This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: tymdQ43dBdyp7yjw7ryvLCzRv/n4Rgv37FF4lqJBU78= Subject key identifier: B8:EB:F2:4A:ED:65:46:0F:D8:08:52:11:4A:12:CB:72:86:20:5E:B1 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 154A Signing time: Mon 22 Dec 2025 18:00:32 +0000 Manifest this update: Mon 22 Dec 2025 18:00:32 +0000 Manifest next update: Mon 29 Dec 2025 18:00:32 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: a15RepzVVHX+wpjDA48vf92R8YrOjvOp7jjcsRyHFR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Dec 22 18:00:32 2025 GMT Not After : Dec 29 18:00:32 2025 GMT Subject: CN=69498740-73b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:f7:bb:6f:05:7d:71:38:b3:8c:5c:08:fd: ae:d9:39:23:52:87:2a:6f:a2:36:27:b2:d3:a5:27: 3f:67:ca:98:27:95:5f:70:81:39:28:ef:2a:b6:a4: a5:8f:e7:78:2a:eb:e8:0f:bd:6a:26:3e:14:7d:9b: 29:36:72:7c:ee:a7:28:65:ad:1e:5c:6c:84:59:1a: 6a:f3:1e:b2:b5:88:9e:e3:39:12:ca:24:4f:86:7f: 6a:c0:4d:5d:75:2e:29:54:97:dd:4c:fb:74:ac:e1: 5a:a6:78:8a:ea:07:ed:fd:fb:67:d6:90:f2:66:1e: 72:1b:94:1b:26:18:61:01:cd:02:36:2b:d1:21:20: 6b:a4:df:40:56:3d:ca:cc:13:7e:13:9f:31:f0:35: f9:7c:f9:a1:64:7c:64:a3:73:71:2d:74:05:2e:e9: 46:aa:ef:ac:94:47:9d:7c:f8:fe:c4:bf:46:c5:d1: 50:17:f6:07:6a:6b:ec:3f:15:99:f7:ea:b0:8c:40: 65:fb:51:f1:af:35:d3:c1:02:95:92:af:d7:3f:f2: 04:19:23:21:4a:0c:82:42:5d:31:6e:23:c3:4c:3e: 3b:93:d3:b4:22:b7:5a:f1:6d:9a:c9:0c:ef:14:f2: 51:f8:ab:9d:8d:ef:67:cc:43:c3:39:61:f9:59:3d: b9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:F2:4A:ED:65:46:0F:D8:08:52:11:4A:12:CB:72:86:20:5E:B1 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:da:a9:ec:49:bb:98:25:17:6f:47:0b:17:2f:31:ef:bb:8f: ab:81:89:d7:e5:df:f0:8f:81:5c:4c:6e:a3:a2:38:28:86:4c: b9:66:b1:2f:f3:25:3a:cf:5d:03:ef:71:b9:fd:22:ba:9d:0b: 4e:5c:b9:10:e2:23:03:c2:ca:84:b7:f2:6d:9f:56:27:dd:80: 90:07:18:7c:1f:e7:00:79:4d:57:ef:26:58:a1:4d:ee:e6:a2: 9c:92:92:c0:4a:f8:3d:d5:5f:24:91:58:79:4b:a9:4d:c1:bb: ac:75:38:87:1a:4d:c6:7e:ce:23:12:d0:8e:0d:a7:01:80:9d: 58:0b:cb:e1:5d:3a:1c:d8:8b:9f:a6:ab:21:04:9e:95:39:9c: af:93:72:41:88:81:bb:f1:6f:36:12:71:02:59:82:14:cc:f2: f4:d5:db:75:36:9d:c8:00:d4:83:fc:42:3e:0e:36:ce:59:b9: 7f:c5:fd:35:95:46:fd:1c:ed:cf:25:ca:ca:bf:c2:c1:92:29: 43:49:46:02:97:69:5c:b7:70:37:9b:40:06:26:10:30:49:49: 0f:80:fe:7f:75:4e:d1:eb:63:a1:bb:75:a4:7f:55:f3:21:13: d5:ee:ab:db:6c:85:18:21:10:7d:78:f8:25:54:d9:1c:a4:19: b2:95:b6:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUxMjIyMTgwMDMyWhcNMjUxMjI5MTgwMDMyWjAYMRYwFAYD VQQDDA02OTQ5ODc0MC03M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFT3u28FfXE4s4xcCP2u2TkjUocqb6I2J7LTpSc/Z8qYJ5VfcIE5KO8qtqSl j+d4KuvoD71qJj4UfZspNnJ87qcoZa0eXGyEWRpq8x6ytYie4zkSyiRPhn9qwE1d dS4pVJfdTPt0rOFapniK6gft/ftn1pDyZh5yG5QbJhhhAc0CNivRISBrpN9AVj3K zBN+E58x8DX5fPmhZHxko3NxLXQFLulGqu+slEedfPj+xL9GxdFQF/YHamvsPxWZ 9+qwjEBl+1HxrzXTwQKVkq/XP/IEGSMhSgyCQl0xbiPDTD47k9O0Irda8W2ayQzv FPJR+Kudje9nzEPDOWH5WT25LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjr8krt ZUYP2AhSEUoSy3KGIF6xMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/2qnsSbuYJRdvRwsXLzHvu4+rgYnX5d/wj4FcTG6jojgohky5ZrEv 8yU6z10D73G5/SK6nQtOXLkQ4iMDwsqEt/Jtn1Yn3YCQBxh8H+cAeU1X7yZYoU3u 5qKckpLASvg91V8kkVh5S6lNwbusdTiHGk3Gfs4jEtCODacBgJ1YC8vhXToc2Iuf pqshBJ6VOZyvk3JBiIG78W82EnECWYIUzPL01dt1Np3IANSD/EI+DjbOWbl/xf01 lUb9HO3PJcrKv8LBkilDSUYCl2lct3A3m0AGJhAwSUkPgP5/dU7R62Ohu3Wkf1Xz IRPV7qvbbIUYIRB9ePglVNkcpBmylbYi -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:34 2025 by rpki-client