This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: GPTIlUY+vx+txL+6EBC8ftnPzPfwZ1201hgD87JmE1Y= Subject key identifier: 3A:4D:9F:B6:1F:D2:50:EF:4E:D1:35:B9:BE:37:17:B1:F8:DD:68:2F Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 01D8 Signing time: Tue 23 Dec 2025 01:48:14 +0000 Manifest this update: Tue 23 Dec 2025 01:48:13 +0000 Manifest next update: Tue 30 Dec 2025 01:48:13 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: EchmEm4jsjLQVVFPWDC9sOutdxhkc8ez7gM5TBz5Zpg=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Dec 23 01:48:13 2025 GMT Not After : Dec 30 01:48:13 2025 GMT Subject: CN=6949f4dd-cce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:85:4e:05:90:95:93:18:22:04:c8:82:40: f8:ea:e9:ec:eb:9e:73:2c:6b:89:ec:07:2b:44:e0: 21:0f:dc:a4:04:a7:f1:d3:55:01:ff:84:42:ab:d8: b6:47:29:2a:0a:d8:80:51:2f:ff:dd:0e:73:29:4d: c8:8f:ae:94:5c:ce:8f:4e:59:d2:a7:c5:2c:95:b7: 3c:24:7e:e2:9c:fe:b5:28:af:c6:a8:5a:d3:ec:a2: 55:33:1f:1d:ad:44:93:fc:01:4e:bf:ca:66:a3:30: 72:ff:13:1d:35:e4:8e:0e:fd:ec:32:61:24:89:aa: e1:18:78:c7:09:b6:62:a8:f8:82:1d:20:da:94:6e: 6e:31:8d:4a:44:e6:c5:26:c7:d7:18:c9:0a:94:d0: e9:f9:8e:27:e0:dc:df:e0:8d:ed:b7:d7:2b:4b:b1: d4:ab:f3:12:7a:08:e9:7a:25:d7:73:08:64:71:fc: 04:e0:e3:0c:45:78:e9:3d:a9:5a:ab:59:28:86:7d: 72:5e:93:8e:ba:a5:58:18:52:6f:73:51:5d:95:d4: 0e:0f:be:05:c4:8a:22:9c:23:fa:eb:7b:e7:9d:62: 86:17:e6:46:bd:63:a9:8a:9c:ff:a3:ac:8e:0d:ff: 6c:c4:c1:eb:1f:98:f2:5c:55:fc:f8:c8:91:6e:de: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4D:9F:B6:1F:D2:50:EF:4E:D1:35:B9:BE:37:17:B1:F8:DD:68:2F X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:8f:8b:2b:2a:9a:4b:c0:f2:de:16:7a:cf:42:36:c4:b3:91: af:4b:08:d2:0c:05:9a:d5:b8:54:94:34:80:e2:54:de:a5:fb: d1:5e:c6:db:98:45:ac:32:e3:3c:a5:89:f8:80:ce:dc:20:4f: fe:11:ec:0b:aa:49:42:73:09:0e:54:38:72:d8:de:fb:1d:78: d5:46:72:d5:a8:2b:7b:77:79:b7:d0:92:13:6f:5e:d7:60:41: b4:e3:10:45:28:bc:b1:be:cf:e6:2b:94:41:de:95:f5:02:9d: a5:f4:71:5f:4c:ae:62:c0:92:27:16:57:0d:06:43:4b:e4:50: 9d:f2:19:e3:73:fc:c5:c1:c6:7c:0c:d9:1d:02:6e:4d:09:db: 07:08:e7:04:e1:24:fb:b0:6d:04:f7:27:03:e9:51:a6:2b:28: 12:8f:e5:97:be:d1:fb:a5:27:d6:02:a2:a1:0f:95:c2:bb:0e: 05:d1:b5:c3:23:45:cc:27:80:1f:a5:cf:03:b5:b9:95:59:e8: ad:d8:f0:32:ef:38:7e:39:7b:10:bb:78:4c:38:e8:a9:a9:c5: 5b:46:c2:cd:b7:17:cb:79:9f:d4:1d:79:44:34:1b:a6:8c:bd: b0:07:3d:d8:5e:96:2e:70:f9:71:01:72:9c:e5:ad:42:c0:e1: 42:86:4c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUxMjIzMDE0ODEzWhcNMjUxMjMwMDE0ODEzWjAYMRYwFAYD VQQDDA02OTQ5ZjRkZC1jY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxICFTgWQlZMYIgTIgkD46uns655zLGuJ7AcrROAhD9ykBKfx01UB/4RCq9i2 RykqCtiAUS//3Q5zKU3Ij66UXM6PTlnSp8Uslbc8JH7inP61KK/GqFrT7KJVMx8d rUST/AFOv8pmozBy/xMdNeSODv3sMmEkiarhGHjHCbZiqPiCHSDalG5uMY1KRObF JsfXGMkKlNDp+Y4n4Nzf4I3tt9crS7HUq/MSegjpeiXXcwhkcfwE4OMMRXjpPala q1kohn1yXpOOuqVYGFJvc1FdldQOD74FxIoinCP663vnnWKGF+ZGvWOpipz/o6yO Df9sxMHrH5jyXFX8+MiRbt7hGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpNn7Yf 0lDvTtE1ub43F7H43WgvMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvj4srKppLwPLeFnrPQjbEs5GvSwjSDAWa1bhUlDSA4lTepfvRXsbb mEWsMuM8pYn4gM7cIE/+EewLqklCcwkOVDhy2N77HXjVRnLVqCt7d3m30JITb17X YEG04xBFKLyxvs/mK5RB3pX1Ap2l9HFfTK5iwJInFlcNBkNL5FCd8hnjc/zFwcZ8 DNkdAm5NCdsHCOcE4ST7sG0E9ycD6VGmKygSj+WXvtH7pSfWAqKhD5XCuw4F0bXD I0XMJ4Afpc8DtbmVWeit2PAy7zh+OXsQu3hMOOipqcVbRsLNtxfLeZ/UHXlENBum jL2wBz3YXpYucPlxAXKc5a1CwOFChkxM -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:21 2025 by rpki-client