This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: e6Ked2Npb+MrsrbBYpdkRFCx10D1e9Qd2En6HtwRIkQ= Subject key identifier: E9:83:31:B6:16:16:B8:90:40:37:DF:40:4A:BF:84:53:E9:8F:08:04 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0D25 Signing time: Thu 18 Dec 2025 20:45:35 +0000 Manifest this update: Thu 18 Dec 2025 20:45:34 +0000 Manifest next update: Thu 25 Dec 2025 20:45:34 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: DIjv+RIeOzSsu9QGWT3AAtOKwDyT7R1Eut0nAxhsabk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Dec 18 20:45:34 2025 GMT Not After : Dec 25 20:45:34 2025 GMT Subject: CN=694467ee-31da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:79:b3:b7:94:cb:31:9d:5e:eb:8e:ef:43: 00:b7:4d:50:35:ac:c6:32:a8:a7:0b:5f:f6:1e:4e: ab:43:7f:ad:f0:f5:9f:02:81:74:d1:3a:4a:f3:da: e5:36:d4:31:54:f5:63:89:40:6a:6c:ec:f0:81:26: 5c:6b:ae:38:a5:79:0f:ea:a1:bd:0f:08:f1:2b:4c: 2b:24:9b:19:89:c3:57:f3:b7:8a:66:f4:b4:19:71: 93:6c:98:b2:25:96:b5:10:e9:bf:02:36:58:f2:99: cb:a8:b1:2c:4d:ab:2d:09:05:09:c4:d5:ec:c1:92: 45:4a:91:09:79:19:e8:32:b9:ac:ee:32:f1:12:45: 7d:15:58:1e:9f:44:9b:f7:ff:9b:75:4b:17:b7:0f: 19:d7:4e:61:d6:90:1e:d7:3e:27:07:89:7d:a8:be: 58:80:fa:da:12:5d:d5:71:57:45:00:5c:47:7b:c3: 6f:1b:bf:2e:ed:fd:7d:04:7b:82:49:8a:62:cb:e4: b2:e8:16:13:54:ff:be:45:7b:a0:b7:99:d2:71:f6: 2c:c4:60:1f:c7:0f:2e:94:fd:3d:45:27:73:6a:81: e6:90:74:11:5c:2d:d5:30:a4:06:6d:bb:c9:6d:dd: dc:e5:da:d7:0f:d2:fc:8c:40:cb:86:51:26:e0:7d: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:83:31:B6:16:16:B8:90:40:37:DF:40:4A:BF:84:53:E9:8F:08:04 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:15:34:04:b4:7a:d5:0a:e6:64:e0:23:76:b5:28:39:07:62: de:0a:f8:e3:41:25:b6:d9:2d:76:f9:7e:76:ea:c2:bd:ba:16: d0:9f:54:03:81:55:7b:57:35:90:cd:d2:fe:c0:4d:2d:82:e8: 72:ec:31:01:75:b8:1b:b5:96:31:c2:93:ee:21:2d:66:b7:75: 90:b3:ce:38:3a:74:c5:05:ab:43:28:49:b7:94:06:ec:c8:a2: 47:0e:9d:22:1f:09:68:02:1f:8e:55:2a:e5:45:02:e2:7a:2f: de:f4:18:b3:5a:9c:81:bc:56:b2:7f:96:a8:e6:1e:57:6a:1f: 5f:9c:38:5d:5a:95:00:f3:2c:ea:f2:b0:7f:47:f8:90:8e:4e: e5:be:bd:db:06:dd:02:c1:f2:1c:07:79:3f:9b:ca:30:ec:0d: 16:65:80:9c:0e:0d:97:fc:9b:ed:1e:9a:2a:5e:64:fc:b4:d5: d6:d6:ed:6b:a9:6c:30:89:3c:c1:e9:cb:42:ac:b2:8e:eb:24: 1c:20:10:12:3d:6f:2f:ed:df:28:88:ff:7b:ff:54:28:a4:c6: 67:42:06:10:a3:48:30:84:96:72:c3:3a:ff:7e:36:e9:7f:81: b3:76:d3:eb:06:3f:de:37:74:53:23:1a:c2:a5:f4:12:8e:6e: e1:d2:4a:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUxMjE4MjA0NTM0WhcNMjUxMjI1MjA0NTM0WjAYMRYwFAYD VQQDDA02OTQ0NjdlZS0zMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDJ5s7eUyzGdXuuO70MAt01QNazGMqinC1/2Hk6rQ3+t8PWfAoF00TpK89rl NtQxVPVjiUBqbOzwgSZca644pXkP6qG9DwjxK0wrJJsZicNX87eKZvS0GXGTbJiy JZa1EOm/AjZY8pnLqLEsTastCQUJxNXswZJFSpEJeRnoMrms7jLxEkV9FVgen0Sb 9/+bdUsXtw8Z105h1pAe1z4nB4l9qL5YgPraEl3VcVdFAFxHe8NvG78u7f19BHuC SYpiy+Sy6BYTVP++RXugt5nScfYsxGAfxw8ulP09RSdzaoHmkHQRXC3VMKQGbbvJ bd3c5drXD9L8jEDLhlEm4H0juwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmDMbYW FriQQDffQEq/hFPpjwgEMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0FTQEtHrVCuZk4CN2tSg5B2LeCvjjQSW22S12+X526sK9uhbQn1QD gVV7VzWQzdL+wE0tguhy7DEBdbgbtZYxwpPuIS1mt3WQs844OnTFBatDKEm3lAbs yKJHDp0iHwloAh+OVSrlRQLiei/e9BizWpyBvFayf5ao5h5Xah9fnDhdWpUA8yzq 8rB/R/iQjk7lvr3bBt0CwfIcB3k/m8ow7A0WZYCcDg2X/JvtHpoqXmT8tNXW1u1r qWwwiTzB6ctCrLKO6yQcIBASPW8v7d8oiP97/1QopMZnQgYQo0gwhJZywzr/fjbp f4GzdtPrBj/eN3RTIxrCpfQSjm7h0kpY -----END CERTIFICATE-----Generated at Fri Dec 19 10:55:06 2025 by rpki-client