This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: V2+SfUyR31+XmyOHAOOlNP7TgFkC1Fhe0NGaHKJdvCs= Subject key identifier: 6F:9C:B7:64:49:D5:5D:29:B9:B8:CA:35:DC:24:3C:ED:64:AE:E0:3A Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3503 Signing time: Tue 16 Dec 2025 14:18:45 +0000 Manifest this update: Tue 16 Dec 2025 14:18:44 +0000 Manifest next update: Tue 23 Dec 2025 14:18:44 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: ABJmoHif5HWfOc6Zvh8hO+E+ELtcnG9kF7Z/odQULU4=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) 5: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13671 (0x3567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Dec 16 14:18:44 2025 GMT Not After : Dec 23 14:18:44 2025 GMT Subject: CN=69416a44-22c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:c7:72:02:c8:64:9c:97:b3:79:39:20:e0: 41:67:ea:20:51:b1:e9:91:2c:d3:ef:40:a8:ea:02: bc:7a:2a:ae:47:db:6d:fe:da:fb:3a:a4:05:8e:02: 83:61:38:b4:64:ce:8f:61:40:2f:cb:53:bc:cc:00: d2:77:3b:46:a2:8c:cd:2f:23:a9:f8:cc:9c:74:91: 8a:6d:db:46:ae:73:21:97:f0:56:8f:9e:75:22:e5: ca:cf:8e:da:99:f8:c5:10:48:27:15:9a:54:f0:bc: 9b:59:ce:5b:a9:84:70:11:9c:43:c4:75:86:2b:4b: d6:e1:5c:89:66:e7:7b:1f:55:4e:86:6b:8e:cd:7b: 41:75:2b:b1:8b:34:91:76:88:77:8b:cd:24:df:3e: 22:97:3a:76:49:90:b7:01:f2:01:0c:dc:1e:29:51: 6b:5b:c2:0d:fa:b5:81:70:c0:9a:05:5c:4c:6f:63: fa:99:59:82:a0:95:36:f6:df:27:17:9e:db:e6:f9: 7f:42:b6:fe:ed:55:64:fc:4e:ce:35:08:d9:b3:66: ce:da:09:9f:f6:80:d0:ec:93:5c:cb:68:29:8b:ef: 80:e3:ca:56:37:4c:ff:6a:a0:0a:50:96:ae:1d:58: 4a:f5:e2:79:7e:c3:75:41:d2:ed:f2:2b:25:a1:46: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9C:B7:64:49:D5:5D:29:B9:B8:CA:35:DC:24:3C:ED:64:AE:E0:3A X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8b:ed:e8:80:d5:5f:af:a4:a6:97:99:e1:93:ba:28:72:1a: e2:1d:d1:f7:5c:62:18:94:1c:8f:a3:49:e7:5b:58:fe:10:ae: 4d:42:a1:d1:94:07:0c:c2:28:35:d1:b4:31:77:58:be:15:1c: 3c:ca:eb:91:b3:07:ff:c1:ee:6b:d3:4a:d9:04:3a:94:e5:e0: af:9d:0e:f9:e0:bd:43:33:ac:51:5f:1d:48:fa:36:1d:46:28: 50:cc:37:a0:13:db:60:b8:6f:ad:8c:65:28:8a:d7:8b:58:cc: be:c0:f1:e2:37:98:68:3b:bb:26:55:10:8b:62:f6:a9:69:0c: e9:97:b7:32:9d:33:7d:4e:b1:7f:34:38:19:94:26:e2:ae:9a: db:84:aa:de:cc:14:4d:d3:98:d2:b3:b4:98:3f:0f:31:d3:8f: 59:74:ce:01:ba:e6:77:01:e8:ba:d4:98:9f:00:95:4a:6f:7c: 1e:31:b9:8f:c2:fa:e2:1e:1a:1b:bb:4d:8b:0c:15:31:67:9d: 6b:26:d6:f5:5d:cd:40:9f:ba:5c:d3:be:90:80:19:13:3d:da: ce:b9:b2:15:b2:73:69:48:d7:6b:91:5d:ec:bf:b2:ba:c7:59: aa:6d:ca:5c:1a:f2:76:c6:ca:c7:f8:67:7f:af:33:18:31:3d: 74:71:65:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUxMjE2MTQxODQ0WhcNMjUxMjIzMTQxODQ0WjAYMRYwFAYD VQQDDA02OTQxNmE0NC0yMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1prHcgLIZJyXs3k5IOBBZ+ogUbHpkSzT70Co6gK8eiquR9tt/tr7OqQFjgKD YTi0ZM6PYUAvy1O8zADSdztGoozNLyOp+MycdJGKbdtGrnMhl/BWj551IuXKz47a mfjFEEgnFZpU8LybWc5bqYRwEZxDxHWGK0vW4VyJZud7H1VOhmuOzXtBdSuxizSR doh3i80k3z4ilzp2SZC3AfIBDNweKVFrW8IN+rWBcMCaBVxMb2P6mVmCoJU29t8n F57b5vl/Qrb+7VVk/E7ONQjZs2bO2gmf9oDQ7JNcy2gpi++A48pWN0z/aqAKUJau HVhK9eJ5fsN1QdLt8isloUZPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+ct2RJ 1V0pubjKNdwkPO1kruA6MB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBii+3ogNVfr6Sml5nhk7oochriHdH3XGIYlByPo0nnW1j+EK5NQqHR lAcMwig10bQxd1i+FRw8yuuRswf/we5r00rZBDqU5eCvnQ754L1DM6xRXx1I+jYd RihQzDegE9tguG+tjGUoiteLWMy+wPHiN5hoO7smVRCLYvapaQzpl7cynTN9TrF/ NDgZlCbirprbhKrezBRN05jSs7SYPw8x049ZdM4BuuZ3Aei61JifAJVKb3weMbmP wvriHhobu02LDBUxZ51rJtb1Xc1An7pc076QgBkTPdrOubIVsnNpSNdrkV3sv7K6 x1mqbcpcGvJ2xsrH+Gd/rzMYMT10cWUs -----END CERTIFICATE-----Generated at Thu Dec 18 07:01:58 2025 by rpki-client