This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: gaZU1UfvOGnRsJw0MWkula8i34gR+lEram0nVANJJ7Y= Subject key identifier: 57:8F:2B:D4:47:9E:F8:02:85:1E:A2:E8:BA:5D:E0:FF:87:D7:C4:06 Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A77 Signing time: Sun 28 Dec 2025 19:05:26 +0000 Manifest this update: Sun 28 Dec 2025 19:05:25 +0000 Manifest next update: Sun 04 Jan 2026 19:05:25 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: qg4kNzLft31ZIP44wfcMzJ7wNRP9SVYvV/frge11Cmk=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: EANvDel33mvxXFe9omaJU7NrbUFposThakUlVJ4Fm3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Dec 28 19:05:25 2025 GMT Not After : Jan 4 19:05:25 2026 GMT Subject: CN=69517f76-c42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:ec:65:91:e0:f7:c3:e0:2a:e2:8e:3b:6d: cd:62:3f:2b:04:36:ba:f6:65:bb:d1:ca:77:f7:70: 32:0b:96:29:6e:b8:e6:2b:bd:8b:9e:c9:8b:60:f8: 2e:1a:e6:5c:b6:11:90:ce:b8:07:d6:db:3f:3c:3c: 53:f3:62:44:db:f3:8a:32:e5:83:ee:cc:ee:f7:cd: 84:dc:90:f4:ff:71:c4:6f:9b:2c:56:3c:73:b0:f8: 34:50:e4:13:6e:44:a1:cf:59:30:4e:71:7e:90:f4: 4f:a6:9b:40:26:db:db:39:b7:dc:e0:9e:19:8f:0b: 35:7e:88:ae:85:5c:08:f5:77:ea:ef:8c:ab:9f:3d: f2:ff:e9:82:47:3c:4e:51:96:1d:3e:43:fc:1a:d5: 99:c5:68:18:05:74:07:d0:61:da:1f:1c:fd:71:69: 08:59:2e:54:b8:bb:34:ec:f7:e0:92:35:63:0c:ab: 2e:c1:2c:d7:9e:d4:93:a5:c2:1b:b6:c1:a9:8e:c8: 2f:0c:e8:b5:9b:b0:9e:13:e8:27:d1:75:18:bd:0c: 54:64:14:38:b3:d7:31:58:04:13:a0:f5:2e:62:d6: 98:50:3c:fc:cb:60:cb:ed:5e:a3:15:8c:c2:70:76: 47:35:e7:a9:28:53:e0:c1:60:b1:5e:9c:77:47:55: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8F:2B:D4:47:9E:F8:02:85:1E:A2:E8:BA:5D:E0:FF:87:D7:C4:06 X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:fc:f5:6f:05:d5:9d:9a:1c:bb:3e:1e:51:70:9c:a7:7a:0e: 98:f7:89:0f:87:40:16:56:7a:89:ae:be:37:5c:13:94:2b:47: a0:dd:ea:21:85:12:11:d7:f3:b0:58:2f:92:68:8d:65:a9:ce: c3:aa:7e:54:25:22:a8:4f:28:9d:8a:a5:5c:7d:02:d1:17:53: 64:11:e6:36:65:52:22:bc:00:69:9a:cf:de:cc:de:a9:c5:9f: 77:77:73:90:52:17:2a:23:66:31:a1:55:d4:bf:51:a4:84:82: 66:1e:59:f8:cb:48:de:ed:65:a9:19:f9:2e:88:9b:ff:b3:98: 9c:84:dc:25:2d:34:aa:4a:6f:b7:02:df:4a:72:67:7d:72:10: b7:0f:0a:66:a7:f8:b0:1e:57:bf:83:20:fe:0d:90:15:f6:a6: ea:85:fd:53:c2:40:62:85:57:e3:4a:2f:44:e0:c3:6a:db:c2: 68:d6:7c:bd:aa:cd:08:5d:2a:4a:a6:fa:33:1f:14:c6:ec:37: 75:c2:a6:c0:20:cd:d4:40:7d:2f:55:36:98:66:82:e2:17:75: 5f:72:2b:49:b2:b5:8e:25:9f:d7:80:c8:8d:9e:52:86:1e:b0: 9f:d4:d9:0d:d5:0c:94:41:49:91:ac:e9:bd:ae:27:54:12:94: 4a:37:d8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUxMjI4MTkwNTI1WhcNMjYwMTA0MTkwNTI1WjAYMRYwFAYD VQQDDA02OTUxN2Y3Ni1jNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiHjsZZHg98PgKuKOO23NYj8rBDa69mW70cp393AyC5YpbrjmK72LnsmLYPgu GuZcthGQzrgH1ts/PDxT82JE2/OKMuWD7szu982E3JD0/3HEb5ssVjxzsPg0UOQT bkShz1kwTnF+kPRPpptAJtvbObfc4J4Zjws1foiuhVwI9Xfq74yrnz3y/+mCRzxO UZYdPkP8GtWZxWgYBXQH0GHaHxz9cWkIWS5UuLs07PfgkjVjDKsuwSzXntSTpcIb tsGpjsgvDOi1m7CeE+gn0XUYvQxUZBQ4s9cxWAQToPUuYtaYUDz8y2DL7V6jFYzC cHZHNeepKFPgwWCxXpx3R1XFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFePK9RH nvgChR6i6Lpd4P+H18QGMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC//PVvBdWdmhy7Ph5RcJyneg6Y94kPh0AWVnqJrr43XBOUK0eg3eoh hRIR1/OwWC+SaI1lqc7Dqn5UJSKoTyidiqVcfQLRF1NkEeY2ZVIivABpms/ezN6p xZ93d3OQUhcqI2YxoVXUv1GkhIJmHln4y0je7WWpGfkuiJv/s5ichNwlLTSqSm+3 At9Kcmd9chC3Dwpmp/iwHle/gyD+DZAV9qbqhf1TwkBihVfjSi9E4MNq28Jo1ny9 qs0IXSpKpvozHxTG7Dd1wqbAIM3UQH0vVTaYZoLiF3VfcitJsrWOJZ/XgMiNnlKG HrCf1NkN1QyUQUmRrOm9ridUEpRKN9i7 -----END CERTIFICATE-----Generated at Sun Dec 28 22:11:58 2025 by rpki-client