This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: 3JYo/xfesIUSRnwuKWc8BxI301TaTwTL/k2KUnaDM9k= Subject key identifier: 0F:CA:97:97:61:C9:E1:87:BE:73:48:50:4A:7A:15:E1:69:4F:BC:7E Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 66 Signing time: Sun 07 Dec 2025 05:04:26 +0000 Manifest this update: Sun 07 Dec 2025 05:04:24 +0000 Manifest next update: Sun 14 Dec 2025 05:04:24 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: LgTrAZoRnVpe2AUXfgtNro10UjWWum8nakoEuPQLmsw=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Dec 7 05:04:24 2025 GMT Not After : Dec 14 05:04:24 2025 GMT Subject: CN=69350ad9-0bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:bb:d5:8a:70:6c:eb:fa:d1:b8:2f:f7:e3: d8:03:8e:4b:da:42:7d:a1:ac:e9:fc:1f:d9:68:5e: 08:13:b2:f4:6d:5a:a2:46:3b:a8:ce:61:ab:fb:af: 97:e8:e9:0e:37:da:06:94:8d:fa:2d:76:44:52:8c: a4:5f:22:b2:88:dc:3a:86:89:a4:eb:a9:e7:99:ec: 5c:da:22:ad:80:98:63:56:ec:7b:fc:6a:cb:9c:1e: 2e:d5:77:97:2f:48:c8:e4:eb:e3:ac:ba:91:5f:ee: ae:4b:e4:5e:1f:8c:1b:83:f9:fa:b0:65:d3:b7:fc: a9:35:7e:76:aa:3e:d4:a1:e2:39:90:34:38:e5:fe: 39:06:da:53:ae:0c:a5:0d:f9:78:58:25:09:e8:9a: df:58:20:d1:cc:b8:a9:b3:3d:c1:c7:ca:41:6d:9d: 22:2d:d1:f9:35:7f:fe:fe:dc:b9:2c:70:e2:60:d1: af:79:54:1a:72:de:8e:63:3b:f2:a1:95:3e:56:39: ef:79:7e:37:22:96:c3:02:29:0f:92:89:37:dc:6f: 14:ae:f1:a0:69:ce:e4:a1:44:84:e4:d3:bb:3c:b4: a9:00:ad:39:68:d7:7d:d8:73:b7:69:0d:5d:c9:14: 8c:af:d1:98:ef:e7:9d:79:44:60:61:7d:b0:29:b2: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:97:97:61:C9:E1:87:BE:73:48:50:4A:7A:15:E1:69:4F:BC:7E X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b0:c0:0d:1c:c2:a4:7d:d9:ee:f3:f7:bf:fd:de:24:2c:27: 52:e0:12:24:c2:2c:14:84:b6:99:55:96:e0:e0:4a:aa:bc:76: ee:b8:88:a1:96:de:0e:f3:9e:fc:ef:47:af:b0:2e:73:a1:bd: f6:ca:ce:5f:7a:f0:0a:ca:8d:41:1a:8a:07:22:90:95:8c:5d: f4:61:45:3c:69:0e:1c:d5:48:a3:3c:71:5c:6b:34:38:c5:46: 2d:3b:91:f6:c4:a8:41:8e:c8:0a:01:31:12:27:ce:ac:e1:62: d8:0c:2d:42:30:e6:92:69:16:01:59:8a:15:bd:5e:4a:06:2b: cc:97:79:cc:d2:7d:eb:22:77:fb:c2:76:d6:5c:44:de:c6:ca: 23:07:46:f4:45:bd:98:88:f0:31:51:38:0b:8b:4c:5c:ed:57: 54:11:78:c3:b7:86:6a:a9:bc:b8:f9:48:4a:1f:18:52:64:11: c5:3f:6d:71:77:e8:6b:6b:af:29:4b:68:ec:fd:be:43:bd:f7: 11:40:72:69:8e:ae:cf:8f:db:5b:fa:1f:ff:68:29:e6:21:c2: 33:99:1f:5a:ea:64:0e:16:e2:b4:87:d0:0c:bc:04:65:4b:96: 25:b0:90:9a:2e:16:5f:85:ec:d3:05:2e:6a:97:65:24:3e:65: 46:25:00:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDkxNjExMC8GA1UEBRMoNkZDMjJEMzBGMzE5Q0Q2NURCNUUzRjZGRkM1RDE0MUNE MDE2Njg4MjAeFw0yNTEyMDcwNTA0MjRaFw0yNTEyMTQwNTA0MjRaMBgxFjAUBgNV BAMTDTY5MzUwYWQ5LTBiZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCns7vVinBs6/rRuC/349gDjkvaQn2hrOn8H9loXggTsvRtWqJGO6jOYav7r5fo 6Q432gaUjfotdkRSjKRfIrKI3DqGiaTrqeeZ7FzaIq2AmGNW7Hv8asucHi7Vd5cv SMjk6+OsupFf7q5L5F4fjBuD+fqwZdO3/Kk1fnaqPtSh4jmQNDjl/jkG2lOuDKUN +XhYJQnomt9YINHMuKmzPcHHykFtnSIt0fk1f/7+3LkscOJg0a95VBpy3o5jO/Kh lT5WOe95fjcilsMCKQ+SiTfcbxSu8aBpzuShRITk07s8tKkArTlo133Yc7dpDV3J FIyv0Zjv5515RGBhfbApspopAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD8qXl2HJ 4Ye+c0hQSnoV4WlPvH4wHwYDVR0jBBgwFoAUb8ItMPMZzWXbXj9v/F0UHNAWaIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwOTE2LzA0MEI4N0JBMzY0 QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhJdE1QTVp6V1hiWGo5dl9GMFVITkFXYUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw OTE2LzA0MEI4N0JBMzY0QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldY YlhqOXZfRjBVSE5BV2FJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEewwA0cwqR92e7z97/93iQsJ1LgEiTCLBSEtplVluDgSqq8du64iKGW 3g7znvzvR6+wLnOhvfbKzl968ArKjUEaigcikJWMXfRhRTxpDhzVSKM8cVxrNDjF Ri07kfbEqEGOyAoBMRInzqzhYtgMLUIw5pJpFgFZihW9XkoGK8yXeczSfesid/vC dtZcRN7GyiMHRvRFvZiI8DFROAuLTFztV1QReMO3hmqpvLj5SEofGFJkEcU/bXF3 6GtrrylLaOz9vkO99xFAcmmOrs+P21v6H/9oKeYhwjOZH1rqZA4W4rSH0Ay8BGVL liWwkJouFl+F7NMFLmqXZSQ+ZUYlACs= -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:59 2025 by rpki-client