This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: 134OElACOAUHZWp0hphFo48ieS+aJbjB+s+tpFckQg8= Subject key identifier: 77:C7:D3:56:EE:77:68:72:8C:72:D2:7E:53:28:C3:55:64:83:5C:F3 Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A76 Signing time: Fri 26 Dec 2025 19:04:25 +0000 Manifest this update: Fri 26 Dec 2025 19:04:24 +0000 Manifest next update: Fri 02 Jan 2026 19:04:24 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: Mek+GqN4J8oljCgiTR7j+BeFtyJiErpPcLDHbhSPOTg=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: EANvDel33mvxXFe9omaJU7NrbUFposThakUlVJ4Fm3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Dec 26 19:04:24 2025 GMT Not After : Jan 2 19:04:24 2026 GMT Subject: CN=694edc39-42e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:c7:59:a2:31:dd:9e:3b:32:9e:64:6b:05: 73:13:99:e8:d8:80:62:15:00:9a:5b:27:fd:49:a3: 4e:3f:e0:a5:7e:9f:4f:f9:cd:c9:ab:e0:9b:70:5c: 9c:9c:fc:32:3c:e1:04:b1:c1:d3:ec:76:a5:de:bf: c5:0d:a1:c6:fe:19:20:b2:7c:80:9e:ab:63:7a:9e: 1e:8f:a8:3d:83:47:cd:69:65:25:59:30:3d:d2:70: ea:f1:4e:1f:60:17:0d:db:d7:7c:92:95:c0:b8:56: bd:5f:60:c0:b1:70:1e:2b:10:eb:93:99:cd:5a:9b: 4b:91:be:67:fc:6f:95:62:28:39:df:9a:e3:e4:69: 04:e1:66:cb:8a:ef:b3:d7:2c:a8:3e:18:b8:23:3d: b5:2c:ec:bf:94:f3:0f:10:31:f2:c0:73:64:32:5c: 06:1f:66:9e:d3:aa:2f:8a:d3:ac:6b:e8:b7:18:14: a9:67:3e:13:61:c0:ba:03:c9:3d:18:82:1a:cd:21: 6f:23:1c:36:c1:5c:50:c2:11:0f:d7:53:a4:6b:fc: a9:ab:f5:a9:e2:b3:19:2c:45:00:64:9f:a3:98:a0: 3d:7a:ae:0b:fd:7f:2d:5e:d1:4e:54:78:92:79:95: d4:6f:ad:65:3f:7d:80:51:bd:b0:8d:31:ba:de:cf: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C7:D3:56:EE:77:68:72:8C:72:D2:7E:53:28:C3:55:64:83:5C:F3 X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:95:78:c5:fe:1d:71:76:cf:b0:32:11:44:cf:af:4a:6c:95: f3:cc:6d:4c:60:c2:ec:8d:0a:ab:c9:67:3f:b5:e4:ec:92:ec: dc:66:64:1e:10:ef:c6:82:4f:57:44:f7:a7:c3:7d:e7:17:f0: 2a:7a:2f:12:74:2a:53:26:08:61:58:ee:39:ab:00:a0:b5:32: 41:c4:9f:0d:0c:32:0b:d3:fa:d8:50:35:3b:de:5b:50:a0:e0: c2:48:af:b2:af:09:2e:a2:0e:3d:71:47:ed:16:55:e5:28:01: 86:b6:f9:52:70:b5:5e:27:32:e8:27:6a:c6:e8:ab:90:5b:f5: 19:db:83:c6:ea:02:81:ac:e4:d7:34:bf:ed:31:1d:10:93:f7: cd:b2:21:59:de:34:cf:70:da:eb:de:63:e7:d6:34:f1:b7:44: a6:05:0b:0a:c4:df:ea:72:fc:62:2c:c0:4d:91:38:13:e5:87: f8:7f:af:a7:6a:c9:55:d4:cd:2c:2a:33:db:1c:63:c3:eb:df: 07:82:2b:61:0e:4d:d7:b8:f8:73:b9:bf:63:c3:3c:1c:14:54: af:55:6b:bb:7a:f0:41:7f:75:d9:97:2f:c9:f2:82:6c:20:ce: 2d:a3:b2:b6:2f:23:c3:d3:cc:b5:6a:b1:83:f5:a3:a7:41:2d: 5c:5e:e9:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUxMjI2MTkwNDI0WhcNMjYwMTAyMTkwNDI0WjAYMRYwFAYD VQQDDA02OTRlZGMzOS00MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznPHWaIx3Z47Mp5kawVzE5no2IBiFQCaWyf9SaNOP+Clfp9P+c3Jq+CbcFyc nPwyPOEEscHT7Hal3r/FDaHG/hkgsnyAnqtjep4ej6g9g0fNaWUlWTA90nDq8U4f YBcN29d8kpXAuFa9X2DAsXAeKxDrk5nNWptLkb5n/G+VYig535rj5GkE4WbLiu+z 1yyoPhi4Iz21LOy/lPMPEDHywHNkMlwGH2ae06ovitOsa+i3GBSpZz4TYcC6A8k9 GIIazSFvIxw2wVxQwhEP11Oka/ypq/Wp4rMZLEUAZJ+jmKA9eq4L/X8tXtFOVHiS eZXUb61lP32AUb2wjTG63s+WbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfH01bu d2hyjHLSflMow1Vkg1zzMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBilXjF/h1xds+wMhFEz69KbJXzzG1MYMLsjQqryWc/teTskuzcZmQe EO/Ggk9XRPenw33nF/Aqei8SdCpTJghhWO45qwCgtTJBxJ8NDDIL0/rYUDU73ltQ oODCSK+yrwkuog49cUftFlXlKAGGtvlScLVeJzLoJ2rG6KuQW/UZ24PG6gKBrOTX NL/tMR0Qk/fNsiFZ3jTPcNrr3mPn1jTxt0SmBQsKxN/qcvxiLMBNkTgT5Yf4f6+n aslV1M0sKjPbHGPD698HgithDk3XuPhzub9jwzwcFFSvVWu7evBBf3XZly/J8oJs IM4to7K2LyPD08y1arGD9aOnQS1cXulH -----END CERTIFICATE-----Generated at Sun Dec 28 11:23:27 2025 by rpki-client