This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft File: 8T313f28CQG_wEdBIIjaNJOg8kQ.mft (raw, json) Hash identifier: gopkj6+Pv8m6erej3dVwFtf7RsZkDqIvMoIMTOzst0I= Subject key identifier: EE:09:E9:2B:2D:34:E9:5F:84:86:45:90:C5:B7:73:1C:C0:BC:A6:B5 Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44 Certificate issuer: /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft Manifest number: 06 Signing time: Fri 19 Dec 2025 07:00:09 +0000 Manifest this update: Fri 19 Dec 2025 07:00:09 +0000 Manifest next update: Fri 26 Dec 2025 07:00:09 +0000 Files and hashes: 1: 8T313f28CQG_wEdBIIjaNJOg8kQ.crl (hash: sC2T+tgJdjU1fVwlJMnQZsnjlv4aumdzlX4c7DrJgUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244 Validity Not Before: Dec 19 07:00:09 2025 GMT Not After : Dec 26 07:00:09 2025 GMT Subject: CN=6944f7f9-3f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:24:78:51:db:a3:f7:28:7f:75:88:20:39: 38:36:47:dc:69:63:24:07:cc:e8:75:ff:d0:7d:0b: 7a:a5:bc:6b:58:6c:08:58:8e:c3:38:0e:75:5b:b1: 91:7e:cb:e4:a2:74:99:10:45:86:d6:ad:17:68:9b: 13:d9:a9:28:16:df:59:1e:e1:29:67:ac:98:bd:44: 36:f8:ca:e0:2d:ff:93:24:01:52:47:12:35:b4:35: f6:83:3a:64:fc:90:f6:1b:64:62:dd:2d:1f:55:83: 76:02:1f:2a:2d:6e:dd:1d:70:59:15:d7:87:47:7b: 70:d1:ba:d9:69:37:81:50:4d:ea:b2:60:23:9a:50: a3:c5:10:07:9b:ec:d1:31:e4:4e:17:9c:de:51:c8: 30:16:e6:ce:f5:9f:8a:f2:50:a4:36:45:34:69:79: 46:4e:30:97:2a:29:67:53:8f:5c:d7:be:7a:ab:bd: 0a:d1:68:3e:11:8b:ed:3e:f7:33:54:f4:52:50:7c: 72:4c:9a:91:7f:36:9d:17:5f:db:04:83:c6:dc:32: 69:18:35:9f:55:1d:c1:bf:b2:f3:0d:06:f8:7d:fb: 69:06:98:bf:78:b7:fb:7d:d8:05:83:d9:de:d4:73: e7:fa:ea:82:58:a6:65:e7:97:76:37:28:fa:69:9e: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:E9:2B:2D:34:E9:5F:84:86:45:90:C5:B7:73:1C:C0:BC:A6:B5 X509v3 Authority Key Identifier: keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:fa:34:7d:ac:70:0a:6d:e2:a6:1b:53:07:ca:e4:ba:09:15: f1:02:59:bb:2c:27:08:28:0e:5b:15:95:1c:63:b0:af:d6:5a: e8:61:6f:b0:c5:e8:a3:97:f0:56:af:c1:d3:0b:bf:41:09:cb: e8:8b:e1:4b:66:82:76:5e:cf:1a:23:7a:70:35:3e:a3:6f:04: 0e:f7:9d:f8:a5:0a:e9:f5:9f:b5:af:10:bb:6f:14:60:4e:b0: 15:86:ca:65:ca:78:46:83:0d:de:c7:45:35:13:e6:6c:ab:9d: 0a:04:c8:ff:9e:72:80:ec:7c:84:a4:73:d5:6c:5f:58:7e:e4: cd:a0:d6:5a:ca:65:7c:5b:e6:78:c0:ae:96:44:13:b8:1d:c3: 80:22:9e:5c:75:db:76:5c:2d:52:01:f4:64:99:29:76:85:36: 45:cd:21:04:a7:33:2e:28:d9:72:e2:8b:b9:0d:63:26:f4:39: 86:79:3d:ef:ab:c3:df:0f:78:a5:9b:bd:09:a9:24:e8:a5:6a: e0:aa:34:f2:57:cf:d6:e0:c4:9f:b4:1b:66:80:16:1a:2c:56: 4f:df:f5:5d:1a:b8:1d:7b:6d:51:6c:8d:4a:f5:ba:e7:c6:6b: 05:d8:7e:0d:e6:24:6e:64:58:8b:07:d8:e3:2c:da:b6:ab:57: 77:3d:c3:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTFDNjExMC8GA1UEBRMoRjEzREY1RERGREJDMDkwMUJGQzA0NzQxMjA4OERBMzQ5 M0EwRjI0NDAeFw0yNTEyMTkwNzAwMDlaFw0yNTEyMjYwNzAwMDlaMBgxFjAUBgNV BAMMDTY5NDRmN2Y5LTNmM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBgiR4Uduj9yh/dYggOTg2R9xpYyQHzOh1/9B9C3qlvGtYbAhYjsM4DnVbsZF+ y+SidJkQRYbWrRdomxPZqSgW31ke4SlnrJi9RDb4yuAt/5MkAVJHEjW0NfaDOmT8 kPYbZGLdLR9Vg3YCHyotbt0dcFkV14dHe3DRutlpN4FQTeqyYCOaUKPFEAeb7NEx 5E4XnN5RyDAW5s71n4ryUKQ2RTRpeUZOMJcqKWdTj1zXvnqrvQrRaD4Ri+0+9zNU 9FJQfHJMmpF/Np0XX9sEg8bcMmkYNZ9VHcG/svMNBvh9+2kGmL94t/t92AWD2d7U c+f66oJYpmXnl3Y3KPppnlihAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7gnpKy00 6V+EhkWQxbdzHMC8prUwHwYDVR0jBBgwFoAU8T313f28CQG/wEdBIIjaNJOg8kQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMUM2LzQyRTBCNkIyRDUx RjExRjA4NzkyQjU3REM0RjlBRTAyLzhUMzEzZjI4Q1FHX3dFZEJJSWphTkpPZzhr US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFQzMTNmMjhDUUdfd0VkQklJamFOSk9nOGtRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF MUM2LzQyRTBCNkIyRDUxRjExRjA4NzkyQjU3REM0RjlBRTAyLzhUMzEzZjI4Q1FH X3dFZEJJSWphTkpPZzhrUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKr6NH2scApt4qYbUwfK5LoJFfECWbssJwgoDlsVlRxjsK/WWuhhb7DF 6KOX8FavwdMLv0EJy+iL4UtmgnZezxojenA1PqNvBA73nfilCun1n7WvELtvFGBO sBWGymXKeEaDDd7HRTUT5myrnQoEyP+ecoDsfISkc9VsX1h+5M2g1lrKZXxb5njA rpZEE7gdw4Ainlx123ZcLVIB9GSZKXaFNkXNIQSnMy4o2XLii7kNYyb0OYZ5Pe+r w98PeKWbvQmpJOilauCqNPJXz9bgxJ+0G2aAFhosVk/f9V0auB17bVFsjUr1uufG awXYfg3mJG5kWIsH2OMs2rarV3c9wyo= -----END CERTIFICATE-----Generated at Fri Dec 19 17:42:09 2025 by rpki-client