This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: 46k7Vz4WXys6lQlQ3IyPVuAPO+LgCBM2ZKuWSRF7OW4= Subject key identifier: F0:0D:A8:9C:59:31:C8:D3:9B:5D:E4:31:D4:93:B2:A0:55:8B:3B:93 Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 03A0 Signing time: Thu 18 Dec 2025 23:59:25 +0000 Manifest this update: Thu 18 Dec 2025 23:59:24 +0000 Manifest next update: Thu 25 Dec 2025 23:59:24 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: Tn4E1P5+wl3cd3eMX47on/2krQeyIoX0SDOqSjff92w=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: 3Kdq8iB7GHkmorOzNCkj5Eih8OtxQjBmOJhG+WoD4A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: Dec 18 23:59:24 2025 GMT Not After : Dec 25 23:59:24 2025 GMT Subject: CN=6944955d-1318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:ef:95:e7:ed:62:02:17:6c:f8:ae:b5:e0: 87:16:77:82:48:2a:be:79:43:fa:f2:32:f5:55:cf: c6:e2:ae:44:c0:a8:7c:49:40:1f:aa:fb:96:df:a5: 74:44:a1:5e:38:34:78:70:fd:9e:6b:cd:c5:95:c3: b4:a8:43:c3:5a:40:a7:05:72:1d:74:c3:fc:9c:6c: ae:be:46:c6:60:9d:01:76:ac:e2:09:bc:d0:0a:e7: 81:dc:c2:b5:34:fb:40:60:6c:10:73:45:37:be:9a: 41:32:ce:22:7d:a5:39:b2:77:2e:1f:08:2f:0d:a9: b3:d1:93:15:12:d8:fb:bb:9e:e4:9e:76:8b:7e:94: ed:0f:a5:a6:61:e5:e3:8f:6f:14:3f:47:07:3b:39: c1:f3:f8:ef:52:aa:5c:55:81:7a:d8:11:67:c6:a5: c5:57:fe:e6:55:2e:02:ae:dd:aa:26:a5:36:6d:ba: ff:c6:34:30:f2:fd:1d:d2:1e:78:03:6f:49:9a:48: 47:5e:97:7c:a6:90:e1:f3:de:23:4c:4b:69:2c:af: da:94:1e:3f:2b:c2:0f:23:7b:5e:64:9e:11:d9:15: 74:bb:a0:45:2e:75:4e:2f:43:54:7d:3e:52:e0:a9: e7:6d:ac:be:1f:43:da:12:64:0b:28:ff:dd:3f:44: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0D:A8:9C:59:31:C8:D3:9B:5D:E4:31:D4:93:B2:A0:55:8B:3B:93 X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:76:2b:15:cb:a0:de:9f:2e:49:c8:06:bd:21:85:38:f9:00: ba:48:03:5c:2f:15:68:95:59:31:e0:ec:43:1a:39:3f:fd:5e: 64:85:1b:03:22:88:61:b7:3a:95:bf:34:dc:77:ab:e5:be:50: 21:f9:3f:75:05:a1:cd:15:ff:8a:5e:5d:aa:0a:89:5b:7b:d2: 18:ff:57:3a:5f:75:c0:07:dd:9a:5a:de:20:6f:c4:9e:8f:30: 1e:7b:32:a7:6b:fe:05:c3:94:c3:03:c4:5f:d7:bb:5a:af:0a: ec:e3:8f:f2:ce:4d:fb:75:e8:64:3a:f0:b2:b6:24:5f:da:7c: 9b:3c:3d:c8:20:28:a3:f8:86:a8:c5:26:3b:81:e8:fb:cc:61: 0a:26:aa:87:d0:29:18:ae:f9:cd:e0:fc:22:52:78:2f:f6:b7: 33:01:31:70:a9:f1:2f:29:79:35:2a:dd:ee:a4:9a:72:a5:d8: a5:77:6f:44:f5:b4:99:06:db:2e:6e:f2:70:85:55:bd:54:20: 15:7a:58:76:9c:f7:47:4f:7a:43:5b:67:cd:e4:6a:ca:82:15: d4:f6:1e:25:ec:cf:5e:b7:45:27:b1:81:6d:91:ce:cc:cb:5d: 69:dd:ed:c3:aa:04:1a:05:77:9f:2e:c3:7b:d8:c2:ec:f6:32: c0:c7:86:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjUxMjE4MjM1OTI0WhcNMjUxMjI1MjM1OTI0WjAYMRYwFAYD VQQDDA02OTQ0OTU1ZC0xMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/nvleftYgIXbPiuteCHFneCSCq+eUP68jL1Vc/G4q5EwKh8SUAfqvuW36V0 RKFeODR4cP2ea83FlcO0qEPDWkCnBXIddMP8nGyuvkbGYJ0BdqziCbzQCueB3MK1 NPtAYGwQc0U3vppBMs4ifaU5sncuHwgvDamz0ZMVEtj7u57knnaLfpTtD6WmYeXj j28UP0cHOznB8/jvUqpcVYF62BFnxqXFV/7mVS4Crt2qJqU2bbr/xjQw8v0d0h54 A29JmkhHXpd8ppDh894jTEtpLK/alB4/K8IPI3teZJ4R2RV0u6BFLnVOL0NUfT5S 4Knnbay+H0PaEmQLKP/dP0QQhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPANqJxZ McjTm13kMdSTsqBVizuTMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBedisVy6Deny5JyAa9IYU4+QC6SANcLxVolVkx4OxDGjk//V5khRsD IohhtzqVvzTcd6vlvlAh+T91BaHNFf+KXl2qColbe9IY/1c6X3XAB92aWt4gb8Se jzAeezKna/4Fw5TDA8Rf17tarwrs44/yzk37dehkOvCytiRf2nybPD3IICij+Iao xSY7gej7zGEKJqqH0CkYrvnN4PwiUngv9rczATFwqfEvKXk1Kt3upJpypdild29E 9bSZBtsubvJwhVW9VCAVelh2nPdHT3pDW2fN5GrKghXU9h4l7M9et0UnsYFtkc7M y11p3e3DqgQaBXefLsN72MLs9jLAx4YH -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:10 2025 by rpki-client