This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: V9+G68bxFaSW8QaabvnDnGgumIQdsgz8DKYa4ItUQ5k= Subject key identifier: A5:E4:09:0C:5D:6E:43:12:BE:8E:E7:C7:35:30:38:34:6C:CD:7C:85 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 0312 Signing time: Tue 23 Dec 2025 00:09:00 +0000 Manifest this update: Tue 23 Dec 2025 00:09:00 +0000 Manifest next update: Tue 30 Dec 2025 00:09:00 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: ceQ3hP/YBxlrSA9xhIfdyKAAuf2WdBCmQcPloFkiQ2k=) 2: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: l12GGHb5zU8WFaP5yfw8CrXUTcEdQRcdzqYPOrrqqtY=) 3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: mBez32ljXmIU/FGdNqv/QIBBd8Jpz2uUA0e46aOruT4=) 4: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: I75VXJWFaD1GwhF1O0TXZ8SEa9d38CWsNr1ZhVLKJs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Dec 23 00:09:00 2025 GMT Not After : Dec 30 00:09:00 2025 GMT Subject: CN=6949dd9c-9c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:7a:39:14:10:10:71:7c:47:5b:56:d8:37: 8e:4d:f0:15:07:96:03:fe:a0:c0:c4:a9:db:14:2d: 6f:b6:eb:66:15:46:f1:de:8a:db:70:98:ef:53:d6: 80:d0:7e:b2:aa:e9:9b:98:c6:75:93:2b:3f:d6:5b: 12:e2:2f:3a:c7:32:34:80:ed:52:c3:6f:18:c4:5f: aa:b2:23:25:1c:14:b2:fb:78:aa:65:0a:82:a9:59: 5f:2c:1a:8a:b2:9e:78:a7:4f:be:65:2c:04:49:f6: 90:13:4a:55:69:c9:3b:82:c2:95:bd:a7:39:52:5d: dc:a7:0c:ba:54:9a:10:84:8c:14:b9:c8:af:67:58: 07:60:7e:2e:05:75:08:f2:20:47:f5:b8:5a:7f:a3: 1e:68:1a:59:ee:07:69:5d:a0:81:54:22:e0:fa:64: 59:fd:f9:80:24:ca:a4:49:91:ed:eb:ac:87:16:4f: c4:54:12:64:dc:06:a8:b2:b0:a5:7a:53:c9:4d:60: dc:4c:8b:f7:d8:b2:bd:a1:eb:e9:e2:b7:db:69:38: 2b:52:0a:c9:54:b4:47:31:36:22:2f:27:c6:0d:fd: 29:29:3f:46:e3:2c:4b:9e:79:2b:9c:e1:45:b9:48: e4:bc:ad:9a:df:2c:d1:80:78:47:43:42:e9:0b:01: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:09:0C:5D:6E:43:12:BE:8E:E7:C7:35:30:38:34:6C:CD:7C:85 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:8c:35:42:53:4f:5b:0a:3a:7a:20:dd:e7:ad:ce:02:8a:a4: 2e:9c:5d:9e:f4:e8:59:a9:01:4a:3d:57:af:a7:cf:c3:b1:48: b1:1e:bd:10:26:89:22:81:f8:b5:2d:f1:ec:ce:a3:9d:be:2a: 17:59:41:42:3c:22:61:2a:fe:4b:8d:6c:66:35:43:c6:dc:fc: 12:e8:4a:aa:1f:ad:79:1d:b1:5a:d8:65:f7:12:08:c2:1e:c1: 0f:ef:a2:00:db:b6:4b:d8:a1:fd:5c:04:aa:3d:64:eb:06:cd: 6e:14:ce:23:d3:76:1c:6a:50:fc:67:fd:83:da:7c:c8:7f:fa: 2f:3d:6f:db:1e:b3:c4:03:a4:b6:f1:d5:c8:bb:ee:9c:fb:dd: 08:0b:a1:00:a8:36:7d:e6:d4:3e:dc:c1:a2:85:1f:d7:90:fe: 27:93:8c:7f:e5:47:21:44:89:00:e5:fa:2e:c6:97:cb:66:cd: 90:f8:e0:a1:14:f7:36:50:6e:c1:06:d7:ac:1e:c0:ea:3d:2d: c9:ff:5e:90:87:2d:37:af:e2:c8:67:d3:b4:54:17:b1:51:1f: 6e:9e:3b:66:9c:0f:16:27:09:e2:a8:b6:5c:b8:63:99:76:1f: f5:af:64:b7:e8:4f:7b:0a:31:07:9f:5b:0f:4a:48:af:76:c3: 2e:ed:ad:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjUxMjIzMDAwOTAwWhcNMjUxMjMwMDAwOTAwWjAYMRYwFAYD VQQDDA02OTQ5ZGQ5Yy05YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcZ6ORQQEHF8R1tW2DeOTfAVB5YD/qDAxKnbFC1vtutmFUbx3orbcJjvU9aA 0H6yqumbmMZ1kys/1lsS4i86xzI0gO1Sw28YxF+qsiMlHBSy+3iqZQqCqVlfLBqK sp54p0++ZSwESfaQE0pVack7gsKVvac5Ul3cpwy6VJoQhIwUucivZ1gHYH4uBXUI 8iBH9bhaf6MeaBpZ7gdpXaCBVCLg+mRZ/fmAJMqkSZHt66yHFk/EVBJk3AaosrCl elPJTWDcTIv32LK9oevp4rfbaTgrUgrJVLRHMTYiLyfGDf0pKT9G4yxLnnkrnOFF uUjkvK2a3yzRgHhHQ0LpCwGyOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXkCQxd bkMSvo7nxzUwODRszXyFMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0jDVCU09bCjp6IN3nrc4CiqQunF2e9OhZqQFKPVevp8/DsUixHr0Q Jokigfi1LfHszqOdvioXWUFCPCJhKv5LjWxmNUPG3PwS6EqqH615HbFa2GX3EgjC HsEP76IA27ZL2KH9XASqPWTrBs1uFM4j03YcalD8Z/2D2nzIf/ovPW/bHrPEA6S2 8dXIu+6c+90IC6EAqDZ95tQ+3MGihR/XkP4nk4x/5UchRIkA5fouxpfLZs2Q+OCh FPc2UG7BBtesHsDqPS3J/16Qhy03r+LIZ9O0VBexUR9unjtmnA8WJwniqLZcuGOZ dh/1r2S36E97CjEHn1sPSkivdsMu7a1J -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:57 2025 by rpki-client