:00:36:a6: fc:dd:62:1f:3e:e0:04:36:fe:ba:0f:76:b9:cb:28: c4:3d:38:16:a7:b3:ef:04:0a:91:6a:b2:97:5b:e0: a6:0f:44:46:a3:8d:2d:82:6b:89:39:38:48:5f:fc: c4:75:70:db:73:f9:08:35:9b:b3:5e:d6:a1:d2:73: 92:43:80:21:ee:f3:da:8e:68:08:92:8d:ae:8b:d4: ac:b5:fa:c1:46:fc:5f:79:0f:06:cd:9d:d6:f2:5f: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:F3:BD:25:60:3D:05:92:04:AD:45:3B:58:36:11:77:CD:DF:07 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3b:97:7c:de:d6:34:35:4d:89:1f:b0:f9:8e:9c:71:1b:7a: 0d:39:d7:d5:10:54:74:0f:8a:08:79:03:e3:e5:55:fe:dc:87: 52:af:a9:de:0d:9c:2e:69:8d:de:b8:c6:3e:4b:8c:85:5c:ba: 57:7a:e8:5f:51:69:ab:2a:4a:8d:c1:b9:1a:b6:b6:fa:32:24: 0c:20:bb:3a:dd:ae:00:ae:72:7e:82:08:33:83:ec:50:92:fa: 5c:b7:d0:c7:c0:54:8a:80:94:1a:75:6f:6f:f8:a2:24:12:d9: c9:b9:be:42:a7:66:52:75:8f:60:34:87:47:79:74:78:0d:e8: dd:8b:00:f2:fa:d9:a6:b2:94:cb:34:7f:36:a5:68:54:a4:f4: d3:31:b7:35:45:69:09:96:0d:01:cb:e3:cd:8b:9f:93:60:b3: 9d:34:9e:bc:ff:73:92:c5:d3:13:24:78:7b:8b:27:0a:91:9f: d4:ad:fe:b1:de:16:4c:65:03:3b:1d:75:58:b0:ed:f6:a6:b4: 87:05:48:66:c4:51:b1:20:ff:db:91:7e:f4:87:de:24:a6:e3: 76:88:8c:ee:a1:16:dd:e0:f0:7a:42:e4:15:f5:28:2b:d3:00: dc:b7:ad:a5:32:75:f5:30:10:3b:8e:c6:7e:2f:b5:ba:1e:ab: 66:13:75:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUxMjMxMTkzMTIyWhcNMjYwMTA3MTkzMTIyWjAYMRYwFAYD VQQDDA02OTU1N2EwYi03YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx7AYF3hMK+hXs7qlgV6EqmXbMEWDvN8E7oPdYaUYs/Oo5wzlWCN9RcMElJg wmmfzPYsnf9pelZ0LwNfwOfHc6+Vvwyxq/973yAEUdVirrx8CEXJr78xwWgKvEpW MNyVhRUisNHeXxC9NxJhNa5z8BtX5GG1SumYQYw3XRaIC28MUTpjhQUuiGmjDXLA oDiXwvFlLhn/O6G7RwhhMqiHvocANqb83WIfPuAENv66D3a5yyjEPTgWp7PvBAqR arKXW+CmD0RGo40tgmuJOThIX/zEdXDbc/kINZuzXtah0nOSQ4Ah7vPajmgIko2u i9SstfrBRvxfeQ8GzZ3W8l9XqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEo4870l YD0FkgStRTtYNhF3zd8HMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0O5d83tY0NU2JH7D5jpxxG3oNOdfVEFR0D4oIeQPj5VX+3IdSr6ne DZwuaY3euMY+S4yFXLpXeuhfUWmrKkqNwbkatrb6MiQMILs63a4ArnJ+gggzg+xQ kvpct9DHwFSKgJQadW9v+KIkEtnJub5Cp2ZSdY9gNIdHeXR4DejdiwDy+tmmspTL NH82pWhUpPTTMbc1RWkJlg0By+PNi5+TYLOdNJ68/3OSxdMTJHh7iycKkZ/Urf6x 3hZMZQM7HXVYsO32prSHBUhmxFGxIP/bkX70h94kpuN2iIzuoRbd4PB6QuQV9Sgr 0wDct62lMnX1MBA7jsZ+L7W6HqtmE3XV -----END CERTIFICATE-----Generated at Thu Jan 1 07:28:17 2026 by rpki-client