This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: WoEkR63S/PyM1fBVoIAOQL3xPY2g6e4aDAneOlbPHVs= Subject key identifier: 08:C1:79:53:8E:8A:49:98:E1:CC:F7:D7:4F:5E:FA:07:BD:52:30:E4 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03D1 Signing time: Wed 10 Dec 2025 23:03:51 +0000 Manifest this update: Wed 10 Dec 2025 23:03:51 +0000 Manifest next update: Wed 17 Dec 2025 23:03:51 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: IylTrAGSliCtzFysPfHYLjZ/JOjP2F76VA8YGFGrUog=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 23:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Dec 10 23:03:51 2025 GMT Not After : Dec 17 23:03:51 2025 GMT Subject: CN=6939fc57-83b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c1:35:1d:76:bf:de:a2:c2:b1:ff:d5:81:cd: ee:88:76:c1:78:fa:f0:29:91:d5:50:e9:35:32:cb: a2:da:3d:88:d6:30:e0:51:b3:2a:e0:ec:46:c1:f5: a6:84:4c:33:e0:f0:6b:8c:47:79:5c:f7:5d:d0:be: 6e:8b:c8:ff:50:ec:56:52:c9:68:12:7e:ae:d8:e2: 06:8f:a2:78:9b:56:ef:b8:61:9d:d6:75:97:cf:97: fc:6e:88:f1:31:06:ab:ff:89:9b:82:4e:4b:ce:42: ce:43:43:7d:78:27:4b:3a:74:5d:59:fa:c1:2d:39: af:5c:be:05:44:ca:5c:68:ff:1c:8a:73:2a:f3:64: 80:a3:e9:89:d5:6d:1b:40:b5:b8:cd:34:46:84:ed: 18:24:f9:b2:88:61:d5:63:99:19:fa:8c:42:a7:5e: 43:43:27:67:87:3b:23:d6:0f:40:73:41:9d:4f:2c: 9e:44:24:f9:6e:b2:22:38:62:fb:33:8e:5f:ce:f3: a1:ad:a3:e7:b4:92:65:77:73:0b:fe:38:86:5c:00: 41:e9:b9:57:13:96:12:d3:d6:be:41:de:0a:58:8e: 22:23:cb:d1:72:ed:38:48:78:79:35:65:b0:b1:10: a4:8e:bf:ec:f2:86:8e:bb:88:8a:0f:86:57:26:8c: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C1:79:53:8E:8A:49:98:E1:CC:F7:D7:4F:5E:FA:07:BD:52:30:E4 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b2:75:18:55:c6:8b:8a:01:e4:2c:26:ae:e9:ac:8b:98:08: f8:a8:8c:bc:f3:f4:c4:15:e2:e1:cc:a3:80:52:9f:0b:28:41: b2:98:19:7b:f4:c9:72:72:f4:e5:5b:49:50:f5:66:bb:8d:94: f2:48:76:4a:50:e1:fd:ce:f5:72:78:98:6e:75:ce:4f:74:e8: 19:18:d9:25:60:d5:47:51:be:1c:ce:19:09:34:0a:43:c8:f4: 7d:6b:b5:02:9e:17:b8:bc:79:29:1b:f9:92:27:cc:1e:a4:a1: b8:99:61:7d:31:b6:9e:36:60:bf:20:34:31:b3:91:28:95:39: 06:b7:39:08:a8:62:c8:fc:fe:8e:50:57:6d:22:15:b2:1d:fb: 63:a3:fb:cc:8b:32:73:6a:11:15:f6:b0:40:7d:7c:3b:91:5d: 81:57:63:6d:9d:63:9c:ba:20:15:2a:0a:6b:7b:bd:4c:99:7c: 79:f1:98:d8:58:04:b0:d5:7e:1a:68:6f:a2:67:7a:78:22:13: 90:b1:25:47:56:de:ef:75:5f:c5:ef:d0:0b:bc:ae:4e:6d:b8: b6:fe:e6:b7:09:6a:18:5e:60:02:1d:32:55:e8:44:4d:83:c5: 1d:84:3d:3e:ed:60:e2:0d:03:11:4d:be:2a:4e:6a:ed:54:90: 3b:01:52:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUxMjEwMjMwMzUxWhcNMjUxMjE3MjMwMzUxWjAYMRYwFAYD VQQDEw02OTM5ZmM1Ny04M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sE1HXa/3qLCsf/Vgc3uiHbBePrwKZHVUOk1Msui2j2I1jDgUbMq4OxGwfWm hEwz4PBrjEd5XPdd0L5ui8j/UOxWUsloEn6u2OIGj6J4m1bvuGGd1nWXz5f8bojx MQar/4mbgk5LzkLOQ0N9eCdLOnRdWfrBLTmvXL4FRMpcaP8cinMq82SAo+mJ1W0b QLW4zTRGhO0YJPmyiGHVY5kZ+oxCp15DQydnhzsj1g9Ac0GdTyyeRCT5brIiOGL7 M45fzvOhraPntJJld3ML/jiGXABB6blXE5YS09a+Qd4KWI4iI8vRcu04SHh5NWWw sRCkjr/s8oaOu4iKD4ZXJoxUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjBeVOO ikmY4cz3109e+ge9UjDkMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdsnUYVcaLigHkLCau6ayLmAj4qIy88/TEFeLhzKOAUp8LKEGymBl7 9MlycvTlW0lQ9Wa7jZTySHZKUOH9zvVyeJhudc5PdOgZGNklYNVHUb4czhkJNApD yPR9a7UCnhe4vHkpG/mSJ8wepKG4mWF9MbaeNmC/IDQxs5EolTkGtzkIqGLI/P6O UFdtIhWyHftjo/vMizJzahEV9rBAfXw7kV2BV2NtnWOcuiAVKgpre71MmXx58ZjY WASw1X4aaG+iZ3p4IhOQsSVHVt7vdV/F79ALvK5Obbi2/ua3CWoYXmACHTJV6ERN g8UdhD0+7WDiDQMRTb4qTmrtVJA7AVKS -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:47 2025 by rpki-client