This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: cm2Sh1JceQV0rOpPd7bdnyqGT3fjb+vQmUhmEd3GO64= Subject key identifier: D8:C7:4D:B4:0E:BA:C1:94:ED:31:B3:48:68:19:6F:5D:35:3E:75:36 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 04CB Signing time: Sat 20 Dec 2025 23:05:44 +0000 Manifest this update: Sat 20 Dec 2025 23:05:43 +0000 Manifest next update: Sat 27 Dec 2025 23:05:43 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: G3Kl5MphVRpUuCODiOtiayhcF3c+kvCkbFOiaPfh4DY=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: h/s9RyXLHAI1sqd9uwegBKrHWXm8UIc8RPznkO0q/SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Dec 20 23:05:43 2025 GMT Not After : Dec 27 23:05:43 2025 GMT Subject: CN=69472bc7-1d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:53:41:93:98:3e:7c:28:a2:d7:b0:d3:af: 77:7a:a2:41:c6:0e:46:22:8a:13:66:0f:2d:46:b8: ac:9b:67:53:81:6b:c8:29:03:8b:91:3b:a4:75:1f: 03:8d:b2:e5:a7:15:79:3b:3a:0d:f5:e2:8a:57:61: 88:6f:60:56:74:6d:b2:d1:ee:b0:aa:a7:2b:24:1d: 19:07:d7:ad:52:9c:2e:2e:48:c9:c8:ca:fb:8b:17: 66:5f:38:8c:d9:cd:5e:04:f2:23:ee:67:2d:93:6a: 27:6d:47:81:a4:ed:34:f8:ef:62:18:5a:b2:30:55: c2:c8:86:8e:6e:a3:bf:90:16:9b:2d:d2:66:75:45: 27:14:0b:2d:7e:e0:4e:c9:cd:fc:02:ab:c5:06:46: 17:d2:25:98:99:31:4d:9c:3b:9a:be:a1:d3:2f:9c: b1:85:df:1f:10:eb:b9:69:86:d2:52:cc:e3:58:a5: fc:25:9f:17:8a:d2:9c:c7:83:3b:03:d0:df:93:29: ce:7a:09:e5:3c:d0:de:cb:ab:35:20:11:d3:e5:13: 41:1a:08:7e:43:56:7e:37:40:11:8c:39:33:11:df: fd:7d:73:92:3f:8e:03:7f:65:e2:0c:bf:01:1b:07: 57:d7:99:a1:91:47:62:b2:92:21:b6:f9:be:a2:73: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:4D:B4:0E:BA:C1:94:ED:31:B3:48:68:19:6F:5D:35:3E:75:36 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5c:6f:5a:5a:89:3f:cb:39:8a:57:4b:c5:67:a3:17:05:fa: 14:7f:73:18:e4:13:f0:a9:5b:00:21:c1:3b:e2:d7:69:09:95: e1:79:fa:ee:10:b4:1a:42:b2:f3:01:54:d3:1f:1c:7b:a6:14: fd:ff:05:85:ef:43:02:35:6c:7e:75:03:9d:7e:3d:ee:ba:56: 4e:18:bd:80:71:8a:d6:fb:f9:b2:6a:6a:2e:b9:70:09:c5:8e: bd:a9:82:d1:fa:9d:09:ef:23:2c:5d:3c:f6:40:2c:49:89:e1: 94:24:b5:b3:b2:41:d1:d2:fc:45:a9:86:81:ee:47:78:71:a3: 4f:75:69:b9:8d:56:c2:3e:10:9b:04:11:e9:c1:54:8b:07:c0: dd:49:76:59:ca:88:74:44:e6:25:77:1d:9b:c4:fc:b7:24:c1: f0:54:1a:63:12:38:32:d8:c8:94:b6:90:c2:ca:98:91:21:31: fd:56:a7:f1:29:52:d3:bf:58:74:c7:06:e5:a6:69:10:87:c7: d2:58:b8:50:72:90:d1:f9:73:bc:73:f2:9a:37:ac:ee:9e:82: 60:3d:b8:c4:8d:c7:a0:a8:c6:b0:42:65:18:49:fa:81:33:8b: 41:9c:f1:c3:d6:4d:c2:f5:45:27:2c:ee:87:22:b4:17:c9:0d: 23:f8:95:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUxMjIwMjMwNTQzWhcNMjUxMjI3MjMwNTQzWjAYMRYwFAYD VQQDDA02OTQ3MmJjNy0xZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv5TQZOYPnwootew0693eqJBxg5GIooTZg8tRrism2dTgWvIKQOLkTukdR8D jbLlpxV5OzoN9eKKV2GIb2BWdG2y0e6wqqcrJB0ZB9etUpwuLkjJyMr7ixdmXziM 2c1eBPIj7mctk2onbUeBpO00+O9iGFqyMFXCyIaObqO/kBabLdJmdUUnFAstfuBO yc38AqvFBkYX0iWYmTFNnDuavqHTL5yxhd8fEOu5aYbSUszjWKX8JZ8XitKcx4M7 A9DfkynOegnlPNDey6s1IBHT5RNBGgh+Q1Z+N0ARjDkzEd/9fXOSP44Df2XiDL8B GwdX15mhkUdispIhtvm+onOKLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjHTbQO usGU7TGzSGgZb101PnU2MB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMXG9aWok/yzmKV0vFZ6MXBfoUf3MY5BPwqVsAIcE74tdpCZXhefru ELQaQrLzAVTTHxx7phT9/wWF70MCNWx+dQOdfj3uulZOGL2AcYrW+/myamouuXAJ xY69qYLR+p0J7yMsXTz2QCxJieGUJLWzskHR0vxFqYaB7kd4caNPdWm5jVbCPhCb BBHpwVSLB8DdSXZZyoh0ROYldx2bxPy3JMHwVBpjEjgy2MiUtpDCypiRITH9Vqfx KVLTv1h0xwblpmkQh8fSWLhQcpDR+XO8c/KaN6zunoJgPbjEjcegqMawQmUYSfqB M4tBnPHD1k3C9UUnLO6HIrQXyQ0j+JXr -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:47 2025 by rpki-client