This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: +UdY3oFtN45SPj3ZtUtH9HIQDCn3WkRgT/tRwkbGI5g= Subject key identifier: 76:DF:F6:BC:43:BD:2F:60:45:8D:D7:B4:5D:9A:1E:C7:BF:95:2E:67 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 03C4 Signing time: Thu 18 Dec 2025 23:58:13 +0000 Manifest this update: Thu 18 Dec 2025 23:58:12 +0000 Manifest next update: Thu 25 Dec 2025 23:58:12 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: bBVnaNxwK7H6xFEvy8bjUBQge5DBqc8oaLyaMXMgPpM=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: XtdmJSxuSqJLeY4yGf6y31fYXsFvKu/1qBD/nGzqK1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Dec 18 23:58:12 2025 GMT Not After : Dec 25 23:58:12 2025 GMT Subject: CN=69449515-51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:d5:5f:c1:42:67:96:5b:2e:dd:b2:a3:36: 98:f1:22:f4:41:2b:92:07:45:30:a9:aa:08:8a:dd: 0b:8b:8e:2b:32:1a:03:52:7c:35:51:31:8c:a0:17: fa:0c:32:93:37:e8:01:93:be:0a:65:a6:ab:e1:28: 43:e1:33:ec:49:d8:90:86:d9:0c:87:4f:de:79:b5: 26:7c:a7:d8:27:c5:ef:aa:48:80:e7:73:c6:44:a6: 1d:f2:34:ea:6a:e5:f9:7b:ff:b0:e3:42:83:a4:48: 12:c4:cd:00:83:fb:b1:fb:1c:ae:9d:67:16:b9:29: b8:a1:89:aa:37:0d:76:6e:d5:b2:e1:4f:6a:76:01: b9:85:a1:08:b7:93:5c:85:ad:ca:bd:ab:97:78:eb: 2e:d7:2b:c8:66:3a:a5:1f:f0:ae:92:ad:cf:22:58: 97:d7:a6:25:b8:85:bf:89:1c:8b:ac:e5:ab:6e:f1: e9:de:de:ae:26:86:1d:8d:ad:9e:39:7e:83:d7:3f: 18:c6:76:6f:6c:07:eb:4d:39:b4:c9:64:55:85:e0: f1:35:8d:2a:12:b4:38:d3:df:59:52:0b:08:a5:0d: b0:7b:fe:62:6a:32:49:01:1f:7b:4c:7b:a4:a9:fa: 2b:a7:4d:61:af:a5:d9:a7:83:2d:5d:1c:68:c8:e8: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DF:F6:BC:43:BD:2F:60:45:8D:D7:B4:5D:9A:1E:C7:BF:95:2E:67 X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:56:d7:eb:e0:24:32:b3:c2:89:38:5f:51:c5:aa:d4:79: 40:1a:98:70:8a:fd:2c:84:cd:dc:36:86:f4:1c:aa:d2:2c:f0: 3e:95:a6:64:21:36:d2:72:34:08:bb:91:f2:45:0a:4c:96:ab: 4c:ab:3f:3e:54:f4:d5:52:f4:f2:67:ee:6b:e0:d5:97:2c:57: d7:78:58:d7:e5:0d:67:34:a9:86:2f:6b:28:b4:df:2e:3c:e7: 22:8f:db:c9:48:02:76:ac:ce:6b:45:b5:19:99:33:21:a4:00: 8a:d6:35:24:9e:6c:ba:4d:b8:c9:78:4d:35:f7:f0:67:2c:6c: 84:ce:8b:1d:90:e4:0f:ff:cb:1f:2f:10:0f:eb:21:42:f7:90: 80:cf:02:38:d6:06:dd:27:3b:ff:70:27:e1:03:4d:f6:65:7f: 39:4c:d6:c9:2e:34:4e:5e:c9:8e:8f:db:4b:6a:f5:f4:46:27: 94:85:f0:9f:26:68:f5:a7:1c:3d:3e:c1:0b:98:21:0f:70:13: 6d:4f:2e:02:f5:52:89:bd:b9:f5:08:c1:d7:3b:ee:17:f8:8c: e7:33:bf:56:3c:9b:74:ec:97:51:e3:c5:ec:27:0b:e5:f8:db: 1f:c4:2e:27:ad:f7:04:18:57:7f:91:1b:bd:8e:3f:c0:11:6a: 2f:dd:1f:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUxMjE4MjM1ODEyWhcNMjUxMjI1MjM1ODEyWjAYMRYwFAYD VQQDDA02OTQ0OTUxNS01MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PLVX8FCZ5ZbLt2yozaY8SL0QSuSB0UwqaoIit0Li44rMhoDUnw1UTGMoBf6 DDKTN+gBk74KZaar4ShD4TPsSdiQhtkMh0/eebUmfKfYJ8XvqkiA53PGRKYd8jTq auX5e/+w40KDpEgSxM0Ag/ux+xyunWcWuSm4oYmqNw12btWy4U9qdgG5haEIt5Nc ha3KvauXeOsu1yvIZjqlH/Cukq3PIliX16YluIW/iRyLrOWrbvHp3t6uJoYdja2e OX6D1z8YxnZvbAfrTTm0yWRVheDxNY0qErQ4099ZUgsIpQ2we/5iajJJAR97THuk qforp01hr6XZp4MtXRxoyOgITQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbf9rxD vS9gRY3XtF2aHse/lS5nMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLaVbX6+AkMrPCiThfUcWq1HlAGphwiv0shM3cNob0HKrSLPA+laZk ITbScjQIu5HyRQpMlqtMqz8+VPTVUvTyZ+5r4NWXLFfXeFjX5Q1nNKmGL2sotN8u POcij9vJSAJ2rM5rRbUZmTMhpACK1jUknmy6TbjJeE019/BnLGyEzosdkOQP/8sf LxAP6yFC95CAzwI41gbdJzv/cCfhA032ZX85TNbJLjROXsmOj9tLavX0RieUhfCf Jmj1pxw9PsELmCEPcBNtTy4C9VKJvbn1CMHXO+4X+IznM79WPJt07JdR48XsJwvl +NsfxC4nrfcEGFd/kRu9jj/AEWov3R9e -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:58 2025 by rpki-client