This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: GSCpVgBoqBm0fjKfZJY24D8ss2tfxzoUAjHr2I/EBKs= Subject key identifier: 33:F8:42:7E:BC:9F:6A:93:8B:74:51:1E:AF:87:C5:93:1D:D3:21:23 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 01E9 Signing time: Tue 23 Dec 2025 01:36:02 +0000 Manifest this update: Tue 23 Dec 2025 01:36:02 +0000 Manifest next update: Tue 30 Dec 2025 01:36:02 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: k5e/siyiH1c8qbHz9iJ7P7rQ3KeULbxSCJInpXbVDy0=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Dec 23 01:36:02 2025 GMT Not After : Dec 30 01:36:02 2025 GMT Subject: CN=6949f202-8e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:08:cc:4f:02:45:ae:2a:67:41:c4:a6:e2: 65:ef:d4:a2:6f:e6:cf:5d:e0:c5:a9:1a:20:dc:43: 30:86:39:42:f4:0a:1f:ae:b9:8d:86:a7:96:6f:c5: 9a:92:f6:9b:9c:3d:ad:01:64:01:87:89:d3:fa:72: 31:57:1d:d2:df:4b:0c:7f:ce:60:e1:48:4e:5f:e3: 89:8a:f2:11:be:6e:5f:d4:46:43:2c:29:6a:47:db: c0:53:62:7a:b1:bb:c4:3b:66:31:e9:ae:28:1c:d8: 75:2f:fa:7f:e6:5d:2c:d6:90:c8:5b:a4:e0:a6:0b: 40:75:53:07:cc:b8:7d:a6:48:5e:2f:f4:b3:25:be: 20:84:ca:e1:c0:4a:da:95:a9:18:64:37:9e:8c:a1: 8b:67:97:02:43:2c:25:0b:11:31:54:af:82:0d:0c: 88:00:44:0f:33:2d:0c:34:a2:28:f3:9a:8e:a6:89: ac:59:38:f9:69:20:03:64:ad:04:3c:53:76:76:1f: 86:6c:99:25:7b:a3:a8:13:a2:b0:41:a0:1f:66:82: a6:ac:fe:1f:70:95:47:1a:4c:f1:80:42:46:4d:c9: d7:24:ad:e6:42:3d:78:f2:1b:9c:ee:6e:2a:5e:6c: d5:f1:9c:03:be:95:5c:a1:68:ba:dc:21:d1:0c:ea: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F8:42:7E:BC:9F:6A:93:8B:74:51:1E:AF:87:C5:93:1D:D3:21:23 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5d:4f:35:b1:f2:59:f0:e2:a5:14:1d:c6:97:11:ac:ea:9a: ae:20:9c:de:c6:a2:b9:2f:31:46:59:7a:4b:c7:f9:96:5d:0c: 55:fc:9f:2e:e8:84:be:a7:a7:bc:93:a0:a8:22:3e:56:5d:88: 23:43:1d:bd:94:30:14:9c:21:c2:ca:71:76:ac:7d:73:30:bc: ef:af:dc:5a:4c:27:37:d6:52:fc:9f:75:e9:86:42:7a:eb:9c: c3:35:12:a9:e3:71:6b:f3:66:a3:3a:bb:77:42:b1:2d:cb:91: 41:bc:0f:2d:80:08:b1:1a:6f:dd:f8:08:3f:f3:01:69:a4:f5: a7:53:5c:db:e2:ac:94:8e:ad:86:68:55:5a:ef:81:45:ba:c4: 5f:0c:ad:2b:d3:d4:6d:25:6f:3e:1b:77:81:1a:cd:dc:46:5b: 3d:40:bc:9e:8d:7f:86:43:5c:57:1e:d0:62:61:60:18:cf:1b: 7c:06:bc:53:d5:87:aa:44:97:f8:c8:ff:77:d0:3c:da:b8:2b: 68:d3:65:a5:12:40:29:b7:13:7b:a5:48:f7:30:42:3b:f7:f7: 9f:df:c7:70:b5:a3:31:43:ba:16:09:db:98:fc:83:ea:cd:ba: e8:01:36:b4:9f:fb:69:99:21:7f:0c:84:aa:39:42:0a:ce:15: 04:56:39:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUxMjIzMDEzNjAyWhcNMjUxMjMwMDEzNjAyWjAYMRYwFAYD VQQDDA02OTQ5ZjIwMi04ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1gIzE8CRa4qZ0HEpuJl79Sib+bPXeDFqRog3EMwhjlC9AofrrmNhqeWb8Wa kvabnD2tAWQBh4nT+nIxVx3S30sMf85g4UhOX+OJivIRvm5f1EZDLClqR9vAU2J6 sbvEO2Yx6a4oHNh1L/p/5l0s1pDIW6TgpgtAdVMHzLh9pkheL/SzJb4ghMrhwEra lakYZDeejKGLZ5cCQywlCxExVK+CDQyIAEQPMy0MNKIo85qOpomsWTj5aSADZK0E PFN2dh+GbJkle6OoE6KwQaAfZoKmrP4fcJVHGkzxgEJGTcnXJK3mQj148huc7m4q XmzV8ZwDvpVcoWi63CHRDOoAmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP4Qn68 n2qTi3RRHq+HxZMd0yEjMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXU81sfJZ8OKlFB3GlxGs6pquIJzexqK5LzFGWXpLx/mWXQxV/J8u 6IS+p6e8k6CoIj5WXYgjQx29lDAUnCHCynF2rH1zMLzvr9xaTCc31lL8n3XphkJ6 65zDNRKp43Fr82ajOrt3QrEty5FBvA8tgAixGm/d+Ag/8wFppPWnU1zb4qyUjq2G aFVa74FFusRfDK0r09RtJW8+G3eBGs3cRls9QLyejX+GQ1xXHtBiYWAYzxt8BrxT 1YeqRJf4yP930DzauCto02WlEkAptxN7pUj3MEI79/ef38dwtaMxQ7oWCduY/IPq zbroATa0n/tpmSF/DISqOUIKzhUEVjm2 -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:55 2025 by rpki-client