This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: q8XqzskJUzOFFwTpZXG2rVUToPE81fUrxtVBgvmipBI= Subject key identifier: 37:76:39:A9:DF:E4:DB:3B:76:40:28:DD:8A:24:A7:10:89:41:74:77 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0592 Signing time: Fri 26 Dec 2025 22:24:36 +0000 Manifest this update: Fri 26 Dec 2025 22:24:36 +0000 Manifest next update: Fri 02 Jan 2026 22:24:36 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: F6zA4VNQ94Ke/vW1zE/mTke7B0Qx7udv1klhQ/5O5tY=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: qee+KTCUp6bDNFwH36fAFYsE8VZ1yRt+iGxeFmVp9gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Dec 26 22:24:36 2025 GMT Not After : Jan 2 22:24:36 2026 GMT Subject: CN=694f0b24-d6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:c6:be:43:e6:8f:a9:17:a0:6a:7b:ec:f3: 9d:d7:65:9f:9b:c5:5e:db:5f:65:22:45:57:e3:54: 1d:4f:cc:31:5a:d6:94:72:44:20:33:c1:ea:f6:a9: 8a:ce:33:2e:ae:52:f5:b3:10:dd:b2:58:c7:15:fb: 8b:93:9b:60:74:51:c9:d7:6e:c3:54:25:8a:6f:9c: db:30:49:dd:03:cb:75:37:d3:0f:b1:b0:aa:86:91: cb:22:6a:35:d5:ac:b7:d8:25:4d:d9:5e:9b:d5:af: 1b:17:b9:13:89:3c:f4:7d:cf:97:fe:68:69:66:fd: c2:23:f8:87:00:20:7b:ab:ad:7c:d7:6c:d5:84:2e: 16:f2:88:76:d5:fa:a5:1b:4e:a8:23:59:1f:f8:49: 6b:e9:ca:5c:f5:94:29:33:78:2d:9b:d4:72:fe:97: 32:82:0f:80:93:91:53:98:69:3d:74:0a:47:de:f0: 1b:3a:c4:18:94:0b:9d:8b:c1:b7:ef:d9:4e:6c:c3: 3a:60:d3:42:9a:1d:05:e9:85:7b:c5:9f:f9:b1:e4: 1c:69:41:e9:f6:da:fd:7e:ec:51:1e:21:4e:e0:03: 2d:57:b3:f5:f9:b8:24:ba:c9:65:25:3d:dd:b5:b7: 3d:b5:b0:05:80:6e:66:d8:d2:11:81:09:ab:c4:2f: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:76:39:A9:DF:E4:DB:3B:76:40:28:DD:8A:24:A7:10:89:41:74:77 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:38:da:8e:74:e4:14:00:39:37:54:a6:72:0c:3f:73:62:ee: 30:23:4d:d6:57:72:25:6b:61:65:fd:e1:67:49:34:72:57:61: 16:ed:3b:6d:0f:46:f3:80:ae:77:2d:3b:40:a9:9f:5d:e3:ab: ae:2b:81:90:6e:39:fc:f9:f9:3e:6e:a9:d4:a1:48:02:3a:22: fa:68:ef:1c:f3:25:c8:c8:a5:61:97:f9:e9:9f:ff:94:a2:79: 7a:53:3d:b0:84:93:5d:b3:32:58:4e:60:cf:ab:7f:40:5c:15: 3e:87:36:30:60:83:f0:23:4a:ee:b5:95:6e:87:c1:c7:bb:9e: c9:82:bb:7f:47:04:ce:6a:e1:6e:8a:de:18:d3:cb:17:a9:f3: e2:c0:eb:65:b3:b9:6c:84:f0:7f:8f:26:98:99:b7:07:ec:1e: 34:c4:0e:9d:29:61:d4:23:2a:00:69:9e:80:94:46:80:05:cf: 33:f7:53:02:d1:a4:3e:74:d2:54:a5:9a:55:0a:b3:77:6e:c4: ae:af:ef:e8:1a:44:07:ea:fb:b0:43:07:cf:1e:ec:45:ad:99: 58:26:f7:9d:2b:fe:47:9c:f7:82:4b:9e:07:58:4f:f1:90:0c: 5d:bd:17:f9:f7:70:48:19:5a:8f:e9:73:3e:6f:38:25:5c:9c: a7:17:47:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUxMjI2MjIyNDM2WhcNMjYwMTAyMjIyNDM2WjAYMRYwFAYD VQQDDA02OTRmMGIyNC1kNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGnGvkPmj6kXoGp77POd12Wfm8Ve219lIkVX41QdT8wxWtaUckQgM8Hq9qmK zjMurlL1sxDdsljHFfuLk5tgdFHJ127DVCWKb5zbMEndA8t1N9MPsbCqhpHLImo1 1ay32CVN2V6b1a8bF7kTiTz0fc+X/mhpZv3CI/iHACB7q61812zVhC4W8oh21fql G06oI1kf+Elr6cpc9ZQpM3gtm9Ry/pcygg+Ak5FTmGk9dApH3vAbOsQYlAudi8G3 79lObMM6YNNCmh0F6YV7xZ/5seQcaUHp9tr9fuxRHiFO4AMtV7P1+bgkusllJT3d tbc9tbAFgG5m2NIRgQmrxC8SnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd2Oanf 5Ns7dkAo3YokpxCJQXR3MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ONqOdOQUADk3VKZyDD9zYu4wI03WV3Ila2Fl/eFnSTRyV2EW7Ttt D0bzgK53LTtAqZ9d46uuK4GQbjn8+fk+bqnUoUgCOiL6aO8c8yXIyKVhl/npn/+U onl6Uz2whJNdszJYTmDPq39AXBU+hzYwYIPwI0rutZVuh8HHu57Jgrt/RwTOauFu it4Y08sXqfPiwOtls7lshPB/jyaYmbcH7B40xA6dKWHUIyoAaZ6AlEaABc8z91MC 0aQ+dNJUpZpVCrN3bsSur+/oGkQH6vuwQwfPHuxFrZlYJvedK/5HnPeCS54HWE/x kAxdvRf593BIGVqP6XM+bzglXJynF0fU -----END CERTIFICATE-----Generated at Sat Dec 27 10:48:38 2025 by rpki-client