This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: F6C4wq8W4hGCWTfS4gsYYZQSO9FsOSb1wZTdrjBdFeU= Subject key identifier: 0D:FD:8F:CF:F2:7D:56:7A:37:0F:4D:DD:EC:55:B8:D9:03:D9:69:3D Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 01C1 Signing time: Tue 23 Dec 2025 02:00:25 +0000 Manifest this update: Tue 23 Dec 2025 02:00:25 +0000 Manifest next update: Tue 30 Dec 2025 02:00:25 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: KviabjjGnfRWVkff0vaob2H1vvJzuIJm/lmWvq2AOmM=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Dec 23 02:00:25 2025 GMT Not After : Dec 30 02:00:25 2025 GMT Subject: CN=6949f7b9-6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:61:e4:27:b8:d1:ec:81:7b:50:b4:19:ab: 56:fa:45:10:24:eb:c9:21:53:06:17:ea:0e:28:1b: c9:bb:c2:97:26:cd:e3:49:34:a1:f1:34:24:69:c5: af:1e:c5:b5:b6:30:01:a3:43:88:c7:05:7f:d1:aa: 01:97:47:86:42:ac:52:f2:58:00:1d:32:d3:ae:86: 75:48:11:c7:12:85:d2:8a:17:22:34:e4:62:fa:dd: 83:84:01:fc:94:11:81:34:1f:eb:82:da:5a:ba:21: ef:8a:e5:08:00:92:b2:43:1e:9f:b8:71:c9:29:74: 51:70:c9:31:26:11:cb:47:19:34:27:5c:80:56:89: 7d:2f:2d:8f:b2:f0:35:61:04:5d:b1:b0:f8:6a:9c: 9d:10:65:ac:49:1c:fc:31:05:40:91:ca:47:05:e9: 87:f5:fb:8c:4e:0c:23:a9:8a:6b:84:2f:6b:c7:3d: 8a:b9:3a:4d:e7:bb:a1:b7:58:28:59:9b:b0:e7:f9: 21:a4:6f:c9:80:79:b5:e6:f8:f6:7f:fc:c4:d1:71: 13:46:7c:7c:4c:43:63:04:ec:44:6d:ae:a4:63:5b: d0:e0:13:9f:db:82:0b:6b:a1:da:44:8b:fa:fe:4d: 1c:5b:24:ed:69:3d:89:24:27:f5:fe:a4:de:d8:03: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:8F:CF:F2:7D:56:7A:37:0F:4D:DD:EC:55:B8:D9:03:D9:69:3D X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b0:d4:3f:24:f6:cb:91:14:98:87:96:00:82:72:30:f9:62: 45:21:f2:f6:2b:25:6b:8f:84:c6:c1:2e:56:67:31:96:c9:78: 99:6e:e1:3c:c1:91:bb:f5:ca:fe:70:f7:f3:51:c2:66:bf:eb: ad:fd:56:b2:58:c3:a2:47:1d:a6:ec:e5:1e:29:25:e4:37:32: ae:dd:5f:a9:8a:ff:c4:d1:6c:8d:22:f7:7d:03:37:c7:e4:38: 36:b4:39:c6:bc:b3:82:35:74:13:24:5a:05:e0:2b:0e:a7:a5: e3:36:3e:ee:d4:69:3a:7a:77:a0:72:8f:ae:29:db:5a:8a:5b: 16:fb:7f:f4:88:d3:7e:e7:65:e1:f9:50:c7:4f:18:e1:dd:2e: 49:6f:26:db:f0:0a:8c:7a:53:8e:72:a8:09:b0:c6:70:1b:81: 0e:6e:5e:32:86:ab:3d:97:3c:bd:4e:5e:c5:d2:19:bc:f2:9d: 1b:1c:34:99:07:35:7d:a5:c7:0a:a4:fc:9c:ca:ca:e4:f6:08: 30:f5:48:0c:97:ef:fa:c5:54:6f:b9:9e:81:a2:59:6d:95:7e: f6:0d:d7:be:26:8d:d5:21:b6:b7:e4:e0:94:80:de:49:40:4a: 3e:2e:a6:6b:f2:ce:4b:0d:88:d6:e7:b4:31:c6:6c:e6:5a:0e: be:70:9f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUxMjIzMDIwMDI1WhcNMjUxMjMwMDIwMDI1WjAYMRYwFAYD VQQDDA02OTQ5ZjdiOS02YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBph5Ce40eyBe1C0GatW+kUQJOvJIVMGF+oOKBvJu8KXJs3jSTSh8TQkacWv HsW1tjABo0OIxwV/0aoBl0eGQqxS8lgAHTLTroZ1SBHHEoXSihciNORi+t2DhAH8 lBGBNB/rgtpauiHviuUIAJKyQx6fuHHJKXRRcMkxJhHLRxk0J1yAVol9Ly2PsvA1 YQRdsbD4apydEGWsSRz8MQVAkcpHBemH9fuMTgwjqYprhC9rxz2KuTpN57uht1go WZuw5/khpG/JgHm15vj2f/zE0XETRnx8TENjBOxEba6kY1vQ4BOf24ILa6HaRIv6 /k0cWyTtaT2JJCf1/qTe2AMUrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA39j8/y fVZ6Nw9N3exVuNkD2Wk9MB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlsNQ/JPbLkRSYh5YAgnIw+WJFIfL2KyVrj4TGwS5WZzGWyXiZbuE8 wZG79cr+cPfzUcJmv+ut/VayWMOiRx2m7OUeKSXkNzKu3V+piv/E0WyNIvd9AzfH 5Dg2tDnGvLOCNXQTJFoF4CsOp6XjNj7u1Gk6enegco+uKdtailsW+3/0iNN+52Xh +VDHTxjh3S5Jbybb8AqMelOOcqgJsMZwG4EObl4yhqs9lzy9Tl7F0hm88p0bHDSZ BzV9pccKpPycysrk9ggw9UgMl+/6xVRvuZ6BolltlX72Dde+Jo3VIba35OCUgN5J QEo+LqZr8s5LDYjW57QxxmzmWg6+cJ/z -----END CERTIFICATE-----Generated at Tue Dec 23 14:35:11 2025 by rpki-client