This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: YzLbJKYd4IsUTzH88bGJbrTEd1nrRDNmK75dBxKWVzk= Subject key identifier: D8:70:67:EB:62:83:F0:3E:D0:E4:F0:AF:FE:36:BD:31:38:F3:0F:79 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 24DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 24BA Signing time: Mon 22 Dec 2025 15:37:03 +0000 Manifest this update: Mon 22 Dec 2025 15:37:03 +0000 Manifest next update: Mon 29 Dec 2025 15:37:03 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: D4YciA1b08OpYNxUYfqIZYqcF9LlmOgdvb8st5mwULE=) 2: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=) 3: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9434 (0x24da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Dec 22 15:37:03 2025 GMT Not After : Dec 29 15:37:03 2025 GMT Subject: CN=6949659f-0508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:cd:09:e9:bb:73:aa:1c:13:f8:96:1f:e5: e4:8e:67:f4:29:6c:eb:44:a2:9d:66:63:ea:76:2b: 76:f1:d4:8b:ed:4d:9f:88:8f:49:6a:29:57:b5:05: e5:13:a7:ea:55:86:94:25:cf:ba:86:13:51:21:85: 23:80:dd:d2:c1:fb:af:4d:12:c8:cd:2b:29:c2:3c: 9f:dc:ff:e1:f4:8b:c9:73:5c:eb:9e:53:01:cb:77: 65:c8:43:15:c5:38:14:ce:ef:4f:dd:e1:eb:d4:58: 88:33:6c:0e:1a:d5:18:a0:2b:ad:ce:30:fd:a1:54: 3b:21:c5:48:41:c8:d5:5b:19:25:cd:88:6d:9c:dd: ab:a5:a3:87:08:5f:98:ff:35:39:18:df:78:f6:80: c5:58:95:3e:69:8b:08:92:02:da:c7:5a:69:34:dd: ea:53:5a:db:c5:9b:d0:b0:0f:76:99:ed:0e:68:cf: c5:fd:b2:fd:d4:6c:d6:f3:ce:6e:ad:c9:25:d3:fc: 48:11:15:0e:cf:76:0d:2e:d4:50:6d:80:d8:f3:29: 4f:76:f7:9f:6c:eb:05:0f:c0:81:e8:a9:d7:fb:f5: 08:cb:51:fa:f6:bf:33:78:7c:fa:cc:39:86:3e:f6: 44:71:1f:c4:45:f1:3b:50:b5:d5:06:f5:33:b2:c9: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:67:EB:62:83:F0:3E:D0:E4:F0:AF:FE:36:BD:31:38:F3:0F:79 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:40:f3:cd:43:15:a7:f2:55:1d:06:d4:ae:6d:5e:70:28:ae: d3:f2:83:cb:0c:6c:ab:32:42:47:7f:99:bb:be:a6:d3:52:33: 23:d2:b8:41:b1:38:d4:fa:cd:69:38:7f:a8:cd:3f:1c:72:b5: f4:7c:ea:5c:32:5a:4a:80:1c:39:0c:b5:e8:aa:bf:08:dc:ea: ed:ce:52:d3:2c:72:a0:f5:a8:a8:40:06:ff:a0:96:7a:a1:d3: 5b:c4:97:a5:86:b4:14:26:ac:76:d8:a2:cd:8d:f7:1b:66:6a: 73:42:36:52:eb:3f:d0:7a:7a:f1:a2:62:72:8a:7e:db:97:a7: a5:d3:36:2f:05:f3:e6:70:48:d4:d2:1c:92:93:18:e7:36:aa: b2:f9:82:69:40:16:fa:1e:f4:47:31:5b:8e:fb:0c:7d:c2:4c: 47:83:b7:ae:1c:99:ea:50:64:90:20:74:79:67:f9:18:0c:8d: 50:ea:2b:73:9b:41:b5:0e:ea:8d:39:08:c3:7d:84:9c:86:88: 42:74:42:ee:d2:96:8f:48:c7:67:c7:95:9d:8a:e5:ae:6c:ca: 72:c7:87:bf:4e:56:4d:7a:b0:87:d1:20:7e:85:cc:ec:f5:b0: 02:9d:02:6a:5d:10:05:06:70:15:54:a2:06:1e:64:d7:28:26: 7a:ce:da:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUxMjIyMTUzNzAzWhcNMjUxMjI5MTUzNzAzWjAYMRYwFAYD VQQDDA02OTQ5NjU5Zi0wNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9XNCem7c6ocE/iWH+Xkjmf0KWzrRKKdZmPqdit28dSL7U2fiI9JailXtQXl E6fqVYaUJc+6hhNRIYUjgN3SwfuvTRLIzSspwjyf3P/h9IvJc1zrnlMBy3dlyEMV xTgUzu9P3eHr1FiIM2wOGtUYoCutzjD9oVQ7IcVIQcjVWxklzYhtnN2rpaOHCF+Y /zU5GN949oDFWJU+aYsIkgLax1ppNN3qU1rbxZvQsA92me0OaM/F/bL91GzW885u rckl0/xIERUOz3YNLtRQbYDY8ylPdvefbOsFD8CB6KnX+/UIy1H69r8zeHz6zDmG PvZEcR/ERfE7ULXVBvUzssn44QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhwZ+ti g/A+0OTwr/42vTE48w95MB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLQPPNQxWn8lUdBtSubV5wKK7T8oPLDGyrMkJHf5m7vqbTUjMj0rhB sTjU+s1pOH+ozT8ccrX0fOpcMlpKgBw5DLXoqr8I3OrtzlLTLHKg9aioQAb/oJZ6 odNbxJelhrQUJqx22KLNjfcbZmpzQjZS6z/QenrxomJyin7bl6el0zYvBfPmcEjU 0hySkxjnNqqy+YJpQBb6HvRHMVuO+wx9wkxHg7euHJnqUGSQIHR5Z/kYDI1Q6itz m0G1DuqNOQjDfYSchohCdELu0paPSMdnx5WdiuWubMpyx4e/TlZNerCH0SB+hczs 9bACnQJqXRAFBnAVVKIGHmTXKCZ6ztqi -----END CERTIFICATE-----Generated at Tue Dec 23 21:15:35 2025 by rpki-client