This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: lhBI+xjs8J3H2XZY1kunePagHEe+8wdCbhs3ix4KbeU= Subject key identifier: 9E:61:B5:2E:E1:DF:F6:3C:6E:87:11:65:CE:83:37:C4:ED:8C:AF:DA Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 20 Signing time: Wed 03 Dec 2025 05:56:52 +0000 Manifest this update: Wed 03 Dec 2025 05:56:51 +0000 Manifest next update: Wed 10 Dec 2025 05:56:51 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: hpXyJrFScRQ2Y261WE7msaIQIJ+Ht3AXew4YXbssjc4=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Dec 3 05:56:51 2025 GMT Not After : Dec 10 05:56:51 2025 GMT Subject: CN=692fd124-2cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:3a:56:86:16:c1:0c:60:7d:bb:70:57:f5: dd:c3:a7:8a:14:db:71:b8:6e:74:8d:0f:e8:5d:ca: bd:6e:00:09:f2:2a:9f:76:01:7b:7a:2a:3b:fb:14: 68:7d:21:22:48:9c:88:f1:3b:da:32:0b:05:7f:1c: c1:46:88:bc:a9:b6:56:51:ed:0a:f3:28:aa:96:62: 53:3a:49:34:a2:02:b7:f0:bd:cb:f9:7b:1a:69:fb: 22:3c:27:76:76:a7:e3:83:e5:f0:6a:da:68:2d:dc: 01:53:94:ca:72:e9:4f:40:1b:b8:f6:f9:65:94:27: ae:ff:de:48:d8:97:7a:c4:08:5e:0e:0e:2c:c7:34: 1b:e2:74:c4:b4:56:f3:c2:d7:73:2e:38:c9:b8:26: 9a:62:c5:d8:23:14:61:75:76:3a:4d:a3:e6:d7:bb: 2e:02:7f:42:5e:c6:9d:8a:10:16:b2:55:e7:41:d3: 86:68:7f:13:43:56:ca:0e:0c:37:77:fe:d6:e6:4b: 8b:ca:78:f8:81:a4:f0:d3:8a:7b:1c:46:61:1a:3b: 2d:8a:d2:fd:db:24:8f:ac:66:cc:48:b2:8e:b5:e4: df:22:02:90:d8:f1:f3:b2:0d:45:ab:9b:e1:6b:8d: 60:ea:3c:65:46:7b:14:ee:d6:22:d5:51:73:80:da: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:B5:2E:E1:DF:F6:3C:6E:87:11:65:CE:83:37:C4:ED:8C:AF:DA X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ec:38:98:e1:7f:6a:47:53:69:c8:ab:de:05:f5:5b:be:ec: d6:27:c1:2a:fa:13:45:ca:92:85:82:24:18:0b:4a:6f:3d:2b: dd:40:af:30:35:b3:c0:e9:24:c2:c5:6b:4e:3d:2a:d0:c4:5a: 47:7c:88:bc:95:a9:d5:0d:b8:3c:8a:45:da:6c:9f:1b:e3:30: 1f:81:58:4c:5f:7a:6a:60:44:e6:c8:30:8b:33:2b:f1:e5:ef: 2e:2d:69:73:ef:ef:9d:32:ba:47:1a:f4:03:da:0f:a7:aa:ad: 45:0c:ad:de:7f:d6:af:a9:1f:c2:3b:75:db:5e:5f:77:5a:6d: ce:a3:b7:2b:e4:c2:e7:40:68:82:8e:27:b9:54:b3:35:a6:82: ce:84:83:f8:e3:ec:cf:22:62:1b:cd:a6:09:e0:0b:63:30:de: 3f:17:1b:d0:6d:5e:f4:b0:2c:00:eb:67:f8:41:af:72:91:46: 6a:26:21:e7:67:99:2d:06:dc:a4:3b:a4:92:11:44:25:2d:30: 2a:f9:cb:58:b0:5c:4d:6b:bb:b3:a2:61:1e:a7:81:fb:14:b2: 78:42:9d:44:b4:11:ac:c6:e2:38:86:72:6e:eb:6a:ec:c0:6c: d8:b9:a9:6f:ef:f5:5d:24:01:c5:14:bf:96:87:24:38:3c:e9: db:59:c3:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNTEyMDMwNTU2NTFaFw0yNTEyMTAwNTU2NTFaMBgxFjAUBgNV BAMTDTY5MmZkMTI0LTJjZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCspDpWhhbBDGB9u3BX9d3Dp4oU23G4bnSND+hdyr1uAAnyKp92AXt6Kjv7FGh9 ISJInIjxO9oyCwV/HMFGiLyptlZR7QrzKKqWYlM6STSiArfwvcv5expp+yI8J3Z2 p+OD5fBq2mgt3AFTlMpy6U9AG7j2+WWUJ67/3kjYl3rECF4ODizHNBvidMS0VvPC 13MuOMm4JppixdgjFGF1djpNo+bXuy4Cf0Jexp2KEBayVedB04ZofxNDVsoODDd3 /tbmS4vKePiBpPDTinscRmEaOy2K0v3bJI+sZsxIso615N8iApDY8fOyDUWrm+Fr jWDqPGVGexTu1iLVUXOA2tAPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnmG1LuHf 9jxuhxFlzoM3xO2Mr9owHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGDsOJjhf2pHU2nIq94F9Vu+7NYnwSr6E0XKkoWCJBgLSm89K91ArzA1 s8DpJMLFa049KtDEWkd8iLyVqdUNuDyKRdpsnxvjMB+BWExfempgRObIMIszK/Hl 7y4taXPv750yukca9APaD6eqrUUMrd5/1q+pH8I7ddteX3dabc6jtyvkwudAaIKO J7lUszWmgs6Eg/jj7M8iYhvNpgngC2Mw3j8XG9BtXvSwLADrZ/hBr3KRRmomIedn mS0G3KQ7pJIRRCUtMCr5y1iwXE1ru7OiYR6ngfsUsnhCnUS0EazG4jiGcm7rauzA bNi5qW/v9V0kAcUUv5aHJDg86dtZw0U= -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:53 2025 by rpki-client