This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: Qvip2bxQff3c6TaGJNvFrV9T5SAgr6WWrcTxuXvV2Jk= Subject key identifier: 2A:3B:FD:C9:05:7C:DA:5D:D1:47:B3:10:FC:C4:19:5B:E7:15:4B:3A Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 01AE Signing time: Tue 23 Dec 2025 02:09:52 +0000 Manifest this update: Tue 23 Dec 2025 02:09:52 +0000 Manifest next update: Tue 30 Dec 2025 02:09:52 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: WbifhA8RJy40oqESzMFTJGg7qM1ypS0Kea8FgdGCOsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Dec 23 02:09:52 2025 GMT Not After : Dec 30 02:09:52 2025 GMT Subject: CN=6949f9f0-50b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:00:6a:ac:30:28:4a:7c:4a:e6:fe:86:d3: 8c:9b:57:53:1c:62:0e:04:da:2c:3c:ce:4b:8a:f6: bc:80:e1:f1:c2:0d:df:a0:7c:51:42:df:98:2d:9e: f6:ba:88:cf:a9:25:1e:69:01:de:07:0f:55:c1:28: 76:9d:99:65:6d:8b:db:48:16:86:85:ff:37:f9:a4: 27:30:58:8e:7a:dc:82:13:c1:76:d5:16:e2:ec:ae: 82:1e:46:35:a3:27:3b:41:69:ee:06:4c:ef:79:c6: 91:2e:10:50:5f:8c:a1:dc:65:f1:e1:87:67:75:94: e8:b9:42:31:e7:b3:25:cd:59:d4:70:e8:11:db:e8: d4:3e:eb:1d:6b:1f:97:ae:51:28:a6:31:ff:cf:83: 85:10:8c:18:fd:c0:58:9f:1f:0f:7a:d0:46:b3:0a: 0e:d6:65:8b:07:22:78:b4:65:c3:31:70:2c:5a:45: fd:e2:79:d7:4d:f9:bb:b6:70:91:d1:02:34:f9:ff: ae:26:c2:70:fb:06:7e:b0:ff:7e:af:9f:41:da:40: 3b:47:83:3d:95:00:3b:54:27:ac:94:e2:2d:dc:8f: 6f:f4:b5:48:db:7b:7b:06:7a:f7:5f:0d:7f:7d:9d: ec:84:de:94:2d:30:16:ef:61:19:76:a3:66:44:1a: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:FD:C9:05:7C:DA:5D:D1:47:B3:10:FC:C4:19:5B:E7:15:4B:3A X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:05:2b:31:e3:e0:c6:2b:ce:e1:5c:93:d8:82:9f:56:8c:5f: 95:b2:79:25:d6:1f:be:97:cf:e8:a1:c0:df:a3:62:40:84:55: 51:13:47:77:a0:dd:80:4e:3b:d6:3c:0e:6b:8a:75:5b:9f:14: 36:9a:dd:2a:22:31:05:a8:a9:3d:7f:71:ba:97:ab:9b:c7:97: 3d:0c:df:a2:46:15:be:42:a6:9d:e6:06:dc:39:3e:ce:75:77: c5:a6:d9:85:cc:35:f6:e4:fd:87:43:02:0e:aa:d0:65:42:4a: 97:1d:c3:02:a9:a4:66:16:45:db:38:79:be:5c:1b:18:ab:64: d1:e7:6b:17:30:c3:5a:6d:98:e8:a1:1d:a0:ed:3a:f0:b3:f7: c1:0d:76:6e:58:76:3b:58:8f:e1:41:d1:75:4c:91:ab:6f:88: 1d:4e:1b:ea:e3:e1:69:7e:44:60:df:dd:75:f1:3e:2f:2c:d8: 08:94:02:bf:82:60:d3:b7:16:72:ec:b4:cc:62:27:27:17:7f: 54:ba:6a:ee:cf:04:51:1f:17:0a:df:7c:6d:c1:ba:1a:c5:99: 82:50:9e:3e:79:d6:2a:7c:01:f9:bb:0b:e7:f4:4b:fc:28:a8: c6:a1:7c:f6:35:94:57:cf:db:e2:01:b7:00:b8:fe:fa:7b:d1: 52:0b:8a:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUxMjIzMDIwOTUyWhcNMjUxMjMwMDIwOTUyWjAYMRYwFAYD VQQDDA02OTQ5ZjlmMC01MGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYQAaqwwKEp8Sub+htOMm1dTHGIOBNosPM5Liva8gOHxwg3foHxRQt+YLZ72 uojPqSUeaQHeBw9VwSh2nZllbYvbSBaGhf83+aQnMFiOetyCE8F21Rbi7K6CHkY1 oyc7QWnuBkzvecaRLhBQX4yh3GXx4YdndZTouUIx57MlzVnUcOgR2+jUPusdax+X rlEopjH/z4OFEIwY/cBYnx8PetBGswoO1mWLByJ4tGXDMXAsWkX94nnXTfm7tnCR 0QI0+f+uJsJw+wZ+sP9+r59B2kA7R4M9lQA7VCeslOIt3I9v9LVI23t7Bnr3Xw1/ fZ3shN6ULTAW72EZdqNmRBrh5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo7/ckF fNpd0UezEPzEGVvnFUs6MB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0BSsx4+DGK87hXJPYgp9WjF+Vsnkl1h++l8/oocDfo2JAhFVRE0d3 oN2ATjvWPA5rinVbnxQ2mt0qIjEFqKk9f3G6l6ubx5c9DN+iRhW+Qqad5gbcOT7O dXfFptmFzDX25P2HQwIOqtBlQkqXHcMCqaRmFkXbOHm+XBsYq2TR52sXMMNabZjo oR2g7Trws/fBDXZuWHY7WI/hQdF1TJGrb4gdThvq4+FpfkRg39118T4vLNgIlAK/ gmDTtxZy7LTMYicnF39UumruzwRRHxcK33xtwboaxZmCUJ4+edYqfAH5uwvn9Ev8 KKjGoXz2NZRXz9viAbcAuP76e9FSC4ow -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:38 2025 by rpki-client