This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: HwXLddWFN3e8DnxrgW8D925E6nsugdljoaeOLO5xTuQ= Subject key identifier: B6:4D:59:BD:EB:EE:7E:69:01:A8:5F:30:E6:47:48:7F:6E:E8:FF:D9 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04FB Signing time: Mon 22 Dec 2025 22:48:39 +0000 Manifest this update: Mon 22 Dec 2025 22:48:39 +0000 Manifest next update: Mon 29 Dec 2025 22:48:39 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: OecIRFI/7BqFkeX6lTplY5Mr5DZ4qCQFur3c6d+gvZA=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Dec 22 22:48:39 2025 GMT Not After : Dec 29 22:48:39 2025 GMT Subject: CN=6949cac7-2def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:a9:04:0c:48:ad:a8:09:25:f4:2c:59:47: 5e:2e:f2:87:fb:3c:6a:ed:76:da:79:a2:f3:65:29: 8e:f5:8b:37:3b:1e:2c:94:c6:fc:c4:fe:3e:9a:b8: df:ad:81:c7:1e:b8:1f:e4:1e:34:3a:0e:7b:bf:ee: bf:20:27:b1:92:60:38:e7:36:6e:eb:f2:31:88:f4: 4d:95:13:4f:4b:1e:69:54:a3:6e:cd:34:a0:e1:0c: 57:a0:ef:de:a2:4c:4a:7f:d0:0a:bf:b2:06:73:08: 42:02:97:ea:44:10:b1:4f:6b:2e:e2:bc:0a:01:f2: 9e:fb:90:f7:aa:2f:00:d6:fa:27:d6:f1:46:a5:4a: b5:a8:61:39:d8:79:52:50:08:2d:bb:a5:07:66:2a: e5:66:d0:32:11:a6:13:b0:07:79:9f:55:87:d3:e8: df:01:4a:44:36:e3:17:b4:cd:63:18:24:9c:16:3c: 6a:cb:68:dd:0e:9a:0d:ed:c3:70:8f:ec:44:85:df: 70:01:33:ec:58:ee:c3:5b:8d:59:a0:7a:76:a8:cc: 89:94:26:0f:d8:65:56:ff:3a:4e:72:67:fa:9f:26: 9e:a0:18:97:ed:75:74:9f:ef:75:cd:48:68:43:68: e6:40:ac:10:16:b0:31:13:f9:4a:65:1a:c0:25:e9: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4D:59:BD:EB:EE:7E:69:01:A8:5F:30:E6:47:48:7F:6E:E8:FF:D9 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:44:44:b1:75:f8:06:c0:ff:66:f1:b5:c6:53:eb:e9:74:22: 94:7c:02:52:be:a9:77:e8:f4:d1:cb:fa:a9:95:b0:08:8f:94: 33:4d:e0:57:e9:32:eb:d4:a8:52:9a:7a:c4:ce:0c:87:66:97: 41:01:80:c4:9e:71:83:7c:c2:32:98:f0:4b:14:59:48:a7:ec: f3:a2:6a:81:84:ad:07:8c:58:08:7e:a4:fd:a7:95:73:ca:38: 4c:89:79:c7:24:88:84:a9:3c:e4:40:d9:c0:d1:fc:77:e2:e6: 8c:71:7d:99:07:7d:16:44:b5:8f:96:67:d8:07:81:e4:d7:56: 12:f8:ef:56:7a:03:75:d3:d9:56:d2:1f:7f:ce:70:0f:0a:e7: 06:54:72:d3:dd:87:0e:30:00:24:4b:4a:67:ae:7c:5e:71:7e: 4f:a5:ac:d7:5f:d2:30:52:4a:05:64:68:67:5a:cc:77:62:ce: aa:ab:ce:76:d2:af:e7:97:49:c5:36:de:e8:e0:43:e5:08:99: 7e:62:75:ac:ef:82:2f:10:60:23:05:46:20:fc:ba:d8:c3:a1: d7:7c:b5:f7:a2:2a:81:22:c7:6f:65:dd:9f:7d:ab:16:92:65: c6:96:bb:e5:d9:8e:20:15:25:82:6a:66:a7:31:05:d2:0b:cf: 84:e5:a9:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUxMjIyMjI0ODM5WhcNMjUxMjI5MjI0ODM5WjAYMRYwFAYD VQQDDA02OTQ5Y2FjNy0yZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFKpBAxIragJJfQsWUdeLvKH+zxq7XbaeaLzZSmO9Ys3Ox4slMb8xP4+mrjf rYHHHrgf5B40Og57v+6/ICexkmA45zZu6/IxiPRNlRNPSx5pVKNuzTSg4QxXoO/e okxKf9AKv7IGcwhCApfqRBCxT2su4rwKAfKe+5D3qi8A1von1vFGpUq1qGE52HlS UAgtu6UHZirlZtAyEaYTsAd5n1WH0+jfAUpENuMXtM1jGCScFjxqy2jdDpoN7cNw j+xEhd9wATPsWO7DW41ZoHp2qMyJlCYP2GVW/zpOcmf6nyaeoBiX7XV0n+91zUho Q2jmQKwQFrAxE/lKZRrAJemyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZNWb3r 7n5pAahfMOZHSH9u6P/ZMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWRESxdfgGwP9m8bXGU+vpdCKUfAJSvql36PTRy/qplbAIj5QzTeBX 6TLr1KhSmnrEzgyHZpdBAYDEnnGDfMIymPBLFFlIp+zzomqBhK0HjFgIfqT9p5Vz yjhMiXnHJIiEqTzkQNnA0fx34uaMcX2ZB30WRLWPlmfYB4Hk11YS+O9WegN109lW 0h9/znAPCucGVHLT3YcOMAAkS0pnrnxecX5PpazXX9IwUkoFZGhnWsx3Ys6qq852 0q/nl0nFNt7o4EPlCJl+YnWs74IvEGAjBUYg/LrYw6HXfLX3oiqBIsdvZd2ffasW kmXGlrvl2Y4gFSWCamanMQXSC8+E5anU -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:37 2025 by rpki-client