This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: hCr5j4MW5/Ee5c53f/wGx1MCRg6AsX7UB/byGXp92Ek= Subject key identifier: 53:A8:24:8E:BB:FC:C5:F1:D9:4C:C7:08:45:68:56:BC:72:06:19:6B Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04F9 Signing time: Mon 22 Dec 2025 22:45:58 +0000 Manifest this update: Mon 22 Dec 2025 22:45:58 +0000 Manifest next update: Mon 29 Dec 2025 22:45:58 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: rVRO+dnXWQ3NTqBLTOjlWEWlOyalHE+yETYUByEgeZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Dec 22 22:45:58 2025 GMT Not After : Dec 29 22:45:58 2025 GMT Subject: CN=6949ca26-3006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:61:0f:6a:ce:4d:59:fc:b0:3b:15:fc:c4: a3:51:b4:f6:21:cb:f1:24:08:f0:f7:0b:df:6d:87: 4c:b8:40:cb:88:e6:c0:99:f3:4e:98:f8:5a:df:a5: 01:08:e9:9b:c1:58:c8:83:2d:f3:47:84:db:86:1b: 03:c2:46:2d:c6:3d:dc:ce:79:e3:7f:3d:cc:a5:b7: d2:85:63:74:02:bf:12:8d:bd:7a:b9:64:32:3d:75: 68:ba:30:63:bb:c9:8b:df:17:09:65:e1:9b:3a:b9: d2:dc:3f:8f:5f:32:3b:43:eb:21:41:8f:5e:c7:35: 05:3c:a5:9b:e4:76:88:8e:68:fd:00:ce:aa:0c:87: fc:32:f3:d7:eb:d0:e8:fe:a6:36:1a:33:ed:95:ac: be:ee:2a:e4:77:4a:03:43:74:e1:c7:84:a4:80:e7: 49:0c:78:40:97:d0:5e:11:86:c6:c3:26:26:91:6b: e7:28:16:1d:a6:fa:b5:c1:62:49:cc:3e:0e:1a:3d: d6:96:5a:fb:5b:e4:fa:ba:4f:ca:ff:a9:01:82:5c: 5f:b3:58:29:60:49:40:fd:3f:ea:f6:67:d2:76:75: 01:0c:20:ac:77:5d:b8:f7:62:e5:49:ac:78:24:97: b8:d7:87:64:93:22:1b:30:a9:93:9c:4e:c4:77:fa: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A8:24:8E:BB:FC:C5:F1:D9:4C:C7:08:45:68:56:BC:72:06:19:6B X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:19:98:e9:48:26:72:4b:c2:0b:be:90:5b:d1:94:8f:bd:e4: 74:64:ba:33:a0:b5:da:91:59:b4:8f:ac:9e:48:c3:63:c9:9d: 69:4f:95:af:59:22:ca:eb:c9:62:42:ec:e5:85:a3:58:5f:96: 38:82:10:ae:7d:c6:6e:b0:35:61:4c:b6:91:f1:cc:cf:bc:cd: b5:3c:0a:17:ca:1c:c0:6f:b3:d6:f4:91:c8:f6:23:55:e7:40: 6c:67:8d:a4:35:a3:b0:c4:0b:da:3c:87:27:ab:13:74:99:2d: 74:7b:d3:bd:51:b9:a1:c8:0d:9e:1e:c8:65:12:ea:c0:71:32: e8:d9:d9:f8:f9:18:8e:49:cf:49:8d:c7:ad:0e:f3:94:2e:63: d2:5e:59:a4:d3:c2:54:8b:87:21:c6:fd:40:4e:56:c9:b9:82: e9:f4:f0:99:65:ec:3c:86:50:4f:c1:42:15:9a:92:15:45:c4: 19:02:09:10:44:2a:93:2b:3d:af:dd:ef:cb:56:d8:60:81:ba: 1b:74:6c:6c:a0:ec:d2:c5:00:e7:64:e8:cf:fd:6b:62:f3:24: 72:0f:65:bb:2d:2e:bb:3a:c9:ef:e4:f1:dc:62:a9:76:80:b5: 90:cd:3a:9b:93:d8:a4:33:75:4a:5c:28:94:14:39:ef:0a:97: 15:4f:c3:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUxMjIyMjI0NTU4WhcNMjUxMjI5MjI0NTU4WjAYMRYwFAYD VQQDDA02OTQ5Y2EyNi0zMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nphD2rOTVn8sDsV/MSjUbT2IcvxJAjw9wvfbYdMuEDLiObAmfNOmPha36UB COmbwVjIgy3zR4TbhhsDwkYtxj3cznnjfz3MpbfShWN0Ar8Sjb16uWQyPXVoujBj u8mL3xcJZeGbOrnS3D+PXzI7Q+shQY9exzUFPKWb5HaIjmj9AM6qDIf8MvPX69Do /qY2GjPtlay+7irkd0oDQ3Thx4SkgOdJDHhAl9BeEYbGwyYmkWvnKBYdpvq1wWJJ zD4OGj3Wllr7W+T6uk/K/6kBglxfs1gpYElA/T/q9mfSdnUBDCCsd12492LlSax4 JJe414dkkyIbMKmTnE7Ed/oWMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOoJI67 /MXx2UzHCEVoVrxyBhlrMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjGZjpSCZyS8ILvpBb0ZSPveR0ZLozoLXakVm0j6yeSMNjyZ1pT5Wv WSLK68liQuzlhaNYX5Y4ghCufcZusDVhTLaR8czPvM21PAoXyhzAb7PW9JHI9iNV 50BsZ42kNaOwxAvaPIcnqxN0mS10e9O9UbmhyA2eHshlEurAcTLo2dn4+RiOSc9J jcetDvOULmPSXlmk08JUi4chxv1ATlbJuYLp9PCZZew8hlBPwUIVmpIVRcQZAgkQ RCqTKz2v3e/LVthggbobdGxsoOzSxQDnZOjP/Wti8yRyD2W7LS67Osnv5PHcYql2 gLWQzTqbk9ikM3VKXCiUFDnvCpcVT8PJ -----END CERTIFICATE-----Generated at Tue Dec 23 18:14:07 2025 by rpki-client