This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft File: 8ElXN_-ojhn_HhUqVgIex1bYUps.mft (raw, json) Hash identifier: BwEPD/oOYgDQpvbDm82e2r1bxN9wQYbvMRm0LpFYyJQ= Subject key identifier: E5:41:9A:A3:D0:BF:9C:0B:6C:28:DE:07:54:22:20:CD:0C:6B:43:6C Authority key identifier: F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B Certificate issuer: /CN=A918E1C4/serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft Manifest number: 0B Signing time: Fri 19 Dec 2025 06:57:26 +0000 Manifest this update: Fri 19 Dec 2025 06:57:26 +0000 Manifest next update: Fri 26 Dec 2025 06:57:26 +0000 Files and hashes: 1: 8ElXN_-ojhn_HhUqVgIex1bYUps.crl (hash: BLoEhWb5GdSNwsZPksS4pHneJmnbGT8TUNUjnGlavBc=) 2: E209029ACE9311F09FB94826C4F9AE02.roa (hash: PKPuV9j23qJT+Dxwsl2rpgb4JgUm9Dn3bd7jYxdkirs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1C4, serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B Validity Not Before: Dec 19 06:57:26 2025 GMT Not After : Dec 26 06:57:26 2025 GMT Subject: CN=6944f756-ad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:4e:82:fb:51:4b:53:cc:9a:74:11:f3:7e: e9:da:ab:3b:6f:88:12:0c:74:13:90:4d:50:4a:14: 16:7b:36:d9:2e:4f:bf:34:ba:f8:66:ec:2f:c0:44: 4e:8d:29:5d:e1:13:e8:4b:c8:b4:ca:e9:84:2c:57: 2f:0f:b6:6d:82:9e:04:ad:37:09:8d:6c:b6:d7:f6: 1a:7d:9d:41:e8:13:a8:b7:f3:aa:ff:d4:15:d4:98: dd:71:03:a7:74:df:75:14:96:f2:ff:34:70:90:44: b4:c7:bf:11:3e:3c:b3:50:3c:21:12:ab:14:77:39: 74:4b:1e:18:08:27:2d:35:73:20:91:15:d8:16:a6: d0:db:52:10:4a:07:89:41:b8:1b:b4:d7:2b:b2:dd: 9e:fa:ed:cc:a2:23:25:68:9e:54:b1:e6:c5:da:0b: 15:e1:05:42:9c:ae:f3:49:5b:25:e0:8a:d4:0a:52: a1:2b:7f:7a:dc:4a:fc:b3:1f:76:e5:8c:7d:a7:d9: 63:cb:94:95:17:30:b2:7a:bf:8c:62:fa:72:04:22: 1d:98:39:db:48:e1:47:28:cb:56:f5:41:3d:64:d7: b9:ce:5b:f4:dc:bf:ad:b9:39:f7:44:86:ee:83:53: 05:12:a9:e8:46:cd:bf:d1:b4:2e:f5:0b:28:a1:c3: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:9A:A3:D0:BF:9C:0B:6C:28:DE:07:54:22:20:CD:0C:6B:43:6C X509v3 Authority Key Identifier: keyid:F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b5:9c:af:c0:c4:1d:12:9a:ca:71:fa:c3:8b:9a:79:1c:c8: 2e:a1:6e:be:c5:47:01:aa:87:ca:4d:69:99:c8:72:a0:f3:fd: 8f:88:05:9e:4c:37:e5:01:d1:e6:0c:1b:91:0e:ee:b8:d9:6c: 88:80:cb:3c:27:e6:65:99:8f:d7:dd:30:72:b2:97:8c:df:ce: 4c:07:ef:88:c7:f9:0b:74:d1:95:df:23:c7:c1:9c:2a:fb:54: 83:d0:e4:34:65:2f:a7:21:e9:83:99:60:ac:13:f7:9a:84:cd: 3d:78:14:cc:81:0b:92:e3:e4:30:d9:7e:8c:8c:ff:63:c2:56: 28:5c:28:9a:a5:15:0b:28:63:03:90:e1:88:5a:b1:a8:e2:cf: 96:77:2a:96:be:0a:ee:af:b2:d2:93:a9:22:de:54:e2:3e:f1: 37:60:0b:c6:f3:21:44:64:29:8d:73:cb:c6:8e:12:98:65:23: 7d:b4:ee:42:84:e6:13:92:7b:a0:14:07:59:b0:69:b7:92:5d: ac:03:86:c5:d5:82:e6:19:85:81:e2:2d:ab:8f:6d:57:1c:d4: a7:23:e7:e2:8b:b0:06:57:ce:dd:af:f2:1f:e3:7e:78:76:70: f4:2f:c2:62:a2:5f:4c:61:a9:cb:f0:31:28:7c:11:a6:93:d3: 50:08:82:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTFDNDExMC8GA1UEBRMoRjA0OTU3MzdGRkE4OEUxOUZGMUUxNTJBNTYwMjFFQzc1 NkQ4NTI5QjAeFw0yNTEyMTkwNjU3MjZaFw0yNTEyMjYwNjU3MjZaMBgxFjAUBgNV BAMMDTY5NDRmNzU2LWFkOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3I06C+1FLU8yadBHzfunaqztviBIMdBOQTVBKFBZ7NtkuT780uvhm7C/ARE6N KV3hE+hLyLTK6YQsVy8Ptm2CngStNwmNbLbX9hp9nUHoE6i386r/1BXUmN1xA6d0 33UUlvL/NHCQRLTHvxE+PLNQPCESqxR3OXRLHhgIJy01cyCRFdgWptDbUhBKB4lB uBu01yuy3Z767cyiIyVonlSx5sXaCxXhBUKcrvNJWyXgitQKUqErf3rcSvyzH3bl jH2n2WPLlJUXMLJ6v4xi+nIEIh2YOdtI4Ucoy1b1QT1k17nOW/Tcv625OfdEhu6D UwUSqehGzb/RtC71Cyihw0e3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5UGao9C/ nAtsKN4HVCIgzQxrQ2wwHwYDVR0jBBgwFoAU8ElXN/+ojhn/HhUqVgIex1bYUpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMUM0LzE1Njk1NzYyQ0U5 MzExRjA5NjlFMTUyNEM0RjlBRTAyLzhFbFhOXy1vamhuX0hoVXFWZ0lleDFiWVVw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVsWE5fLW9qaG5fSGhVcVZnSWV4MWJZVXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MUM0LzE1Njk1NzYyQ0U5MzExRjA5NjlFMTUyNEM0RjlBRTAyLzhFbFhOXy1vamhu X0hoVXFWZ0lleDFiWVVwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKa1nK/AxB0Smspx+sOLmnkcyC6hbr7FRwGqh8pNaZnIcqDz/Y+IBZ5M N+UB0eYMG5EO7rjZbIiAyzwn5mWZj9fdMHKyl4zfzkwH74jH+Qt00ZXfI8fBnCr7 VIPQ5DRlL6ch6YOZYKwT95qEzT14FMyBC5Lj5DDZfoyM/2PCVihcKJqlFQsoYwOQ 4Yhasajiz5Z3Kpa+Cu6vstKTqSLeVOI+8TdgC8bzIURkKY1zy8aOEphlI3207kKE 5hOSe6AUB1mwabeSXawDhsXVguYZhYHiLauPbVcc1Kcj5+KLsAZXzt2v8h/jfnh2 cPQvwmKiX0xhqcvwMSh8EaaT01AIgsc= -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:51 2025 by rpki-client