This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: 94R6WYdiGEWPuixf1ycFhsXIz+0zr84w5Dw9YM7QnsM= Subject key identifier: CE:9E:05:E5:C5:A2:66:EF:06:28:F9:CD:89:51:E9:83:25:ED:31:84 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 0147 Signing time: Tue 23 Dec 2025 03:24:37 +0000 Manifest this update: Tue 23 Dec 2025 03:24:37 +0000 Manifest next update: Tue 30 Dec 2025 03:24:37 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: gRKI80rIJqAVdtzwzuzaKKQpSr0aVoU56+0niNuabKY=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Dec 23 03:24:37 2025 GMT Not After : Dec 30 03:24:37 2025 GMT Subject: CN=694a0b75-c187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:9e:1d:d9:ef:bd:cd:e2:bd:a2:fa:ed:98: f7:4d:80:11:6d:04:ae:17:b2:34:d4:8c:f8:f0:5a: 8d:5a:d9:9b:6b:39:5a:9b:1b:f6:a5:5a:f0:e2:6e: d1:65:af:46:88:32:13:48:00:02:52:21:25:82:78: d1:72:2f:99:38:00:d1:6a:8a:40:50:dc:47:2c:29: 23:bb:96:df:4b:00:e3:0b:56:a5:4d:bc:5d:f3:39: ec:ed:4a:04:1a:12:28:29:71:75:55:8a:f8:e5:b5: 95:d9:08:ec:e6:50:91:2d:35:23:fd:6e:c5:39:55: 72:28:80:34:82:07:f3:9f:66:a7:fc:cb:4a:33:67: a7:02:97:ac:1a:03:5b:bd:29:43:dd:d1:9d:1b:f4: 56:3e:ed:71:2f:85:be:ab:44:8f:97:d1:f0:d2:e3: 72:3a:dc:ec:93:44:c4:51:29:23:f0:d6:48:2b:cd: 7d:82:56:ef:11:13:57:c6:71:ca:1c:d6:57:9a:43: f8:5a:b3:11:2a:e6:d3:bd:b0:fd:2f:5c:f4:0e:46: 36:df:59:3c:96:76:b1:e6:31:0a:37:37:da:18:76: 54:8f:b0:92:2a:1c:eb:5d:6d:37:39:9c:dd:3b:f8: 1c:06:ab:2f:57:d3:34:15:fb:d3:1a:84:a7:88:dd: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:05:E5:C5:A2:66:EF:06:28:F9:CD:89:51:E9:83:25:ED:31:84 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:45:60:c2:44:25:7d:66:f6:75:eb:83:35:cb:fa:7e:3a:84: 6a:b6:9e:f6:d3:51:94:18:6b:93:ca:4b:93:9b:33:7b:53:d0: f4:0c:55:a6:0f:f9:dc:72:94:35:35:44:5e:1d:5e:e6:29:cc: 46:9c:48:8c:7f:77:76:14:d5:ce:d6:4f:1f:91:85:82:4f:85: b3:e2:14:8c:fe:61:2a:4f:1b:6b:8b:3a:ee:e6:3a:dc:7d:4d: 92:b0:5f:60:c1:34:40:e6:1c:38:2f:d3:99:79:56:93:f0:54: 1f:b5:8e:1e:05:94:9c:a4:4f:ef:3b:fe:18:0e:81:d7:e6:2b: 51:91:94:90:65:32:e0:57:57:2f:98:bf:70:c3:86:1b:e3:64: 96:5d:9a:f6:12:02:1d:79:53:4e:6b:e7:ef:74:1f:50:64:d8: 92:e4:fc:0d:ae:9c:90:b6:c6:da:0a:ba:2a:6c:4a:97:97:11: 4c:6a:a0:b1:2b:26:d8:8d:29:a8:4c:d7:3a:28:84:66:2a:04: f3:b3:1c:ba:38:72:b1:1f:68:f4:aa:3b:c7:b2:ed:99:d3:49: 9f:89:64:94:5a:5f:38:e0:13:c4:d6:63:84:cc:5a:61:e7:ed: 42:72:9a:40:73:59:69:2a:35:a7:38:de:e6:89:a1:f9:6a:e8: ff:b2:d8:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUxMjIzMDMyNDM3WhcNMjUxMjMwMDMyNDM3WjAYMRYwFAYD VQQDDA02OTRhMGI3NS1jMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXSeHdnvvc3ivaL67Zj3TYARbQSuF7I01Iz48FqNWtmbazlamxv2pVrw4m7R Za9GiDITSAACUiElgnjRci+ZOADRaopAUNxHLCkju5bfSwDjC1alTbxd8zns7UoE GhIoKXF1VYr45bWV2Qjs5lCRLTUj/W7FOVVyKIA0ggfzn2an/MtKM2enApesGgNb vSlD3dGdG/RWPu1xL4W+q0SPl9Hw0uNyOtzsk0TEUSkj8NZIK819glbvERNXxnHK HNZXmkP4WrMRKubTvbD9L1z0DkY231k8lnax5jEKNzfaGHZUj7CSKhzrXW03OZzd O/gcBqsvV9M0FfvTGoSniN2eawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6eBeXF ombvBij5zYlR6YMl7TGEMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAORWDCRCV9ZvZ164M1y/p+OoRqtp7201GUGGuTykuTmzN7U9D0DFWm D/nccpQ1NUReHV7mKcxGnEiMf3d2FNXO1k8fkYWCT4Wz4hSM/mEqTxtrizru5jrc fU2SsF9gwTRA5hw4L9OZeVaT8FQftY4eBZScpE/vO/4YDoHX5itRkZSQZTLgV1cv mL9ww4Yb42SWXZr2EgIdeVNOa+fvdB9QZNiS5PwNrpyQtsbaCroqbEqXlxFMaqCx KybYjSmoTNc6KIRmKgTzsxy6OHKxH2j0qjvHsu2Z00mfiWSUWl844BPE1mOEzFph 5+1CcppAc1lpKjWnON7miaH5auj/stjZ -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client