This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: KNZjh3ary4m9m7WyLobvfxdzmSQUUGolOHvL6j7OKk4= Subject key identifier: 4A:A3:59:39:16:D0:2D:C3:98:27:A5:52:6A:14:BA:EB:64:4E:9C:64 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: 6A Signing time: Sun 21 Dec 2025 06:03:54 +0000 Manifest this update: Sun 21 Dec 2025 06:03:54 +0000 Manifest next update: Sun 28 Dec 2025 06:03:54 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: m56Du0kIHhPzLtLqsXWiDc5CHZyr/wGOoMiCzoIvuz4=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Dec 21 06:03:54 2025 GMT Not After : Dec 28 06:03:54 2025 GMT Subject: CN=69478dca-2e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:44:15:29:10:a9:a1:ca:36:d0:56:9c:02: a2:cb:10:c4:64:ee:5b:98:d9:be:c6:f8:a8:20:c7: 62:b8:e6:3b:cd:e6:3d:67:44:2d:ec:58:d2:61:3a: b5:5a:75:8e:d5:bf:a5:03:9a:43:21:f2:0e:a6:5b: d3:b1:f8:ac:7e:6c:e8:d9:3e:19:1b:51:0b:90:59: bd:c4:4b:7d:88:a0:b5:90:ef:ef:7b:f3:6e:ef:01: 66:82:16:ed:16:0e:34:40:e7:8b:d7:2d:88:bf:35: 72:9c:4d:ce:48:c5:1d:2d:74:2d:8e:3d:ca:ad:de: 6d:9c:45:58:15:6b:99:44:4a:0e:d1:86:d4:c5:e0: 0f:8c:0c:e2:6e:38:c1:c4:16:ea:7c:2b:b9:f0:39: c6:03:9d:b9:7e:b6:36:76:41:d7:2b:3c:c1:f4:40: c0:29:70:59:4c:5d:29:e1:e5:35:73:51:4a:3f:df: 89:13:cf:1c:d7:83:49:35:b0:11:aa:2e:9f:1c:78: 3d:16:74:23:e2:ac:fb:c3:24:52:d3:12:f7:7d:c8: 4d:ed:02:fa:25:8c:d7:99:0c:8f:ca:ff:4b:dd:74: be:5b:91:40:a7:72:98:da:4a:d0:40:7d:13:ca:61: d7:cc:4e:8d:fb:00:c7:5c:f9:c5:52:66:b8:83:26: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:59:39:16:D0:2D:C3:98:27:A5:52:6A:14:BA:EB:64:4E:9C:64 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d2:21:c9:79:3b:f4:1c:e0:7a:4f:ca:a5:d1:93:b6:4f:72: df:cb:04:fa:81:eb:70:2f:ac:d9:15:da:57:ac:96:b4:bd:fa: 68:37:78:67:4b:c0:1a:07:a5:6f:5e:39:70:c0:0a:36:fa:4f: 4f:52:a2:9f:ea:0b:5f:58:3d:c2:93:24:a6:f6:53:f5:50:60: 41:a9:c2:15:ac:83:08:ee:75:06:31:e0:a3:e8:a4:c3:46:17: 73:a4:e9:dc:82:3a:90:6f:48:06:6f:93:51:1e:f7:1a:68:21: fe:48:58:7f:3a:cf:16:15:22:c3:93:10:c5:76:ac:e8:95:79: e9:a9:1e:c7:6c:17:2c:1e:e9:d7:87:84:5b:cf:88:e5:72:c7: 1f:07:b9:56:3e:20:bd:e0:f6:73:e4:20:dd:c0:ff:39:7a:cd: 5a:0c:0b:a5:79:8b:63:6c:4a:55:65:83:8f:15:d7:3f:e0:fe: 7a:e2:dc:81:68:fb:bc:06:c5:f8:7a:2d:ff:c2:0b:3d:fc:60: fd:30:28:6b:12:ce:32:76:68:31:be:1e:cd:89:4b:24:d0:e7: 49:e6:03:35:3b:5f:63:c5:be:53:82:fd:03:b2:80:64:34:9d: be:fb:1d:9a:be:69:a3:bb:15:5d:97:41:13:47:6e:91:4c:69: d6:e9:c9:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoRjE1QzVDNUJBNTIxNDUzNzA3QzgxRjVGRUMwODExQkYy MUNGRjQwRTAeFw0yNTEyMjEwNjAzNTRaFw0yNTEyMjgwNjAzNTRaMBgxFjAUBgNV BAMMDTY5NDc4ZGNhLTJlMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHlUQVKRCpoco20FacAqLLEMRk7luY2b7G+Kggx2K45jvN5j1nRC3sWNJhOrVa dY7Vv6UDmkMh8g6mW9Ox+Kx+bOjZPhkbUQuQWb3ES32IoLWQ7+97827vAWaCFu0W DjRA54vXLYi/NXKcTc5IxR0tdC2OPcqt3m2cRVgVa5lESg7RhtTF4A+MDOJuOMHE Fup8K7nwOcYDnbl+tjZ2QdcrPMH0QMApcFlMXSnh5TVzUUo/34kTzxzXg0k1sBGq Lp8ceD0WdCPirPvDJFLTEvd9yE3tAvoljNeZDI/K/0vddL5bkUCncpjaStBAfRPK YdfMTo37AMdc+cVSZriDJjl7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSqNZORbQ LcOYJ6VSahS662ROnGQwHwYDVR0jBBgwFoAU8VxcW6UhRTcHyB9f7AgRvyHP9A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBLzlBODczRUIwNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFZ4Y1c2VWhSVGNIeUI5ZjdBZ1J2eUhQOUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBLzlBODczRUIwNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRj SHlCOWY3QWdSdnlIUDlBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXSIcl5O/Qc4HpPyqXRk7ZPct/LBPqB63AvrNkV2leslrS9+mg3eGdL wBoHpW9eOXDACjb6T09Sop/qC19YPcKTJKb2U/VQYEGpwhWsgwjudQYx4KPopMNG F3Ok6dyCOpBvSAZvk1Ee9xpoIf5IWH86zxYVIsOTEMV2rOiVeempHsdsFywe6deH hFvPiOVyxx8HuVY+IL3g9nPkIN3A/zl6zVoMC6V5i2NsSlVlg48V1z/g/nri3IFo +7wGxfh6Lf/CCz38YP0wKGsSzjJ2aDG+Hs2JSyTQ50nmAzU7X2PFvlOC/QOygGQ0 nb77HZq+aaO7FV2XQRNHbpFMadbpyRY= -----END CERTIFICATE-----Generated at Sun Dec 21 12:59:42 2025 by rpki-client