This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft File: 8GBCLBdcmuWu18weKBDySX-NlZo.mft (raw, json) Hash identifier: GDXGfb1r2kyypMEIYmg31MKUDgyW0izvYAYeps6lx9s= Subject key identifier: 59:22:58:51:2F:C3:61:1B:32:A9:EA:E0:D0:26:64:FC:FF:24:8C:C3 Authority key identifier: F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A Certificate issuer: /CN=A91491CC/serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft Manifest number: 27 Signing time: Sun 07 Dec 2025 05:41:54 +0000 Manifest this update: Sun 07 Dec 2025 05:41:53 +0000 Manifest next update: Sun 14 Dec 2025 05:41:53 +0000 Files and hashes: 1: 8GBCLBdcmuWu18weKBDySX-NlZo.crl (hash: 8DmY1ypSg42VnNW869pFDdPHlUr3a0mu77yyTQyaFHQ=) 2: 3283B8BE9A0F11F0BC057E7DC4F9AE02.roa (hash: 5nJEi+gK08dqnKCqeNdYXt9YEVy/CsaGnAGB6m4ykBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A Validity Not Before: Dec 7 05:41:53 2025 GMT Not After : Dec 14 05:41:53 2025 GMT Subject: CN=693513a2-d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:52:69:a8:15:a2:d4:c7:48:17:ad:1f:03: a2:ce:27:dd:63:d6:ff:8d:19:a9:41:3c:fd:69:96: a6:7a:01:05:6f:16:5a:a3:53:51:a9:65:40:99:d0: f1:b0:d1:f7:79:04:2c:c9:fb:76:d9:22:7f:de:f1: 4b:e3:6c:de:3f:6f:aa:b9:18:64:93:4c:63:1d:e2: af:16:2d:b4:de:b1:ba:ab:d3:f1:90:b5:2d:22:53: 1b:ce:7f:93:34:73:08:3a:30:95:a2:4f:f1:2b:98: 11:a5:7e:6d:7e:cf:b3:53:04:9a:c2:50:06:ef:90: bc:3e:51:24:ef:8c:16:b3:b8:96:bc:d0:90:af:ab: 10:1b:be:0e:b0:b4:91:ad:21:3b:de:dd:1d:77:6f: b9:f1:e9:37:19:33:fe:72:67:94:5b:5e:a3:dc:d1: 99:a2:e5:a3:1d:9b:a9:b4:0e:bc:c4:fe:84:af:b6: dc:c1:fa:2d:4c:40:a6:b6:7c:14:2a:04:4a:bd:13: 16:9d:05:49:a7:90:af:49:96:89:82:d2:0f:52:71: a9:7f:8f:22:d9:39:82:19:a3:46:5b:de:90:29:04: fb:c6:0e:39:c3:26:8f:36:4e:d3:00:59:bb:8e:be: 69:c6:ac:de:e5:c2:07:5c:ba:7b:31:fb:16:03:0a: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:58:51:2F:C3:61:1B:32:A9:EA:E0:D0:26:64:FC:FF:24:8C:C3 X509v3 Authority Key Identifier: keyid:F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:83:ca:d8:3d:be:0f:5d:9d:35:ba:d9:31:a8:2c:59:38:18: e8:aa:ad:1e:98:ac:fa:a0:8a:54:b5:96:a2:7a:42:c2:a8:8f: 17:22:c9:4c:83:75:fd:7c:1d:32:0a:64:e6:ee:1f:4b:62:e2: a1:fc:05:db:9d:e9:fd:4b:99:c5:d7:c0:76:0e:f6:5e:9f:70: fe:16:2b:ad:b0:82:99:45:09:57:74:bd:fd:6d:4f:7f:e0:58: c1:1d:c4:30:b5:5f:78:aa:a2:06:99:04:fa:d1:00:78:fc:cb: f8:c8:12:b3:e0:26:90:dd:5e:3e:9e:77:10:cb:5c:87:6f:47: 9b:bf:09:70:3a:0e:91:38:7e:bf:a2:f8:80:2f:34:bf:a6:1b: 30:6c:de:e5:03:f2:f9:bd:d5:6d:8a:2f:50:e0:bc:75:01:72: 6c:fc:89:0c:62:dc:d9:49:4e:38:91:1a:b1:8d:a3:ab:a4:1e: 58:46:c0:e7:ee:97:dc:32:49:0d:5e:5b:16:98:1b:67:2b:27: 0e:23:8c:fb:26:4d:86:43:dc:a3:1b:e8:27:0f:e6:00:66:73: 1c:33:ec:1b:45:6a:77:5e:e6:6a:b5:49:26:45:ed:14:c2:17: fe:d6:69:75:b0:ee:79:bf:cc:f3:df:15:00:a6:de:2d:0d:58: fe:91:3a:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTFDQzExMC8GA1UEBRMoRjA2MDQyMkMxNzVDOUFFNUFFRDdDQzFFMjgxMEYyNDk3 RjhEOTU5QTAeFw0yNTEyMDcwNTQxNTNaFw0yNTEyMTQwNTQxNTNaMBgxFjAUBgNV BAMTDTY5MzUxM2EyLWQ3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6gFJpqBWi1MdIF60fA6LOJ91j1v+NGalBPP1plqZ6AQVvFlqjU1GpZUCZ0PGw 0fd5BCzJ+3bZIn/e8UvjbN4/b6q5GGSTTGMd4q8WLbTesbqr0/GQtS0iUxvOf5M0 cwg6MJWiT/ErmBGlfm1+z7NTBJrCUAbvkLw+USTvjBazuJa80JCvqxAbvg6wtJGt ITve3R13b7nx6TcZM/5yZ5RbXqPc0Zmi5aMdm6m0DrzE/oSvttzB+i1MQKa2fBQq BEq9ExadBUmnkK9JlomC0g9Scal/jyLZOYIZo0Zb3pApBPvGDjnDJo82TtMAWbuO vmnGrN7lwgdcunsx+xYDCmFDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWSJYUS/D YRsyqerg0CZk/P8kjMMwHwYDVR0jBBgwFoAU8GBCLBdcmuWu18weKBDySX+NlZow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDL0E2RTIzQjc4OUEw RTExRjA4OUM4OEI3Q0M0RjlBRTAyLzhHQkNMQmRjbXVXdTE4d2VLQkR5U1gtTmxa by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEdCQ0xCZGNtdVd1MTh3ZUtCRHlTWC1ObFpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MUNDL0E2RTIzQjc4OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyLzhHQkNMQmRjbXVX dTE4d2VLQkR5U1gtTmxaby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2Dytg9vg9dnTW62TGoLFk4GOiqrR6YrPqgilS1lqJ6QsKojxciyUyD df18HTIKZObuH0ti4qH8Bdud6f1LmcXXwHYO9l6fcP4WK62wgplFCVd0vf1tT3/g WMEdxDC1X3iqogaZBPrRAHj8y/jIErPgJpDdXj6edxDLXIdvR5u/CXA6DpE4fr+i +IAvNL+mGzBs3uUD8vm91W2KL1DgvHUBcmz8iQxi3NlJTjiRGrGNo6ukHlhGwOfu l9wySQ1eWxaYG2crJw4jjPsmTYZD3KMb6CcP5gBmcxwz7BtFande5mq1SSZF7RTC F/7WaXWw7nm/zPPfFQCm3i0NWP6ROhs= -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:48 2025 by rpki-client