This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: jerUt4JM8jE//PACPjIOMs0dqOqOTsY6Uy6r+9Nyrb4= Subject key identifier: 06:53:CE:40:6C:A0:78:ED:3C:01:48:1C:50:89:64:80:23:A1:DB:5E Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0D08 Signing time: Sun 14 Dec 2025 17:48:41 +0000 Manifest this update: Sun 14 Dec 2025 17:48:40 +0000 Manifest next update: Sun 21 Dec 2025 17:48:40 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: GOwDd99zhjJn6rLr/3stgLxEYQpZxFa7eRjeYH518o8=) 2: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: m0eQJegSB2UL0Yg1NDkzUW3i5WishCBL/vQWvaDkx2c=) 3: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: +sG8NbgnYW/5yKj+KS6Bj5dJEC1uPTYbZ5sH5bpsSVc=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: PiQ5Nr30+J6cFI8PcO8QaeRngY6br7QeoIsKBt+5WrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: Dec 14 17:48:40 2025 GMT Not After : Dec 21 17:48:40 2025 GMT Subject: CN=693ef878-fec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:f6:27:3b:5c:15:9d:d8:b7:38:7f:a4:5c: 57:d0:b8:3f:99:64:90:c3:65:8c:1b:0a:3b:81:82: d9:2b:c4:a2:20:fd:6c:e1:b0:f3:ed:b1:c4:2d:29: 5b:4e:12:72:62:a2:2a:98:32:76:f9:77:e7:b4:d3: 01:8a:15:4c:6a:26:2a:59:7c:3c:83:9f:51:19:dd: d4:33:fc:00:19:8b:fb:b5:a6:a8:f6:b4:77:15:a6: 15:ff:1c:d9:45:90:36:d5:d8:e2:1e:49:b5:91:9b: 99:4b:30:0c:c2:45:dc:2c:d2:56:59:7b:09:93:9c: 36:a0:37:4a:c3:17:b6:b1:e6:32:04:21:8f:74:c7: 23:8b:6b:57:eb:15:9e:a4:ae:da:36:a8:f5:8f:c6: 54:15:0d:b6:e0:19:1c:cf:b8:f0:4e:b1:ae:ba:37: 52:ec:17:85:21:b4:ce:88:64:41:1c:71:84:36:0b: a9:a1:22:8e:3d:f2:25:25:a7:98:3a:c6:b8:63:b6: 40:92:37:03:94:ef:f8:78:d8:02:80:41:43:85:77: f3:21:38:70:aa:9c:2d:b1:ba:00:01:ba:48:6b:7b: fa:5a:53:09:de:cf:75:a7:68:26:26:3b:66:88:92: 6e:be:70:de:01:53:d3:11:50:40:51:0f:1f:c8:ec: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:53:CE:40:6C:A0:78:ED:3C:01:48:1C:50:89:64:80:23:A1:DB:5E X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f0:65:81:f0:e8:22:4d:e5:f4:c4:06:7e:b9:e1:00:71:d8: f1:dc:70:94:6d:32:7b:de:d5:67:81:71:95:62:9f:e5:46:51: d2:db:e3:3f:ac:7e:88:3c:fa:7c:5f:e5:fb:22:95:e7:23:68: 36:00:29:46:a0:2c:07:00:ad:31:91:dd:b8:27:d3:b2:1f:f0: d6:ad:f8:5f:4e:40:17:59:70:f4:d3:7b:08:a2:60:13:4a:fa: af:c0:18:9f:8e:91:6b:77:1a:76:03:de:e3:25:f3:3d:7e:71: 38:2c:40:0c:3f:4b:72:8a:94:1b:cc:d6:4d:b7:1b:65:60:6b: e4:50:bb:52:48:23:ba:2e:39:8b:e4:b4:3a:f1:9d:af:6f:10: 0a:15:33:f7:7d:8a:d9:07:7e:3a:62:b2:6a:93:69:39:2d:5b: 14:04:4c:55:16:b2:58:fa:2d:01:0e:37:45:7d:19:03:a6:77: 24:de:a2:52:68:21:8d:70:c1:61:d7:96:f0:e5:df:88:fe:ca: 0e:da:94:95:be:6e:94:fb:77:a2:b2:1e:b4:0d:0f:ef:c8:a9: 92:4c:d1:4d:37:fa:9c:e6:f8:92:a4:d9:7d:ca:15:29:53:1d: db:18:8a:5f:95:5a:9b:b4:07:bf:40:e7:06:48:3e:cd:ba:d2: 39:50:6a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjUxMjE0MTc0ODQwWhcNMjUxMjIxMTc0ODQwWjAYMRYwFAYD VQQDDA02OTNlZjg3OC1mZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUL2JztcFZ3Ytzh/pFxX0Lg/mWSQw2WMGwo7gYLZK8SiIP1s4bDz7bHELSlb ThJyYqIqmDJ2+XfntNMBihVMaiYqWXw8g59RGd3UM/wAGYv7taao9rR3FaYV/xzZ RZA21djiHkm1kZuZSzAMwkXcLNJWWXsJk5w2oDdKwxe2seYyBCGPdMcji2tX6xWe pK7aNqj1j8ZUFQ224Bkcz7jwTrGuujdS7BeFIbTOiGRBHHGENgupoSKOPfIlJaeY Osa4Y7ZAkjcDlO/4eNgCgEFDhXfzIThwqpwtsboAAbpIa3v6WlMJ3s91p2gmJjtm iJJuvnDeAVPTEVBAUQ8fyOyFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZTzkBs oHjtPAFIHFCJZIAjodteMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz8GWB8OgiTeX0xAZ+ueEAcdjx3HCUbTJ73tVngXGVYp/lRlHS2+M/ rH6IPPp8X+X7IpXnI2g2AClGoCwHAK0xkd24J9OyH/DWrfhfTkAXWXD003sIomAT SvqvwBifjpFrdxp2A97jJfM9fnE4LEAMP0tyipQbzNZNtxtlYGvkULtSSCO6LjmL 5LQ68Z2vbxAKFTP3fYrZB346YrJqk2k5LVsUBExVFrJY+i0BDjdFfRkDpnck3qJS aCGNcMFh15bw5d+I/soO2pSVvm6U+3eish60DQ/vyKmSTNFNN/qc5viSpNl9yhUp Ux3bGIpflVqbtAe/QOcGSD7NutI5UGrG -----END CERTIFICATE-----Generated at Tue Dec 16 13:04:39 2025 by rpki-client