This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: 2sjvoUh4YXImJCmrpaBN6Qtq0c0MSJlqGEKxceegqyA= Subject key identifier: 13:B0:FF:AE:30:09:5A:A0:A8:E8:D2:6B:A7:CE:44:8C:DF:35:D9:50 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: 012F Signing time: Tue 23 Dec 2025 03:34:07 +0000 Manifest this update: Tue 23 Dec 2025 03:34:06 +0000 Manifest next update: Tue 30 Dec 2025 03:34:06 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: yuzMrGJOHG55Oo3qWKpGAQEuEiArqFfUL++wJLh0xaw=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Dec 23 03:34:06 2025 GMT Not After : Dec 30 03:34:06 2025 GMT Subject: CN=694a0daf-f6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:d9:27:db:bd:e5:8d:c1:29:16:f9:d2:2a: 68:54:be:11:46:cc:46:e1:fc:31:2b:1c:17:91:13: 7a:06:2d:0c:f3:6f:19:31:88:ca:c7:f6:4b:69:1d: 66:46:24:f9:a8:61:15:23:39:45:3f:71:55:e8:8a: d6:75:e7:30:1b:e1:db:7f:c0:51:50:1d:e2:82:f2: 0d:68:66:cb:53:27:1d:13:83:3f:29:f2:23:cc:6b: 86:9a:67:c8:55:cd:72:a3:24:f2:47:d1:19:16:4f: ea:07:2e:80:06:79:40:f9:c8:34:44:c4:0a:9a:ac: fa:57:37:d2:28:6e:bc:d0:40:1e:6b:8b:58:4e:4d: 57:4f:c0:0e:23:60:4f:bd:4d:08:7e:ad:98:a8:c7: 9c:e8:e4:bd:b0:22:d7:09:5c:19:89:5a:0a:34:9c: 88:93:24:71:8d:bb:4e:51:4f:6b:16:eb:9c:24:24: 61:cf:3f:3e:70:7d:6b:49:1a:dc:d6:b2:00:0a:ec: 35:6f:e4:d4:31:48:24:f9:3f:57:d9:69:df:38:aa: a3:07:b5:77:01:13:8a:7e:5d:3a:a7:f1:1c:91:21: bc:7d:8d:77:5d:1a:ba:90:51:a6:19:b8:8a:57:3b: 28:b4:0e:1b:06:e5:38:44:93:d4:41:6c:b3:bf:9f: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:FF:AE:30:09:5A:A0:A8:E8:D2:6B:A7:CE:44:8C:DF:35:D9:50 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cb:b9:ae:90:8d:d5:2c:c1:e6:1f:bd:99:f6:0f:72:48:94: b9:0b:5b:21:3e:ce:1a:64:2d:51:ea:45:9b:f0:ba:8f:4f:ac: 33:46:6f:80:2b:0c:2b:87:de:82:1e:98:17:22:26:58:93:26: 3c:d1:1f:a4:af:53:43:86:6f:3c:4b:8f:80:47:e3:95:27:e6: 66:3b:c8:9e:26:4c:16:d7:f3:ea:3a:3c:2a:8e:d2:ca:c1:48: be:e8:1a:a4:12:b2:61:37:a1:6f:5b:0d:f5:ad:40:5d:ea:9e: 20:34:e0:2f:81:1c:9a:f6:21:2e:97:46:5e:d0:e7:17:99:cd: 18:a8:e4:69:75:a7:d2:42:93:8e:06:ea:02:2e:9b:c9:9e:e7: 86:57:a1:44:ed:d0:bb:0b:72:5d:e7:6d:2b:ec:6e:52:15:9e: 13:8b:0a:a3:37:29:61:b0:da:77:b2:4b:d4:d1:a1:44:2e:3f: 0a:5b:b9:43:21:10:40:ec:6a:2b:9e:14:7d:e3:42:ce:9d:b8: 42:9a:49:cd:57:83:fb:60:7e:a0:74:ea:ce:a2:2d:4e:8b:cc: f2:16:73:ac:b5:2e:01:f2:ed:0c:e1:41:e1:f7:60:b2:78:0f: 40:02:c9:35:83:2b:ba:c1:58:8d:68:9b:f6:60:7a:45:42:ec: ec:6b:c3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUxMjIzMDMzNDA2WhcNMjUxMjMwMDMzNDA2WjAYMRYwFAYD VQQDDA02OTRhMGRhZi1mNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMDZJ9u95Y3BKRb50ipoVL4RRsxG4fwxKxwXkRN6Bi0M828ZMYjKx/ZLaR1m RiT5qGEVIzlFP3FV6IrWdecwG+Hbf8BRUB3igvINaGbLUycdE4M/KfIjzGuGmmfI Vc1yoyTyR9EZFk/qBy6ABnlA+cg0RMQKmqz6VzfSKG680EAea4tYTk1XT8AOI2BP vU0Ifq2YqMec6OS9sCLXCVwZiVoKNJyIkyRxjbtOUU9rFuucJCRhzz8+cH1rSRrc 1rIACuw1b+TUMUgk+T9X2WnfOKqjB7V3AROKfl06p/EckSG8fY13XRq6kFGmGbiK VzsotA4bBuU4RJPUQWyzv5/PAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOw/64w CVqgqOjSa6fORIzfNdlQMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARy7mukI3VLMHmH72Z9g9ySJS5C1shPs4aZC1R6kWb8LqPT6wzRm+A Kwwrh96CHpgXIiZYkyY80R+kr1NDhm88S4+AR+OVJ+ZmO8ieJkwW1/PqOjwqjtLK wUi+6BqkErJhN6FvWw31rUBd6p4gNOAvgRya9iEul0Ze0OcXmc0YqORpdafSQpOO BuoCLpvJnueGV6FE7dC7C3Jd520r7G5SFZ4TiwqjNylhsNp3skvU0aFELj8KW7lD IRBA7GornhR940LOnbhCmknNV4P7YH6gdOrOoi1Oi8zyFnOstS4B8u0M4UHh92Cy eA9AAsk1gyu6wViNaJv2YHpFQuzsa8Pn -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:20 2025 by rpki-client