This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: QD3Z0/OxUHlszCezf3yWDDBVpSbumDfAIhVjPAddsco= Subject key identifier: 82:27:9C:EB:B4:25:7C:4C:17:54:A5:77:98:CF:95:FF:56:43:C6:87 Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: 0105 Signing time: Wed 03 Dec 2025 03:29:28 +0000 Manifest this update: Wed 03 Dec 2025 03:29:28 +0000 Manifest next update: Wed 10 Dec 2025 03:29:28 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: Ony5U9dA3HwTF3IkXnFcqZ08fnCMGw93s9O+Pl1KkJM=) 2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: cR2EzFZXQ3OaIi8xJ7tAl3/J8aU9AAmLtvKskXaeeio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Dec 3 03:29:28 2025 GMT Not After : Dec 10 03:29:28 2025 GMT Subject: CN=692fae98-2f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:bb:7e:e1:f7:66:ae:79:8b:97:ed:de:0c: 1a:f0:d6:81:5a:9f:aa:e6:f7:52:06:6e:01:0e:d2: 68:9f:45:b2:3c:03:5b:0d:8f:4b:15:a9:3e:bc:9d: d8:db:6c:0e:08:76:28:dc:80:7e:d3:dc:6c:57:6f: d7:27:76:3e:db:9c:32:9f:f4:f7:a7:12:d4:dc:19: b5:f8:c7:fc:f6:c6:4f:76:3a:f4:5e:38:71:61:ef: e8:0a:a7:10:69:42:54:ce:ab:be:c9:9e:fa:4a:b4: 8e:23:fc:9e:72:94:d5:5d:d5:f8:13:b0:05:2a:ba: c9:72:97:12:42:67:ef:f0:e6:53:56:78:8a:a9:a5: f4:0c:31:35:48:86:0b:da:69:86:0b:44:68:c7:43: 28:30:81:e4:6f:be:57:35:1e:86:c0:4f:a4:cf:b6: e3:0f:8b:04:b3:ac:5f:8b:02:0a:dd:a1:a0:2a:75: 77:9b:98:ca:7e:8b:73:18:9f:84:fc:1b:ba:97:96: 9f:cf:5e:ed:b4:f4:b4:84:4c:59:e9:5d:cb:e0:c8: 96:0a:90:f3:6b:69:39:45:17:3e:85:31:85:e6:ef: 78:d5:b7:0d:de:1c:91:36:01:55:e0:e7:93:f7:3a: 78:ba:41:54:76:33:09:21:1c:89:03:15:a4:b1:5f: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:9C:EB:B4:25:7C:4C:17:54:A5:77:98:CF:95:FF:56:43:C6:87 X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:9a:aa:d4:2f:54:71:15:2e:99:69:3e:35:0c:bd:2e:43:bc: 21:0e:84:f4:e6:d5:af:76:4f:1a:e7:a3:0f:d4:28:8b:57:09: 77:da:01:4b:d3:98:55:75:0d:f7:32:3f:fd:fe:62:11:67:6c: 51:44:99:27:40:1e:0b:9e:59:1b:11:14:1a:83:ba:94:7b:91: 82:4a:9a:01:28:29:5c:98:be:15:ed:4c:bc:b7:b3:26:77:d3: 1f:dd:63:7e:0f:16:7d:d5:a1:d6:e1:f2:86:65:1e:fd:ed:81: 48:99:9e:29:12:49:c1:16:f0:d0:93:dd:70:58:52:d9:65:60: b6:57:50:78:9a:b5:e7:75:ec:f8:86:1d:56:bb:d4:72:c6:f9: 62:4c:8c:c2:a0:0c:03:9b:ed:39:4d:31:f0:38:b7:10:e3:db: 31:38:a0:7a:f7:8e:38:9b:e0:c0:b5:5d:77:a7:00:b6:26:22: c1:88:a7:a9:64:b6:07:86:80:96:a6:ca:19:dc:e3:6b:4c:5c: db:db:56:ff:5d:ed:96:23:9b:f2:f7:d4:2b:0f:67:80:b0:93: 71:87:67:ae:45:4f:29:d5:ff:d4:3e:79:ee:43:39:7e:1b:42: e9:07:f4:9f:75:14:10:08:05:ee:d1:ce:cd:22:e3:db:98:39: c3:0c:26:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUxMjAzMDMyOTI4WhcNMjUxMjEwMDMyOTI4WjAYMRYwFAYD VQQDEw02OTJmYWU5OC0yZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQa7fuH3Zq55i5ft3gwa8NaBWp+q5vdSBm4BDtJon0WyPANbDY9LFak+vJ3Y 22wOCHYo3IB+09xsV2/XJ3Y+25wyn/T3pxLU3Bm1+Mf89sZPdjr0XjhxYe/oCqcQ aUJUzqu+yZ76SrSOI/yecpTVXdX4E7AFKrrJcpcSQmfv8OZTVniKqaX0DDE1SIYL 2mmGC0Rox0MoMIHkb75XNR6GwE+kz7bjD4sEs6xfiwIK3aGgKnV3m5jKfotzGJ+E /Bu6l5afz17ttPS0hExZ6V3L4MiWCpDza2k5RRc+hTGF5u941bcN3hyRNgFV4OeT 9zp4ukFUdjMJIRyJAxWksV//hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIInnOu0 JXxMF1Sld5jPlf9WQ8aHMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUmqrUL1RxFS6ZaT41DL0uQ7whDoT05tWvdk8a56MP1CiLVwl32gFL 05hVdQ33Mj/9/mIRZ2xRRJknQB4LnlkbERQag7qUe5GCSpoBKClcmL4V7Uy8t7Mm d9Mf3WN+DxZ91aHW4fKGZR797YFImZ4pEknBFvDQk91wWFLZZWC2V1B4mrXndez4 hh1Wu9RyxvliTIzCoAwDm+05TTHwOLcQ49sxOKB69444m+DAtV13pwC2JiLBiKep ZLYHhoCWpsoZ3ONrTFzb21b/Xe2WI5vy99QrD2eAsJNxh2euRU8p1f/UPnnuQzl+ G0LpB/SfdRQQCAXu0c7NIuPbmDnDDCYy -----END CERTIFICATE-----Generated at Wed Dec 3 16:22:49 2025 by rpki-client