This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: MtYVgU/Jmt4+KCJPTyBbveb+f3BpiP+g24d5SEVSg9A= Subject key identifier: D9:F4:64:F2:6E:F7:1D:F4:AB:F5:8D:FC:0B:D1:AF:D4:4A:56:F6:7E Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: CE Signing time: Tue 23 Dec 2025 04:42:59 +0000 Manifest this update: Tue 23 Dec 2025 04:42:58 +0000 Manifest next update: Tue 30 Dec 2025 04:42:58 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: ixdWRqZxhaG4ztv8rjPeUo/Inavn+5GiWmombjY2jl0=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: Vl4anvJxGj00QWX5m+Dlfx86DkUFERQcopj8hiwYg24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Dec 23 04:42:58 2025 GMT Not After : Dec 30 04:42:58 2025 GMT Subject: CN=694a1dd3-b374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:81:f9:7e:f1:8f:5e:1b:0b:ff:ca:a9:4b: 4d:9a:d7:e5:a0:b7:fb:5e:5c:b2:72:ad:0e:8d:6f: 7c:2f:b7:34:07:89:69:b6:15:7d:fa:f4:cb:82:4c: 91:31:4b:18:08:a8:81:ad:11:ab:21:da:9d:71:a4: df:13:bf:6c:43:01:a9:7e:65:eb:99:4f:cb:22:c4: 9c:82:e5:08:b3:e5:14:ab:dd:e3:27:b1:7f:04:02: 1d:e2:5e:bf:b3:43:2c:bd:3a:63:e0:63:30:69:e1: c3:e4:49:f6:73:f0:63:39:dc:24:ef:5a:01:ae:62: 78:6e:a8:2e:69:34:fc:ed:98:5d:13:45:e3:e8:10: 21:a7:37:68:cc:49:eb:5d:d3:80:a2:9b:ab:2c:f0: e6:99:cd:b7:1c:86:7b:42:3d:44:5b:10:32:57:39: 25:3d:9f:ef:db:8e:d7:d5:92:c5:a3:5b:2f:cb:4c: ab:ea:9b:09:94:58:64:ed:0d:cb:48:24:41:fd:12: ea:9c:da:a0:57:33:96:df:6d:48:e8:ad:7f:3e:30: fa:cc:b2:c6:1b:23:b3:70:ea:ef:26:ca:18:6e:dd: 95:35:21:67:d4:09:27:67:e6:df:bb:e0:98:4f:4a: 44:63:11:0e:67:6f:c2:81:6c:86:09:f7:fd:be:f5: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F4:64:F2:6E:F7:1D:F4:AB:F5:8D:FC:0B:D1:AF:D4:4A:56:F6:7E X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:fa:65:aa:93:48:e7:d2:c6:a5:1f:d5:e0:ba:6e:23:17:bd: 93:02:9a:a6:9f:18:98:6e:c6:ac:02:b2:1b:12:34:26:4a:7f: 53:9d:cb:2c:85:b3:4f:83:db:60:44:5a:8c:c0:cc:02:40:47: 47:4e:d3:6b:98:bd:32:fc:c9:7c:df:a7:05:bd:6f:0c:ed:d2: f3:92:82:dc:a0:a0:cc:80:a0:62:a6:64:e2:48:9a:c5:e0:40: 8e:d0:30:00:8b:a9:d5:17:69:cb:f6:51:48:22:ba:31:38:3b: 85:20:a3:26:40:98:22:cb:a1:e6:09:d9:e3:f8:81:15:7d:4e: 99:01:6f:1d:bd:d7:8a:60:e6:e0:e1:53:94:c8:70:ad:8a:64: 49:fb:8d:d0:e8:84:0a:e7:8b:35:ae:1c:26:a2:e7:d8:5c:99: 78:a2:d3:c3:b3:ce:5b:cc:86:b3:f1:24:b5:78:62:f8:22:17: 19:5d:e0:c7:ba:ab:61:72:f1:6b:f6:33:09:0d:74:27:27:05: 31:ba:e7:5c:e8:e9:b0:f0:fb:3f:51:cb:0c:db:c2:36:8d:73: 93:11:c8:ee:8c:06:18:b9:11:82:30:10:45:44:f7:eb:d1:3e: 9e:cc:42:47:ba:ea:0e:03:7b:aa:2c:76:98:f2:ba:eb:55:80: 35:aa:41:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUxMjIzMDQ0MjU4WhcNMjUxMjMwMDQ0MjU4WjAYMRYwFAYD VQQDDA02OTRhMWRkMy1iMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE6B+X7xj14bC//KqUtNmtfloLf7Xlyycq0OjW98L7c0B4lpthV9+vTLgkyR MUsYCKiBrRGrIdqdcaTfE79sQwGpfmXrmU/LIsScguUIs+UUq93jJ7F/BAId4l6/ s0MsvTpj4GMwaeHD5En2c/BjOdwk71oBrmJ4bqguaTT87ZhdE0Xj6BAhpzdozEnr XdOAopurLPDmmc23HIZ7Qj1EWxAyVzklPZ/v247X1ZLFo1svy0yr6psJlFhk7Q3L SCRB/RLqnNqgVzOW321I6K1/PjD6zLLGGyOzcOrvJsoYbt2VNSFn1AknZ+bfu+CY T0pEYxEOZ2/CgWyGCff9vvXq7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn0ZPJu 9x30q/WN/AvRr9RKVvZ+MB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd+mWqk0jn0salH9Xgum4jF72TApqmnxiYbsasArIbEjQmSn9Tncss hbNPg9tgRFqMwMwCQEdHTtNrmL0y/Ml836cFvW8M7dLzkoLcoKDMgKBipmTiSJrF 4ECO0DAAi6nVF2nL9lFIIroxODuFIKMmQJgiy6HmCdnj+IEVfU6ZAW8dvdeKYObg 4VOUyHCtimRJ+43Q6IQK54s1rhwmoufYXJl4otPDs85bzIaz8SS1eGL4IhcZXeDH uqthcvFr9jMJDXQnJwUxuudc6Omw8Ps/UcsM28I2jXOTEcjujAYYuRGCMBBFRPfr 0T6ezEJHuuoOA3uqLHaY8rrrVYA1qkG4 -----END CERTIFICATE-----Generated at Tue Dec 23 21:52:57 2025 by rpki-client