This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: qUuXcoq4FGrg2DRS1GZD8tkNQvfZdAsfl3h0vyuiup8= Subject key identifier: E6:77:8E:8A:EA:53:22:E1:71:2A:CE:33:DE:FA:BA:EE:4F:40:F7:BA Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 0745 Signing time: Mon 22 Dec 2025 20:59:00 +0000 Manifest this update: Mon 22 Dec 2025 20:58:59 +0000 Manifest next update: Mon 29 Dec 2025 20:58:59 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: oQYEUUQGOFwytI7KMGJaUDGdv3+CJ9WFqpxEQNr3nNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: Dec 22 20:58:59 2025 GMT Not After : Dec 29 20:58:59 2025 GMT Subject: CN=6949b113-0329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:45:34:ad:9b:b9:85:2d:56:7f:08:c1:c7: 64:c2:4b:cc:3a:a8:b5:3c:8e:5e:fb:0e:52:11:89: 65:eb:00:20:77:e8:e4:e9:cc:f8:12:6d:87:e9:36: 53:b1:d9:bf:a3:0f:12:ef:8b:ea:eb:45:92:62:8d: ff:06:d9:8e:8c:17:cb:53:96:97:21:69:57:d0:b0: c4:28:70:4c:17:ab:f3:93:85:7c:22:4d:b1:91:96: ca:82:e3:77:22:52:50:17:82:98:96:df:1f:9e:d8: 01:d9:87:76:e7:e0:71:b1:2b:b1:31:5c:73:9b:f8: e0:cc:83:5e:b8:ef:91:a2:23:4e:33:b6:89:ad:f6: 09:7f:e3:55:e6:b1:88:ae:6d:a5:0e:2b:f9:95:82: 30:ea:17:ed:8d:b6:9a:9b:b9:a4:f7:8c:0a:ca:fd: 9a:de:4d:5a:fa:e4:5c:45:0c:2b:0d:1b:f8:56:17: 88:d8:dd:9c:7d:a6:47:db:2b:5d:af:63:b6:5e:2b: c6:95:fc:c8:44:aa:04:82:11:23:68:f1:7d:40:46: 4a:ea:47:8b:6e:3f:09:89:5c:ed:13:7e:34:c0:8c: 82:d3:09:4e:5f:c1:4f:83:a0:cb:f2:78:17:80:45: 86:47:60:92:b8:dc:be:fd:ed:68:ff:e6:90:bc:38: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:8E:8A:EA:53:22:E1:71:2A:CE:33:DE:FA:BA:EE:4F:40:F7:BA X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b0:ca:2e:ef:76:d0:7e:b1:82:c4:a4:96:25:13:60:4d:4a: f2:a8:72:9d:99:7d:7d:ce:bd:90:29:42:97:66:d8:fe:d4:9b: 61:c2:31:81:39:e3:91:22:77:ca:42:e7:0a:f3:64:d7:8f:1b: c9:40:15:05:d8:e8:dc:42:a9:f5:c4:51:d8:eb:b8:bc:cb:2b: ba:1a:0f:33:22:8d:ae:42:66:5b:63:f3:79:38:a6:80:ef:3e: 42:7b:29:59:cb:30:66:a6:03:cb:a7:38:92:0f:87:c7:5c:4a: 93:ce:cb:ec:b4:ad:19:45:85:5a:68:e8:df:0c:9a:c4:ce:03: ed:d4:68:2e:36:1a:26:d1:f2:bd:5d:f7:8f:05:0a:e1:eb:02: 9b:c4:1e:8b:17:71:ec:84:dc:42:c3:4e:c0:c4:94:22:27:7d: 61:ae:e9:08:02:ca:79:3f:a8:9c:06:3a:c6:4d:c2:81:54:81: cf:18:41:e1:ab:6f:18:af:f0:3f:99:74:9a:59:44:37:0b:dd: 46:c1:39:7e:e6:c1:ee:6a:65:da:4c:ea:70:bb:fc:8b:4c:4f: ae:82:93:5a:f7:c0:73:fd:e1:ec:36:31:e9:20:58:4e:39:c4: f9:2d:f0:15:a6:43:ca:2a:88:f7:41:63:78:22:a6:48:4d:fe: 1c:1a:8f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUxMjIyMjA1ODU5WhcNMjUxMjI5MjA1ODU5WjAYMRYwFAYD VQQDDA02OTQ5YjExMy0wMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PpFNK2buYUtVn8IwcdkwkvMOqi1PI5e+w5SEYll6wAgd+jk6cz4Em2H6TZT sdm/ow8S74vq60WSYo3/BtmOjBfLU5aXIWlX0LDEKHBMF6vzk4V8Ik2xkZbKguN3 IlJQF4KYlt8fntgB2Yd25+BxsSuxMVxzm/jgzINeuO+RoiNOM7aJrfYJf+NV5rGI rm2lDiv5lYIw6hftjbaam7mk94wKyv2a3k1a+uRcRQwrDRv4VheI2N2cfaZH2ytd r2O2XivGlfzIRKoEghEjaPF9QEZK6keLbj8JiVztE340wIyC0wlOX8FPg6DL8ngX gEWGR2CSuNy+/e1o/+aQvDg+xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ3jorq UyLhcSrOM976uu5PQPe6MB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvsMou73bQfrGCxKSWJRNgTUryqHKdmX19zr2QKUKXZtj+1JthwjGB OeORInfKQucK82TXjxvJQBUF2OjcQqn1xFHY67i8yyu6Gg8zIo2uQmZbY/N5OKaA 7z5CeylZyzBmpgPLpziSD4fHXEqTzsvstK0ZRYVaaOjfDJrEzgPt1GguNhom0fK9 XfePBQrh6wKbxB6LF3HshNxCw07AxJQiJ31hrukIAsp5P6icBjrGTcKBVIHPGEHh q28Yr/A/mXSaWUQ3C91GwTl+5sHuamXaTOpwu/yLTE+ugpNa98Bz/eHsNjHpIFhO OcT5LfAVpkPKKoj3QWN4IqZITf4cGo+5 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:57 2025 by rpki-client