This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: H5RvIYEwzG4mB7bSdjFxNWi8j9OTVkwptcdnVBwFbVA= Subject key identifier: 0B:1B:37:EB:3B:47:FF:D4:07:60:8B:2B:DE:98:20:0B:7F:E3:15:5B Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 039B Signing time: Mon 08 Dec 2025 23:08:48 +0000 Manifest this update: Mon 08 Dec 2025 23:08:48 +0000 Manifest next update: Mon 15 Dec 2025 23:08:48 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: 2yOKFjepi80dyXxyEoaLw3HJp3qJlZhtAR4scYSc33Q=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: 3Kdq8iB7GHkmorOzNCkj5Eih8OtxQjBmOJhG+WoD4A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 23:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: Dec 8 23:08:48 2025 GMT Not After : Dec 15 23:08:48 2025 GMT Subject: CN=69375a80-b575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:85:74:f4:ac:ef:b6:99:f4:53:d4:b6:2a: 57:d9:32:64:7b:32:3f:5f:15:19:cb:23:e9:e0:19: 0e:9e:3e:0a:9d:35:8f:19:07:bb:f4:62:c5:70:8e: fe:0c:20:32:a7:f6:0a:f3:6c:fe:2b:84:d1:a3:27: 2c:d8:c4:b5:44:b8:4e:4a:29:6a:27:b1:e8:b3:2b: ae:75:f3:1d:c3:99:f1:30:8d:4e:08:66:91:b1:51: 4c:b1:55:8b:66:77:fa:7e:b7:fc:92:55:9c:59:76: e1:6b:49:d1:38:79:de:fc:d0:9c:24:d7:2f:29:0a: 9f:d0:c5:db:a3:99:ab:0a:84:f5:8c:42:e8:48:fd: 7b:98:fa:b7:e6:e3:d0:29:8e:01:34:e9:9a:9f:53: b1:96:c8:c0:ed:06:60:68:9b:fb:b0:5f:a7:a0:e5: 17:9b:f7:bd:9c:4e:4f:d5:e8:6f:61:08:6e:a2:ca: f3:5f:ed:7e:a7:bd:12:80:46:50:d9:23:d1:8e:78: 2d:46:29:9d:60:b7:d7:90:b6:bb:9a:db:ce:ba:fa: 16:6f:34:da:ee:c4:b6:11:d9:73:d0:09:1c:b9:d4: 17:9f:b6:89:73:b7:4f:1a:e0:e1:40:42:c1:00:79: 27:7b:0c:bd:a2:d7:92:37:ca:3a:e1:dc:53:ef:7d: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1B:37:EB:3B:47:FF:D4:07:60:8B:2B:DE:98:20:0B:7F:E3:15:5B X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:97:94:bc:83:bf:8c:76:c5:07:9e:d2:3a:c6:3b:04:91:db: 20:4d:d0:07:62:8f:41:d9:2c:a6:f1:60:64:e3:72:05:b7:0c: f1:d1:9d:48:2c:28:b2:53:1f:ac:72:62:84:0f:e2:e3:58:ce: 97:f3:28:9c:fb:ce:40:f6:47:16:25:c2:2d:45:1e:ee:b0:be: 1b:1d:95:99:9c:48:5f:33:de:55:05:11:b7:ea:5b:02:9d:87: 06:16:be:27:9b:1a:15:8d:ef:1e:41:34:b3:3e:f5:68:f4:4a: eb:46:c1:66:99:47:9e:ad:b1:a4:59:f1:87:27:06:48:75:df: 1b:4e:3a:41:8a:6d:bc:b9:b0:91:a1:08:e8:04:45:34:76:e0: e2:a3:0f:55:61:41:8d:3f:af:54:f8:3f:7e:3b:be:2c:de:f6: fd:a8:89:fd:e5:3a:0d:3e:70:d7:61:f0:05:4b:89:f8:3e:39: 01:9c:f0:3a:a4:ab:92:ce:02:82:76:c3:d3:10:71:a6:05:c3: db:0a:da:6c:09:b4:fe:ef:c0:7f:b1:3d:a0:24:a8:88:b9:a6: 0e:7f:03:8e:e0:f1:91:e1:2d:7d:a0:de:10:ea:ab:e6:a9:aa: ea:01:34:20:60:28:f4:d7:ce:03:d6:db:16:91:5e:18:d2:15: 80:56:d8:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjUxMjA4MjMwODQ4WhcNMjUxMjE1MjMwODQ4WjAYMRYwFAYD VQQDEw02OTM3NWE4MC1iNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VeFdPSs77aZ9FPUtipX2TJkezI/XxUZyyPp4BkOnj4KnTWPGQe79GLFcI7+ DCAyp/YK82z+K4TRoycs2MS1RLhOSilqJ7HosyuudfMdw5nxMI1OCGaRsVFMsVWL Znf6frf8klWcWXbha0nROHne/NCcJNcvKQqf0MXbo5mrCoT1jELoSP17mPq35uPQ KY4BNOman1OxlsjA7QZgaJv7sF+noOUXm/e9nE5P1ehvYQhuosrzX+1+p70SgEZQ 2SPRjngtRimdYLfXkLa7mtvOuvoWbzTa7sS2Edlz0AkcudQXn7aJc7dPGuDhQELB AHknewy9oteSN8o64dxT731O1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsbN+s7 R//UB2CLK96YIAt/4xVbMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzl5S8g7+MdsUHntI6xjsEkdsgTdAHYo9B2Sym8WBk43IFtwzx0Z1I LCiyUx+scmKED+LjWM6X8yic+85A9kcWJcItRR7usL4bHZWZnEhfM95VBRG36lsC nYcGFr4nmxoVje8eQTSzPvVo9ErrRsFmmUeerbGkWfGHJwZIdd8bTjpBim28ubCR oQjoBEU0duDiow9VYUGNP69U+D9+O74s3vb9qIn95ToNPnDXYfAFS4n4PjkBnPA6 pKuSzgKCdsPTEHGmBcPbCtpsCbT+78B/sT2gJKiIuaYOfwOO4PGR4S19oN4Q6qvm qarqATQgYCj0184D1tsWkV4Y0hWAVtjB -----END CERTIFICATE-----Generated at Wed Dec 10 05:30:20 2025 by rpki-client