This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: li0qd9qUzj6a4+lYy79ncTcHz7qpNpaUkOSjsRyZtn4= Subject key identifier: 74:2A:9A:E9:23:BC:BA:3B:E6:E7:3E:54:19:14:91:D4:80:EA:13:94 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0AB6 Signing time: Thu 18 Dec 2025 19:07:07 +0000 Manifest this update: Thu 18 Dec 2025 19:07:06 +0000 Manifest next update: Thu 25 Dec 2025 19:07:06 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: kYzhRBGn6ef4OIjD54ez6ZfW3djE18hMELVguBo/TFI=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Dec 18 19:07:06 2025 GMT Not After : Dec 25 19:07:06 2025 GMT Subject: CN=694450db-19f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:d5:be:5a:96:a4:5f:87:02:bb:13:02:16: df:46:5c:cb:e6:43:5b:65:15:76:58:c7:2a:ca:7d: a9:e7:1a:ab:0b:69:30:2e:0d:51:39:f6:9e:60:07: da:e3:50:57:ad:93:d7:82:a9:7f:e9:e5:da:a2:5c: 52:ba:d7:3c:66:6a:9f:06:63:a7:2f:48:66:36:09: 4f:f8:b0:cd:2a:d0:0f:7c:b4:94:9d:33:4e:66:10: 18:4d:07:f9:d9:ab:fb:d2:a8:f2:69:c7:25:9c:ac: ee:ff:a5:07:d8:ab:ec:38:b8:c5:2e:b8:84:04:8b: f6:4d:df:7d:09:cf:29:7f:b2:88:ec:10:c1:9f:f2: 9c:aa:e4:a3:0b:fb:c8:7c:14:35:bf:40:eb:ed:08: d1:d5:6c:bd:ba:8c:22:61:12:ef:7a:5c:4f:19:c5: a9:ea:1f:6a:44:4c:1f:8d:3e:1a:e1:53:93:e8:89: 35:0e:03:22:31:b0:2d:31:8b:25:cb:26:ad:80:5d: 02:94:e2:a5:6a:dd:92:cf:3a:67:05:48:2c:78:0e: 02:b1:a7:92:f1:3c:d7:e2:e8:6b:42:3a:f7:31:ed: fb:d8:46:3d:12:7e:2c:2e:0d:68:eb:67:99:9e:0a: ed:56:78:26:73:46:1a:8a:01:35:cf:c6:e8:a7:b6: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:9A:E9:23:BC:BA:3B:E6:E7:3E:54:19:14:91:D4:80:EA:13:94 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:00:8e:a9:b4:db:2f:c8:16:51:33:08:92:87:15:73:a5:85: 6b:54:f0:cb:74:96:c2:a9:11:dc:43:33:1d:fa:1b:98:83:9b: 21:8b:2f:4f:b2:ad:e2:2a:17:57:16:5d:71:75:8f:9a:ab:1f: 30:02:db:78:44:ca:d4:69:ae:83:4d:52:0e:63:f1:da:3f:5a: 09:67:b7:5f:9e:51:ed:7f:8d:e6:e1:7e:d7:a2:36:20:93:4c: 0f:67:45:2e:1b:93:b5:4a:69:00:8d:fe:94:29:17:a5:c4:de: 78:bf:4d:13:ae:b9:a8:6c:62:7a:c6:3f:1b:57:96:58:24:e2: 41:7c:77:3c:27:b3:43:46:d2:88:44:6c:c3:02:33:bc:ee:05: 88:7a:5d:bc:4b:5c:cf:05:09:38:92:1c:3d:df:b5:06:49:70: 1d:fe:5f:09:6c:24:63:f9:e6:d4:48:b7:8e:c9:d1:32:59:f2: 47:7e:fb:df:80:f4:4c:a9:36:3b:18:71:77:f1:60:8c:15:c6: ad:85:d1:69:e6:54:66:38:8d:2f:80:f0:a6:44:fe:fb:b0:fd: 89:67:a1:a0:e7:4a:e0:99:9e:b8:0a:a3:ef:84:93:01:34:52: fd:a9:04:c6:a4:29:96:ec:24:83:c3:14:50:ca:06:e3:50:64: 20:56:d0:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUxMjE4MTkwNzA2WhcNMjUxMjI1MTkwNzA2WjAYMRYwFAYD VQQDDA02OTQ0NTBkYi0xOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lTVvlqWpF+HArsTAhbfRlzL5kNbZRV2WMcqyn2p5xqrC2kwLg1ROfaeYAfa 41BXrZPXgql/6eXaolxSutc8ZmqfBmOnL0hmNglP+LDNKtAPfLSUnTNOZhAYTQf5 2av70qjyacclnKzu/6UH2KvsOLjFLriEBIv2Td99Cc8pf7KI7BDBn/KcquSjC/vI fBQ1v0Dr7QjR1Wy9uowiYRLvelxPGcWp6h9qREwfjT4a4VOT6Ik1DgMiMbAtMYsl yyatgF0ClOKlat2SzzpnBUgseA4CsaeS8TzX4uhrQjr3Me372EY9En4sLg1o62eZ ngrtVngmc0YaigE1z8bop7ZVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQqmukj vLo75uc+VBkUkdSA6hOUMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7AI6ptNsvyBZRMwiShxVzpYVrVPDLdJbCqRHcQzMd+huYg5shiy9P sq3iKhdXFl1xdY+aqx8wAtt4RMrUaa6DTVIOY/HaP1oJZ7dfnlHtf43m4X7XojYg k0wPZ0UuG5O1SmkAjf6UKRelxN54v00TrrmobGJ6xj8bV5ZYJOJBfHc8J7NDRtKI RGzDAjO87gWIel28S1zPBQk4khw937UGSXAd/l8JbCRj+ebUSLeOydEyWfJHfvvf gPRMqTY7GHF38WCMFcathdFp5lRmOI0vgPCmRP77sP2JZ6Gg50rgmZ64CqPvhJMB NFL9qQTGpCmW7CSDwxRQygbjUGQgVtBg -----END CERTIFICATE-----Generated at Fri Dec 19 18:01:42 2025 by rpki-client