This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft File: 8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json) Hash identifier: 3zTTi09PrGOrTPD9uZPFYmDyTPei91PfK1sjyM+Lpvg= Subject key identifier: 8A:26:EA:FF:3D:C7:6D:C9:14:6B:FF:0D:9F:C0:1D:98:EA:7A:4E:76 Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft Manifest number: 17 Signing time: Fri 19 Dec 2025 06:46:38 +0000 Manifest this update: Fri 19 Dec 2025 06:46:38 +0000 Manifest next update: Fri 26 Dec 2025 06:46:38 +0000 Files and hashes: 1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: 0eVzVIzv37KmdCo91wOSn9i1sL+GhC9KH4Q4gBkARLY=) 2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: cxYtuj/s/bSvnaQ4JfJbG+7S68mrHrbAGrbGPiwy+Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Validity Not Before: Dec 19 06:46:38 2025 GMT Not After : Dec 26 06:46:38 2025 GMT Subject: CN=6944f4ce-d273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:75:95:c4:ed:e0:e3:9c:59:dd:f0:df:c7: f3:0d:20:b5:ea:e6:9c:ad:c6:ac:df:d8:1c:8e:4e: 8b:3d:cb:06:5d:46:c8:b4:69:7e:53:11:63:72:11: b7:e5:51:2a:53:bb:e3:49:f4:be:f9:cb:de:19:8f: 41:7f:b7:c6:2b:e3:65:0f:b5:06:73:1c:e3:0e:df: f5:d5:ec:86:d5:9e:ac:d6:97:bc:28:44:11:4f:6f: b2:f3:2a:99:4b:31:e6:9b:c2:20:2c:22:4c:f9:3a: c1:b1:dc:8e:ca:71:80:16:33:1b:68:31:8d:a4:b4: 38:ce:e8:66:b9:5d:5e:8d:f4:e3:88:5a:e0:a9:06: 3b:a6:43:6e:76:a5:8b:38:90:2f:a4:56:44:bc:2f: 69:d5:09:53:92:98:36:3e:2c:a9:ba:ad:ad:bc:dc: 3c:52:97:7a:40:2e:9f:66:a5:70:1f:cf:e9:d1:f1: 7e:c2:e2:f4:00:6d:0d:6c:f3:f7:1e:03:a0:8e:34: 99:62:03:a4:ec:af:13:56:e5:3f:05:44:fe:09:11: 09:a4:b9:ed:7b:23:97:be:e6:53:19:9d:96:06:e2: 1a:cf:98:28:49:9e:08:ef:25:d0:ec:36:ee:cf:bc: d8:30:a4:44:a7:21:bb:f7:9b:8b:91:82:b2:72:45: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:26:EA:FF:3D:C7:6D:C9:14:6B:FF:0D:9F:C0:1D:98:EA:7A:4E:76 X509v3 Authority Key Identifier: keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:69:64:f5:2c:a5:3f:7d:55:af:d5:3d:b5:e9:fe:26:2c:20: 92:bd:d6:5a:f5:8c:45:cf:78:76:fe:4d:ed:bb:c6:bf:e0:e4: 3a:cf:22:c3:b7:08:25:47:f4:29:38:92:ec:9b:41:2a:57:33: c0:0c:63:b1:06:0f:ef:cf:24:88:12:a8:8e:92:1a:61:6f:fb: a0:7c:d1:d8:e3:75:84:5d:b9:a3:f3:bb:c3:44:cd:7c:4a:db: d6:fc:7a:33:24:b4:b2:6e:f9:9c:68:80:6a:d7:26:5e:17:ad: a0:08:9d:06:11:9b:0c:dd:a0:10:a0:37:22:21:7a:8a:51:e9: 17:42:73:dd:ea:5d:c6:9c:a5:1f:ce:a6:e0:0b:c3:0c:cc:37: 3f:37:85:c3:f7:a7:b1:de:f5:2f:32:9d:52:e8:fe:22:df:fc: 8b:88:d6:f9:13:03:db:22:a2:89:f8:77:82:79:8c:7d:17:86: e0:cf:9d:4c:d3:10:75:32:9e:96:6b:a2:40:16:87:57:ea:fd: cd:bd:ae:d7:8b:e3:1a:d3:f7:a4:95:ca:91:46:71:78:9f:01: 65:28:cd:0d:c3:b2:3d:59:44:cb:38:52:10:bb:31:24:60:98: 26:d5:d3:f4:a0:d0:bc:87:28:8f:7a:f1:18:28:7d:bc:bc:32: 48:35:e3:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUU2QTExMC8GA1UEBRMoRjA1MjFBNUI2REIwNEQ3NTZGQTI5NTJBMEYyOUEzOTEy MTJDNThCMjAeFw0yNTEyMTkwNjQ2MzhaFw0yNTEyMjYwNjQ2MzhaMBgxFjAUBgNV BAMMDTY5NDRmNGNlLWQyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnF3WVxO3g45xZ3fDfx/MNILXq5pytxqzf2ByOTos9ywZdRsi0aX5TEWNyEbfl USpTu+NJ9L75y94Zj0F/t8Yr42UPtQZzHOMO3/XV7IbVnqzWl7woRBFPb7LzKplL MeabwiAsIkz5OsGx3I7KcYAWMxtoMY2ktDjO6Ga5XV6N9OOIWuCpBjumQ252pYs4 kC+kVkS8L2nVCVOSmDY+LKm6ra283DxSl3pALp9mpXAfz+nR8X7C4vQAbQ1s8/ce A6CONJliA6TsrxNW5T8FRP4JEQmkue17I5e+5lMZnZYG4hrPmChJngjvJdDsNu7P vNgwpESnIbv3m4uRgrJyRZHFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiibq/z3H bckUa/8Nn8AdmOp6TnYwHwYDVR0jBBgwFoAU8FIaW22wTXVvopUqDymjkSEsWLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRTZBLzIxOUQ3RDhBQkMx MjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhWdm9wVXFEeW1qa1NFc1dM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEZJYVcyMndUWFZ2b3BVcUR5bWprU0VzV0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB RTZBLzIxOUQ3RDhBQkMxMjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhW dm9wVXFEeW1qa1NFc1dMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1pZPUspT99Va/VPbXp/iYsIJK91lr1jEXPeHb+Te27xr/g5DrPIsO3 CCVH9Ck4kuybQSpXM8AMY7EGD+/PJIgSqI6SGmFv+6B80djjdYRduaPzu8NEzXxK 29b8ejMktLJu+ZxogGrXJl4XraAInQYRmwzdoBCgNyIheopR6RdCc93qXcacpR/O puALwwzMNz83hcP3p7He9S8ynVLo/iLf/IuI1vkTA9sioon4d4J5jH0XhuDPnUzT EHUynpZrokAWh1fq/c29rteL4xrT96SVypFGcXifAWUozQ3Dsj1ZRMs4UhC7MSRg mCbV0/Sg0LyHKI968Rgofby8Mkg148A= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:21 2025 by rpki-client