This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: qgqmJR38ZE5KF9HdYP6HcZ9fl3kKwRorrvMj7TfKn18= Subject key identifier: 2A:9A:CC:2E:17:C0:9F:DE:06:B3:EF:FF:3A:17:69:36:87:8A:B6:EB Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 0704 Signing time: Mon 22 Dec 2025 21:09:44 +0000 Manifest this update: Mon 22 Dec 2025 21:09:44 +0000 Manifest next update: Mon 29 Dec 2025 21:09:44 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: ou6j13vdeHwfIGUfp6P3qTWhdXk55MUdMYO+x7kr3jQ=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Dec 22 21:09:44 2025 GMT Not After : Dec 29 21:09:44 2025 GMT Subject: CN=6949b398-0cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:bc:d5:1e:eb:97:33:f6:88:e7:bc:dd:eb: 01:bb:af:a8:0e:27:3e:38:dd:e4:12:0e:a4:c3:67: 14:0c:c1:9c:d0:1d:e7:bd:71:97:50:6e:ba:8f:99: 01:b2:3c:70:dd:86:c4:6e:6f:57:31:c2:e4:45:d2: 23:03:7a:57:48:2e:0e:b4:1f:cf:b4:40:57:ee:79: ec:68:65:c0:6c:9b:81:fd:c4:05:79:13:51:6f:43: 23:79:22:80:e3:1b:ca:63:7f:f6:8d:37:9c:9d:c7: 7b:d2:56:89:26:a1:90:92:a2:3b:74:e2:dc:59:04: d6:a6:c1:0c:10:57:16:b9:57:29:13:23:82:a5:04: 5c:f8:80:d4:c1:ad:6c:19:83:3a:49:3d:56:45:04: 25:f9:6d:af:b2:ff:ac:94:2c:b8:f8:3b:02:e5:18: 93:3c:67:25:b4:fb:1e:05:e9:63:1e:84:1d:54:21: 1d:17:7c:57:ff:71:92:84:91:f7:f3:14:eb:8f:71: 6a:a5:50:80:9e:92:61:06:4f:13:87:de:9a:0c:90: 1f:a3:55:8f:8b:1f:ea:17:39:f0:76:e5:2c:3a:89: 35:b1:92:aa:ba:7a:73:9f:85:63:47:8a:a8:18:70: c8:f0:73:e5:46:1b:50:ec:f2:f6:1e:f9:ad:8f:8b: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:CC:2E:17:C0:9F:DE:06:B3:EF:FF:3A:17:69:36:87:8A:B6:EB X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:32:74:e3:b2:f8:30:78:2f:96:06:87:38:4f:5c:91:ae:7a: 0c:35:d8:93:56:4d:2b:08:ce:ec:e0:30:81:9b:60:7c:a7:7e: a4:16:a8:ab:a8:6e:6d:70:9b:9b:1d:8c:c9:de:bd:2a:81:16: 46:7b:9b:a2:6e:60:84:a2:38:4c:d1:c3:70:eb:ef:1e:d3:db: 21:41:a1:42:60:7c:e2:ae:ba:8d:6e:65:df:5c:8d:a0:90:0c: 6a:72:24:94:33:4c:5c:59:e6:1f:bc:51:4c:f4:e5:4b:51:45: 6a:cc:c1:f2:a2:e6:45:ec:da:1e:a2:c2:51:7e:fe:be:3b:e1: e9:9f:66:cc:eb:af:b3:d7:95:da:f5:7f:e1:c1:33:b2:9a:48: 05:ae:fd:bd:fc:73:a2:f2:05:66:0e:0e:6f:82:2b:82:b4:9f: cd:1e:be:95:bc:77:a2:48:44:5e:89:4b:c7:b4:f1:c4:08:41: 7a:dd:93:29:f0:0e:64:e7:fc:4c:92:06:b4:45:03:32:66:a0: bb:da:c0:69:dd:5e:85:df:af:dd:16:38:f8:a7:70:96:a4:4a: d7:58:2e:76:c7:f5:52:29:cd:fa:14:7f:87:3a:b4:6c:e4:7e: 0a:c7:c4:bc:1e:81:27:c1:b5:8f:d6:4c:1b:01:39:2d:a3:07: e7:5c:37:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUxMjIyMjEwOTQ0WhcNMjUxMjI5MjEwOTQ0WjAYMRYwFAYD VQQDDA02OTQ5YjM5OC0wY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurq81R7rlzP2iOe83esBu6+oDic+ON3kEg6kw2cUDMGc0B3nvXGXUG66j5kB sjxw3YbEbm9XMcLkRdIjA3pXSC4OtB/PtEBX7nnsaGXAbJuB/cQFeRNRb0MjeSKA 4xvKY3/2jTecncd70laJJqGQkqI7dOLcWQTWpsEMEFcWuVcpEyOCpQRc+IDUwa1s GYM6ST1WRQQl+W2vsv+slCy4+DsC5RiTPGcltPseBeljHoQdVCEdF3xX/3GShJH3 8xTrj3FqpVCAnpJhBk8Th96aDJAfo1WPix/qFznwduUsOok1sZKqunpzn4VjR4qo GHDI8HPlRhtQ7PL2Hvmtj4tAbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqazC4X wJ/eBrPv/zoXaTaHirbrMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7MnTjsvgweC+WBoc4T1yRrnoMNdiTVk0rCM7s4DCBm2B8p36kFqir qG5tcJubHYzJ3r0qgRZGe5uibmCEojhM0cNw6+8e09shQaFCYHzirrqNbmXfXI2g kAxqciSUM0xcWeYfvFFM9OVLUUVqzMHyouZF7NoeosJRfv6+O+Hpn2bM66+z15Xa 9X/hwTOymkgFrv29/HOi8gVmDg5vgiuCtJ/NHr6VvHeiSEReiUvHtPHECEF63ZMp 8A5k5/xMkga0RQMyZqC72sBp3V6F36/dFjj4p3CWpErXWC52x/VSKc36FH+HOrRs 5H4Kx8S8HoEnwbWP1kwbATktowfnXDei -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:00 2025 by rpki-client