This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: p2+rYb7Bj1fmWgb51COJkuSl+mv1pc84+1POFQ9NhkY= Subject key identifier: CF:C2:F7:5A:05:3B:FA:A7:8E:49:27:AB:4F:3F:C9:A1:9A:BB:89:E5 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0408 Signing time: Fri 12 Dec 2025 23:40:51 +0000 Manifest this update: Fri 12 Dec 2025 23:40:51 +0000 Manifest next update: Fri 19 Dec 2025 23:40:51 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: Wxcv4Zix8gRpikfEfRDWIBDFspThcCBVul/U24yXa6o=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 3: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 4: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 5: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 6: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 8: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) 9: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 20:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Dec 12 23:40:51 2025 GMT Not After : Dec 19 23:40:51 2025 GMT Subject: CN=693ca803-f23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:51:95:b2:b8:d9:73:52:d6:df:5b:93:7f: 38:cc:f1:fb:67:6a:c0:cc:e9:2c:5f:ef:23:d3:c1: 95:f0:cd:1f:aa:2f:f5:aa:30:ae:09:25:a7:f7:a4: 0f:6d:aa:77:9d:ab:a9:15:a7:57:6a:cf:7b:e9:2d: e8:2e:89:fd:64:97:71:11:63:02:a0:0b:23:0f:eb: c5:9e:f8:31:ae:6c:2b:0d:2b:a9:7a:c8:5d:3b:3b: 4b:f0:7a:9a:3f:cd:34:e7:30:b8:a7:26:cd:c8:a1: 1c:cc:ed:38:9e:5a:61:15:47:0e:0d:53:fc:a8:69: 9d:5a:15:6b:da:a3:e3:85:1d:22:85:db:bf:40:cc: fa:df:8d:45:ba:bf:d9:44:2c:41:21:bf:ba:74:4b: 27:fb:31:ad:37:7f:87:e7:8c:0a:d3:2a:93:8f:15: 91:c3:a8:a4:e5:06:66:60:40:94:64:96:41:12:d0: d1:ab:40:2f:4e:63:97:05:e9:7e:1c:5a:1a:ff:4a: 58:f5:04:ed:9e:1b:54:7c:88:ed:a2:3b:ec:19:57: 82:7b:3f:dd:f8:77:7e:17:ac:aa:fe:13:d0:02:71: 8c:93:65:14:f1:7a:a1:b7:37:8f:2a:a2:36:6a:0c: 84:18:ae:21:cb:33:f2:65:a8:20:3e:35:bb:20:21: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:F7:5A:05:3B:FA:A7:8E:49:27:AB:4F:3F:C9:A1:9A:BB:89:E5 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6e:db:10:92:58:22:56:16:5c:3f:b2:57:0b:2e:06:3e:43: 49:ee:49:4a:a3:33:fb:e4:fd:85:fd:e9:24:5b:95:65:6e:85: 62:35:59:dd:71:8d:d4:0f:d5:4c:d7:70:eb:10:0a:0c:df:a5: 6a:85:fb:91:61:4d:7d:9b:29:52:38:a3:78:a3:56:80:0b:8f: 1e:16:a9:1b:3b:7e:dc:32:e7:2c:9a:c3:03:a9:88:37:64:c2: ef:aa:c3:bb:fe:84:f5:52:43:3e:94:36:4f:28:e6:5d:8f:14: c8:ce:d7:78:52:24:e0:b0:65:04:75:f9:d7:9f:63:8d:46:6f: 41:3f:9a:a5:8e:db:e1:11:ae:3b:f1:c1:fb:62:bd:d0:95:35: bb:0d:12:18:33:14:bc:b9:8a:40:42:62:d7:d9:57:54:dc:95: 00:26:54:73:f0:c2:fe:5e:b8:d7:9b:35:a2:a6:8f:12:83:3d: c1:17:93:ba:90:50:b8:cd:10:84:5a:6d:cd:9f:fb:1e:64:b4: f5:a8:dc:3a:05:20:cd:91:1f:35:a4:da:b8:6e:90:f7:55:cd: 2c:40:c3:43:cc:e1:1c:29:f6:7d:22:09:36:0c:87:16:27:fd: 7b:67:ee:36:8f:c7:24:22:7e:8f:6f:8a:98:a2:2f:0c:3f:2b: 7f:26:c0:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUxMjEyMjM0MDUxWhcNMjUxMjE5MjM0MDUxWjAYMRYwFAYD VQQDDA02OTNjYTgwMy1mMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLVRlbK42XNS1t9bk384zPH7Z2rAzOksX+8j08GV8M0fqi/1qjCuCSWn96QP bap3naupFadXas976S3oLon9ZJdxEWMCoAsjD+vFnvgxrmwrDSupeshdOztL8Hqa P8005zC4pybNyKEczO04nlphFUcODVP8qGmdWhVr2qPjhR0ihdu/QMz6341Fur/Z RCxBIb+6dEsn+zGtN3+H54wK0yqTjxWRw6ik5QZmYECUZJZBEtDRq0AvTmOXBel+ HFoa/0pY9QTtnhtUfIjtojvsGVeCez/d+Hd+F6yq/hPQAnGMk2UU8XqhtzePKqI2 agyEGK4hyzPyZaggPjW7ICFumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/C91oF O/qnjkknq08/yaGau4nlMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCybtsQklgiVhZcP7JXCy4GPkNJ7klKozP75P2F/ekkW5VlboViNVnd cY3UD9VM13DrEAoM36VqhfuRYU19mylSOKN4o1aAC48eFqkbO37cMucsmsMDqYg3 ZMLvqsO7/oT1UkM+lDZPKOZdjxTIztd4UiTgsGUEdfnXn2ONRm9BP5qljtvhEa47 8cH7Yr3QlTW7DRIYMxS8uYpAQmLX2VdU3JUAJlRz8ML+XrjXmzWipo8Sgz3BF5O6 kFC4zRCEWm3Nn/seZLT1qNw6BSDNkR81pNq4bpD3Vc0sQMNDzOEcKfZ9Igk2DIcW J/17Z+42j8ckIn6Pb4qYoi8MPyt/JsCH -----END CERTIFICATE-----Generated at Sat Dec 13 02:33:50 2025 by rpki-client